Categories
Self-Hosted DevOps Security Encryption Identity Management Password Manager Secrets ManagementStars
Forks
Watchers
Developer links
Bitwarden
Backed by nearly 20,000 GitHub stars and ranked number one in G2's Enterprise User Satisfaction for eleven consecutive quarters, Bitwarden is the open-source password manager trusted by millions worldwide. The zero-knowledge encryption architecture ensures all vault data — passwords, passkeys, credit cards, identities, secure notes, and file attachments — is encrypted exclusively on client devices using AES-256 with PBKDF2-SHA256 or Argon2id key derivation and RSA-2048 for organization key exchange. Cross-platform clients span a web vault, browser extensions for Chrome, Firefox, Safari, Edge, Opera, Vivaldi, and Brave, native desktop apps for Windows, macOS, and Linux, mobile apps for iOS and Android, and a CLI for scripting. Bitwarden Send enables time-limited, password-protected sharing of text and files, while the built-in TOTP authenticator generates two-factor codes alongside stored credentials. Enterprise deployments integrate with identity providers through SAML 2.0 and OpenID Connect SSO, automate provisioning via SCIM or Directory Connector supporting LDAP, Active Directory, Azure AD, Okta, and OneLogin, and enforce security policies with custom roles and granular permissions. Emergency access allows designated contacts to request vault view or takeover through configurable waiting periods with cryptographic key exchange. The Secrets Manager stores API keys, tokens, and infrastructure credentials with native GitHub Actions, GitLab CI/CD, Ansible, and Terraform integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Benefits
- Zero-Knowledge Encrypted Architecture
- All vault data is encrypted and decrypted exclusively on client devices using AES-256 with PBKDF2-SHA256 or Argon2id key derivation, ensuring no server-side plaintext access.
- Cross-Platform Unlimited Device Access
- Access credentials from web vault, browser extensions for seven browsers, native desktop apps for three operating systems, iOS and Android mobile apps, and a scriptable CLI.
- Enterprise Identity Integration
- Authenticate through SAML 2.0 or OpenID Connect SSO with trusted device support, automate provisioning via SCIM or Directory Connector for LDAP, AD, Azure AD, and Okta.
- Complete Self-Hosted Data Sovereignty
- Deploy the entire Bitwarden stack on your own infrastructure via Docker or Kubernetes Helm charts, supporting air-gapped environments and custom SSL certificate configurations.
Features
- Bitwarden Send
- Share text and files through time-limited, password-protected, access-counted links that auto-expire and auto-delete after configurable thresholds.
- Passkey Authentication
- Log in using FIDO2-compliant passkeys via WebAuthn PRF extension in web and browser clients, bypassing master password and two-step login entirely.
- Secrets Manager
- Store and inject API keys, tokens, and infrastructure credentials into CI/CD pipelines with native GitHub Actions, GitLab, Ansible, and Terraform integrations.
- Emergency Access
- Designate trusted contacts who can request vault view or takeover access through cryptographic key exchange with configurable waiting periods.
- Password Health Reports
- Identify weak, reused, and exposed passwords through automated vault health analysis and integration with Have I Been Pwned breach databases.