The best free and best-value password manager: unlimited passwords on unlimited devices for $0, Premium for under $20 a year, and open source you can self-host. Less polished than 1Password.
What it is
Bitwarden is an open-source password manager whose free plan has no device or password limit and includes passkeys and sharing with one other person. Premium ($19.80 a year) adds a built-in 2FA authenticator, emergency access, vault health reports and file attachments; Families is $47.88 a year for up to 6 people. Teams and businesses can self-host the server. 2026 security record: the February ETH Zurich and USI study found 12 ways a compromised Bitwarden server could attack vaults (the most of the four tested); Bitwarden says it has never been breached and has been fixing the findings. On April 23, 2026 the npm package for the Bitwarden command-line tool, version 2026.4.0, shipped with credential-stealing malware in a supply-chain attack; the browser extensions and apps were not that package. In October 2026 a medium-severity authorization bug in self-hosted Bitwarden Server on Entity Framework backends was fixed in 2026.10.1. Checked November 2026.
Best for
- Anyone who wants a free password manager on every device
- Families on a budget (6 people for $47.88 a year)
- Technical users and teams that want open source or self-hosting
What we like
- Free plan with unlimited passwords and devices
- Premium at $19.80 a year is the cheapest paid tier of the big names
- Open source, audited, and self-hostable
What to watch
- Apps and autofill feel plainer and slower than 1Password
- Most attack paths (12) in the 2026 ETH Zurich server-compromise study
- Its CLI npm package was hijacked in April 2026 (version 2026.4.0)
- Built-in 2FA codes need Premium