Additional client functionality includes: import of data from more than 50 password managers (such as LastPass, 1Password, and Keeper) passkey management; export to JSON, encrypted JSON, and CSV formats;[14] a random password generator; a password strength tester; autofill of login and other forms; integration with email alias services; ability to sync across unlimited platforms and devices; storage of an unlimited number of items; and storing a variety of information beyond (username-and-password pairs, including passkeys, TOTP seeds, debit and credit card numbers, billing data and other identity information, and secure notes (free-form text). Each item type can be extended by custom fields and file attachments, though these are restricted by file size depending on the subscription plan.[11][15] A feature called "Send" allows sharing of end-to-end encrypted text messages (free version) and files (paid versions). Any sent item optionally can be set with an expiration date, a maximum access limit, and a password.[16][17][18][19]
In June 2018, Cliqz performed a privacy and security review of the Bitwarden for Firefox browser extension and concluded that it would not negatively impact their users.[34] In October of that year, Bitwarden completed a security assessment, code audit, and cryptographic analysis from third-party security auditing firm Cure53.[35][36][37][38]
In July 2020, Bitwarden completed another security audit from security firm Insight Risk Consulting to evaluate the security of the Bitwarden network perimeter as well as penetration testing and vulnerability assessments against Bitwarden web services and applications. In August 2021, Bitwarden announced that network assessment (security assessment and penetration testing) for 2021 had been completed again by Insight Risk Consulting.[14][39]
In February 2023, Bitwarden released network security assessment and security assessment reports that were conducted by Cure53 again in May and October 2022 respectively.[40] The first related to penetration testing and security assessment across Bitwarden IPs, servers, and web applications.[41] The second related to penetration testing and source code audit against all Bitwarden password manager software components, including the core application, browser extension, desktop application, web application, and TypeScript library.[42]Ghacks reported that:[43]
No critical issues were discovered during the two audits. Two security issues that Cure53 rated high were discovered during the source code audit and penetration testing. These were fixed quickly by Bitwarden and the third-party HubSpot. All other issues were either rated low or informational only.
Reception
In January 2021, in its first password-protection program comparison, U.S. News & World Report selected Bitwarden as "Best Password Manager".[44] A month later, with Bitwarden competitor LastPass about to remove a feature from its free version, CNet recommended Bitwarden as the best free app for password synchronization across multiple devices,[45] while Lifehacker recommended it as "the best password manager for most people".[46]
Reviewers have praised the features offered in the software's free version, and (mostly) the low price of the premium tier compared to other managers.[45][47][48][49] The product was named the best "budget pick" in a Wirecutter password manager comparison.[50] Bitwarden's secure open-source implementation was also praised by reviewers.[47][49]
Nevertheless, Tom's Guide found some features to be less intuitive than they could be,[47] while PC Magazine criticized the price of the business tier as too high.[51]MobileSyrup was disappointed by the simplistic graphics of the user interface, and felt that it was missing a few features found in competitors' offerings.[48]
History
2016–2017
Bitwarden debuted in August 2016 with an initial release of mobile applications for iOS and Android, browser extensions for Chrome and Opera, and a Web-based "vault" (encrypted database). The browser extension for Firefox was later launched in February 2017.[52] The same month, the Brave web browser began including the Bitwarden extension as an optional replacement password manager.[53] In September 2017, Bitwarden launched a bug bounty program at HackerOne.[33][31]
2018
In January 2018, the Bitwarden browser extension was adapted to and released for Apple's Safari browser through the Safari Extensions Gallery.[54] In February, Bitwarden debuted as a stand-alone desktop application for macOS, Linux, and Windows. It was built as a web app variant of the browser extension, built with the Electron framework.[55] The Windows app was released alongside the Bitwarden extension for Microsoft Edge in the Microsoft Store a month later.[56][57] In May, Bitwarden released a command-line application enabling users to write scripted applications using data from their Bitwarden vaults.[20][58][59] In June 2018, following a review, Bitwarden was made available as an optional password manager in the Cliqz browser[34] (discontinued in 2020).
2022
In September 2022, the company announced $100M series B financing; the lead investor was PSG, with the existing investor Battery Ventures participating.[60][61] The investment would be used to accelerate product development and company growth to support its users and customers worldwide.[60][61]
2023
Example of passwordless authentication with Bitwarden
In January, Bitwarden announced the acquisition of Swedish startup Passwordless.dev for an undisclosed amount.[62] Passwordless.dev provided an open-source solution allowing developers to easily implement passwordless authentication based on the standards WebAuthn and FIDO2.[62][63]
Bitwarden also launched a beta software service allowing third-party developers the use of biometric sign-in technologies– including Apple's Touch ID and Face ID, and Microsoft's Windows Hello– in their apps.[62]
2024
On 1 May, Bitwarden launched its own multi-factor authentication app, Bitwarden Authenticator.[64] In October of that year, Bitwarden introduced changes to the dependencies of its desktop application to include a restricted-use SDK that may prevent some members of the public from compiling the application from source code, provoking concerns that Bitwarden is moving away from open-source principles. Bitwarden CTO Kyle Spearrin stated in response that it is an issue they plan to resolve, and is "merely a bug".[65]
↑ "Privacy Shield: Bitwarden Inc". Privacy Shield Network. International Trade Administration. 5 December 2020. Archived from the original on 11 September 2022. Retrieved 2 March 2021.
This page is based on this Wikipedia article Text is available under the CC BY-SA 4.0 license; additional terms may apply. Images, videos and audio are available under their respective licenses.
