How-To Guides

Set Up Bitwarden Password Manager

Stop reusing passwords. Bitwarden generates, stores, and auto-fills strong unique passwords on every device you own -- completely free and open source.

01. What Is Bitwarden?

Bitwarden is a free, open-source password manager that stores all your passwords inside an encrypted vault. Instead of memorising dozens of weak passwords (or worse, reusing the same one everywhere), you remember one strong master password. Bitwarden does the rest.

It works across every platform you use: browser extensions for Chrome, Firefox, Safari, Edge, and Brave; mobile apps for iOS and Android; and desktop apps for Windows, macOS, and Linux. Your vault syncs automatically so you always have your passwords, whether you are at your desk or on your phone.

Because Bitwarden is open source, its code is publicly auditable. Independent security researchers regularly review it, and the company publishes the results of third-party security audits. Your vault is encrypted locally on your device before it ever touches Bitwarden's servers -- even Bitwarden's own staff cannot read your passwords.

The core idea: You memorise exactly one master password. Bitwarden remembers everything else. When you visit a website, the browser extension auto-fills your login. When a site asks you to create a new account, Bitwarden generates a random 20-character password you will never need to type.

Why Bitwarden over other options

  • •Truly free. The free tier has unlimited passwords, unlimited devices, and syncing. No "trial" that expires.
  • •Open source. Anyone can inspect the code. No hidden backdoors or sketchy data collection.
  • •Cross-platform. Browser, phone, desktop -- your vault follows you everywhere without friction.
  • •Self-host option. If you would rather keep your vault entirely on your own hardware, Bitwarden supports self-hosting, and the community project Vaultwarden provides a lightweight alternative compatible with all Bitwarden clients.
  • •Premium is cheap. The $10/year premium plan adds advanced 2FA, emergency access, and data breach reports -- it is genuinely worth it.

Step 1. Create Your Bitwarden Account

The account is the root of your password management system. Everything else -- the browser extension, the mobile app, the desktop client -- connects back to this one account.

  1. 1.Go to bitwarden.com and click Get Started (or choose the free plan directly).
  2. 2.Enter your email address. This is where vault recovery emails and security alerts will go, so use an email you check regularly.
  3. 3.Choose your master password. This is the single most important password you will ever create.

How to choose a strong master password

The master password must be strong (so no one can guess it) and memorable (because if you forget it, your vault is gone -- Bitwarden cannot reset it for you). The best approach is a passphrase:

correct-horse-battery-staple-rainbow-42

A passphrase of 4-6 random words, separated by dashes or spaces, is both strong (impossibly hard for a computer to brute-force) and memorable (your brain can latch onto a story or image). Add a number or symbol if the service requires it.

Critical: Write your master password down on a piece of paper and store it somewhere safe (filing cabinet, safe, taped inside a book). If you lose access to your memory and your paper backup, your vault is unrecoverable. There is no "forgot password" button.

Step 2. Install the Browser Extension and Mobile App

The browser extension is where you will interact with Bitwarden most often. It lives in your browser toolbar, detects login forms automatically, and fills them in one click. The mobile app handles the same job on your phone -- including auto-fill inside other apps.

Browser extension

Install from your browser's official extension store:

  • •Chrome / Brave / Edge: Visit the Chrome Web Store and click "Add to Chrome".
  • •Firefox: Visit the Firefox Add-ons page and click "Add to Firefox".
  • •Safari: Available on the Mac App Store. Safari extensions are bundled with the desktop app on macOS.

Mobile app

Install from your phone's app store:

  • •iOS: App Store -- supports Face ID / Touch ID for quick unlock.
  • •Android: Google Play Store -- supports fingerprint and face unlock, plus auto-fill across all apps.

Log in everywhere

Open the extension or app and enter the email and master password you created in Step 1. Your vault syncs automatically. Log in on every device you use -- your vault follows you.

Pro tip: Enable biometric unlock (fingerprint or face) in the mobile app settings. This lets you open your vault with a tap instead of typing your master password every time -- convenient and still secure.

Step 3. Save Your First Password

There are three ways to get passwords into Bitwarden. You will use all of them over time.

Method 1: Auto-capture on login

The smoothest method. When you log into a website that is not yet in your vault, Bitwarden detects it and shows a banner at the top of the page:

  1. 1.Log into any website as you normally would.
  2. 2.Bitwarden asks: "Save this login?"
  3. 3.Click Yes. The username and password are saved to your vault.

Method 2: Manual entry

For passwords you already have (or for sites where auto-capture did not trigger):

  1. 1.Click the Bitwarden icon in your browser toolbar.
  2. 2.Click the + (Add) button.
  3. 3.Fill in the name, website URL, username, and password fields.
  4. 4.Click Save.

Method 3: Generate a strong password for a new account

When signing up for a new website, do not invent a password -- let Bitwarden generate one:

  1. 1.On the signup page, click the Bitwarden icon.
  2. 2.Click the Generator tab (the key icon).
  3. 3.Adjust the settings: 20+ characters, include uppercase, numbers, and symbols. Or choose Passphrase for something readable.
  4. 4.Click Copy, paste it into the signup form, and Bitwarden will offer to save the new login.

The beauty of generated passwords: You never need to type them. Bitwarden auto-fills them everywhere. A 20-character random string is no harder for you than "password123" -- Bitwarden does the typing.

Step 4. Organise With Folders and Collections

Once you have more than a handful of passwords, organisation saves time. Bitwarden gives you two tools: Folders for your own stuff, and Collections for sharing.

Folders (personal organisation)

Folders are private to you. Use them to group logins by category so you can find them quickly:

  • •Finance -- banking, investment, insurance, tax portals.
  • •Social -- social media, messaging, forums, gaming accounts.
  • •Shopping -- online stores, delivery services, subscription sites.
  • •Work -- professional logins, SaaS tools, development platforms.
  • •Utilities -- electricity, water, internet provider, phone carrier.
  • •Government -- tax authority, passport renewal, council services.

To create a folder, open the Bitwarden browser extension, click the + Folder button in the sidebar, give it a name, and drag items into it. You can also set a folder when saving a new login.

Collections (sharing with family or team)

Collections are for sharing. If you set up a Bitwarden Organisation (even a free two-person one), you can create collections that specific people can access:

  • •Family shared: Netflix, Spotify, utility accounts, the Wi-Fi password.
  • •Team shared: shared hosting logins, social media accounts, API keys.

Each person in the organisation gets their own private vault plus access to the shared collections. When you update a password in a shared collection, everyone gets the update automatically.

Organisation setup: Go to vault.bitwarden.com, click New Organisation, invite family or team members by email, and start creating shared collections. Two-person organisations are free.

Step 5. Explore Advanced Features

Bitwarden packs a surprising amount of power beyond basic password storage. These features turn it from a simple vault into a full security toolkit.

Built-in two-factor authentication (2FA)

Bitwarden can act as your authenticator app. Instead of juggling Google Authenticator, Authy, or SMS codes, store your 2FA tokens directly inside Bitwarden. When you log into a site, Bitwarden auto-fills the password and copies the 2FA code to your clipboard in one motion. This feature requires Bitwarden Premium ($10/year) or self-hosting.

Password health reports

Bitwarden scans your vault for security problems:

  • •Weak passwords -- passwords that are too short or simple.
  • •Reused passwords -- the same password used on multiple sites.
  • •Data breach exposure -- checks if any of your stored logins appear in known data breaches (via Have I Been Pwned).

Open the Reports section in the web vault to run these scans. Fix the flagged items one by one -- Bitwarden even links directly to the site's password-change page.

Data breach monitoring (Premium)

With Premium, Bitwarden continuously monitors for your email addresses and usernames in newly discovered data breaches. If your credentials turn up in a dump, you get an alert so you can change that password immediately -- before anyone uses it.

Self-hosting with Vaultwarden

If you would rather keep your vault entirely on your own hardware, Vaultwarden is an open-source, lightweight server compatible with all Bitwarden clients. It runs in a Docker container, uses a fraction of the resources of the official Bitwarden server, and unlocks premium features (like 2FA) for free. You point your Bitwarden apps at your self-hosted server instead of bitwarden.com, and your encrypted vault never leaves your home network.

Bitwarden Send

Need to share a password, a Wi-Fi key, or a sensitive file with someone who does not use Bitwarden? Use Bitwarden Send. It creates a time-limited, auto-expiring link you can share via email or messaging. You can set a maximum access count, an expiration date, and optionally password-protect the link. Once it expires, the data is gone.

Self-hosting note: If you already run a home server (see our self-hosting hardware guide), adding Vaultwarden via Docker takes about five minutes. Your passwords never leave your hardware, and you still get sync across all your devices.

Bonus. Choosing a Password Manager

Not sure whether Bitwarden is right for you? We have a broader guide comparing password manager options -- including KeePassXC for those who prefer a completely offline, local-only approach where you control the sync yourself.

Read the Password Manager Guide

Quick Tips

  • •Your master password must be strong and memorable. A passphrase of 4-6 random words (like "correct-horse-battery-staple") is far better than a short complex password you will forget. Write it down on paper and store it somewhere safe -- a locked drawer, a safe, or taped inside a book.
  • •Enable biometric unlock on mobile. In the app settings, turn on Face ID (iOS) or fingerprint unlock (Android). You will open your vault dozens of times a day; tapping your finger is far less friction than typing a master password every time.
  • •Check the data breach report quarterly. Go to Reports → Data Breach in the web vault every few months. If any of your logins have appeared in breaches, change those passwords immediately. Bitwarden's generator makes creating a replacement painless.
  • •Use Bitwarden Send for sharing secrets. Never text or email a password in plain text. Generate a Send link with an expiration time and maximum view count. If the recipient needs a Wi-Fi password or an API key, Send is the secure way to hand it over.
  • •Go through the password health report once a month for the first few months. As you import old passwords, the report will flag reused and weak ones. Fix the most important accounts first (email, banking, work) and work your way down.
  • •Export a backup periodically. From the web vault, go to Tools → Export Vault and save an encrypted JSON file to a safe location (USB drive, encrypted folder). If Bitwarden's servers ever go down, you still have your data.

Need Help Getting Started?

Setting up a password manager is one of the highest-impact security improvements you can make. If you would like a guided walk-through -- choosing a master password, importing from your browser, and setting up on all your devices -- book a free session and we will do it together.