Bitwarden
TAS Score: S3/3 — D4/5 · A3 / T2 (D4 not D5: Bitwarden Inc. is a commercial company — enterprise features (SSO, SCIM, advanced policies) are paid-only and growing.)
Brief Description
Open-source password manager with end-to-end encryption. Available on all platforms. Self-hosted server gives full control over vault data. The official alternative to Vaultwarden — heavier but officially supported.
Architectural Role
Security layer. Stores, syncs, and autofills credentials across devices. Self-hosted server handles sync — clients are open source and work with both official and Vaultwarden servers.
Technical Autonomy
- Works without internet (cached vault)
- Stores data locally
- Does not require external accounts
- Allows data export (JSON, CSV)
- Provides offline updates
Philosophical Assessment (whose.world criteria)
| Criterion | Status | Comments |
|---|---|---|
| Pause | ✅ | Self-hosted server can be stopped; cached vault available offline |
| Exit | ✅ | Full JSON/CSV export; open format |
| Recoverability | ✅ | Standard database backup |
| Visibility | ✅ | AGPL-3.0 server and clients; fully auditable |
| External Dependencies | ✅ | Fully self-contained when self-hosted |
Configuration (Minimal)
# Bitwarden uses a unified installer script
# docker-compose is generated by bitwarden.sh
# Minimal manual setup:
services:
bitwarden:
image: bitwarden/self-host:beta
volumes:
- ./bitwarden:/etc/bitwarden
ports:
- "80:8080"
- "443:8443"
Alternatives
| Alternative | Autonomy | Notes |
|---|---|---|
| Vaultwarden | A3 / T2 | Lighter unofficial server; MIT license |
| KeePass | A3 / T2 | Local-only; no sync server needed |
| 1Password | A0 / T0 | Cloud-only; no self-hosting |
Trajectory
Direction: stable
Bitwarden has been AGPL-3.0 since launch. The company monetises through Teams and Enterprise plans (SSO, SCIM, advanced policies) — not by removing community features. Self-hosting is actively supported and documented. The main risk is the growing gap between free and enterprise tiers.
Signal assessment:
| Signal | Status | Evidence |
|---|---|---|
| License | ✅ | AGPL-3.0 since launch; no changes |
| Feature gating | ➖ | Enterprise features growing but community tier unchanged |
| Self-hosting | ✅ | Self-hosting is a first-class supported deployment |
| Governance | ➖ | Bitwarden Inc. controls direction; community contributions accepted |
Sources
- Website: https://bitwarden.com
- Documentation: https://bitwarden.com/help/self-host-an-organization
- Repository: https://github.com/bitwarden/server
- Docker image: bitwarden/self-host
- Community: https://community.bitwarden.com