Bitwarden vs 1Password: Price, Security and Which to Pick

Pick Bitwarden if low cost, a free plan, open-source code or self-hosting matter most. Pick 1Password if you prefer a polished hosted service with a Secret Key, Travel Mode and guided sharing. For a single US user comparing annual plans on October 29, 2026, Bitwarden Premium costs $19.80 for the first year, while 1Password Individual costs $35.88 at its promotional rate. Prices checked October 29, 2026.

Before subscribing, count the people who need separate accounts, list the phones, computers and browsers they use, and decide whether you need family sharing, passkeys, emergency access, Travel Mode or self-hosting. Keep your old manager available while you check the imported vault.

Bitwarden vs 1Password: Which One Fits Your Decision?

Bitwarden fits a person who wants a free password manager with unlimited passwords and devices, or a low-cost paid plan with open-source code and optional self-hosting. Its free plan supports basic password storage, autofill and passkey management. Premium adds advanced two-step authentication, integrated TOTP codes, encrypted attachments, emergency access, vault health reports and priority support.

1Password fits a person who wants a hosted service with end-to-end encryption, a Secret Key and a strong shared-vault workflow. Its Families plan includes the account holder and up to five family members, plus five guests. Travel Mode can remove selected vaults from apps and browser extensions while you travel.

Both products store passwords, passkeys, notes, payment cards and identity information across supported devices. Neither protects an unlocked device from malware, phishing or someone who already has access to the account. The Federal Trade Commission recommends strong, unique passwords, two-factor authentication and protection for the password-manager account itself.

The first decision is not which brand sounds safer. Count users and devices, then identify the feature that would change your routine. A single person who only needs passwords may be well served by Bitwarden Free. A family that wants shared vaults and temporary access may prefer 1Password. A technical user who wants deployment control may accept Bitwarden’s self-hosting work.

If you are comparing more products, use Best Password Manager: Bitwarden, 1Password, Proton Pass and More after narrowing these two choices.

What Each Password Manager Costs and Renews At

The prices below use the same basis: United States region, US dollars, annual billing, and prices displayed before tax, checked October 29, 2026. Bonus time is not included in the paid term. The free tier, free trial and refund window are separate.

Bitwarden Premium is the lower-cost paid choice for one person. Bitwarden Families is also cheaper than the promotional and regular 1Password Families prices, although the products organize sharing differently. Bitwarden Teams and Enterprise are priced per seat. Enterprise adds features such as single sign-on, enterprise policies, account recovery and self-hosting capability.

Bitwarden documents a 30-day refund policy for paid services. Its free Families trial and business trials are free-trial periods, not free permanent plans and not refund windows. A free plan costs nothing and does not renew.

1Password documents a 14-day free trial for Individual, Families and Business. Its personal promotion applies to new customers subscribing directly through 1Password.com, not through Google Play, Apple’s App Store or other third-party app stores. The 14-day trial is separate from the refund policy. 1Password’s terms say paid amounts are generally non-refundable, though some requests may be considered case by case.

Before subscribing, confirm the trial duration, payment channel and billing interval on the checkout page. On the final order screen, confirm the first charge, renewal amount and billing channel. Treat the 14-day trial as the decision period, and ask 1Password Support about refund eligibility before paying.

Free Plans, Family Sharing and Business Accounts

Bitwarden Free is the clearest fit for one person who needs unlimited passwords and access across devices without a subscription. It includes passkey management, but paid features such as advanced two-step methods, integrated TOTP generation, encrypted attachments, emergency access and vault health reports require Premium.

Free Bitwarden organization sharing supports two users and up to two collections. Premium individual does not include organization sharing by itself, so a person who pays for Premium still needs an organization plan for shared credentials.

Bitwarden Families supports six users, unlimited collections and sharing. Teams and Enterprise support unlimited users billed per seat. That structure suits workplaces that need separate accounts and administrative controls rather than one shared login.

1Password Families includes the account holder, up to five family members and five guests. Shared vaults and temporary sharing are central to its workflow. Teams Starter Pack includes up to 10 members, while Business is priced per user and includes 20 guests.

The practical choice depends on whether sharing is occasional or central. For one user, Bitwarden Free or Premium costs less. For a family, Bitwarden costs less on the displayed prices, while 1Password may suit people who prefer its account and shared-vault design. For work, compare guest access, recovery, policies, single sign-on and seat billing before choosing.

Security Architecture, Audits and Incident History

Bitwarden says vault data is encrypted locally before it reaches its cloud service. Its documentation names AES-CBC 256-bit encryption, HMAC authentication and PBKDF2-SHA-256 or Argon2id key derivation. Its zero-knowledge design means Bitwarden staff cannot access users’ primary passwords or readable vault contents.

Bitwarden publishes its code through GitHub under AGPL v3.0 and Bitwarden License v1.0 repositories. Named 2025 security work includes Cure53 assessments of the browser extension, autofill overlay, core application, desktop application, RustCrypto components and web vault. ETH Zurich’s Applied Cryptography Group audited core cryptography while assuming a malicious server. Unit 42 audited mobile applications, and Fracture Labs audited the web application and related network components.

1Password describes end-to-end encryption and a dual-layer model using the account password and Secret Key. The Secret Key adds account-specific material alongside the password. Its published certifications include ISO 27001:2022, ISO 27017:2015, ISO 27018:2019 and ISO 27701:2019, plus SOC 2 Type 2 certification.

1Password says it commissions independent penetration tests and makes reports available through its Trust Center. Its security page identifies Independent Security Evaluators’ April and June 2020 penetration test and code review, along with an Onica assessment of AWS security architecture and infrastructure. Request the relevant report through the 1Password Trust Center before relying on a particular audit, and compare whether it covers the client, server, browser and mobile systems you use.

The transparency models differ. Bitwarden publishes its codebase and many named assessments. 1Password publishes its architecture, certifications and testing information, but its applications are not presented as fully open source.

Neither provider can be described as immune to account takeover, phishing, malware, device theft or every possible provider incident. 1Password published an October 2023 report about an Okta-related incident and said no 1Password user data or sensitive information was accessed. Distinguish a provider-service incident from compromise of encrypted vault contents, and review each provider’s current security notices and incident disclosures before purchase.

Passkeys, Travel Mode, Self-Hosting and Switching

Both products support passkeys, but their export paths differ. Bitwarden supports passkey management on all Password Manager plans, including Free. Its 2026 release notes document passkey unlock for the web app and browser extension, plus passkey import from Bitwarden JSON exports.

1Password supports saving and using passkeys in its browser and mobile apps. Its support documentation says passkeys can currently be exported only through 1Password for iOS and Android. Desktop export requires creating replacement passkeys at the websites where the passkeys were stored.

Bitwarden supports encrypted exports as well as plaintext JSON and CSV exports. It supports optional self-hosting, but self-hosting means operating the server, database, certificates, updates and recovery process. Enterprise includes self-hosting capability. Bitwarden’s redesigned interface beta does not support self-hosted installations.

1Password supports importing from Bitwarden and other password managers. Its 1PUX format preserves more account structure than CSV, while CSV contains fewer fields. Exports are plaintext, and 1Password says desktop exports do not include passkeys. Delete plaintext export files after use.

Travel Mode is included with every 1Password subscription. It removes vaults from apps and browser extensions unless they are marked safe for travel. Devices must connect to the internet when Travel Mode is turned on or off. A person who can unlock the browser extension may be able to disable Travel Mode through 1Password.com, so remove the extension before travel if that matters.

Keep the original manager available during migration. Import a copy, check duplicates, test important logins, inspect attachments and notes, and confirm shared items. Someone moving from Bitwarden to 1Password should check 1Password’s supported Bitwarden import route. Someone moving from 1Password to Bitwarden should check the available 1Password export format and treat plaintext files as sensitive temporary files.

The Tradeoffs That Matter Before You Subscribe

Bitwarden’s main tradeoff is operational choice. The free plan and low annual price reduce cost, while open-source code and self-hosting give technical users more control. That control creates work, and some newer interface features may not support self-hosted installations.

1Password’s main tradeoff is cost and dependence on a hosted account. The Secret Key adds another protection layer, and Travel Mode may fit frequent travelers, but the promotional personal price renews at a higher regular amount. Its terms also make paid refunds less predictable than Bitwarden’s documented 30-day policy.

Sharing deserves a close look. Bitwarden Premium alone does not provide organization sharing, while 1Password’s personal and family plans build sharing into their account structure. Business buyers should compare recovery, guest access, policies, single sign-on and the number of seats that will be billed.

Neither manager replaces account security. Use a strong primary password, enable two-step authentication, protect recovery methods and keep devices updated. Check the law and any employer, school, platform or identity-provider rules that apply to your account and location.

Which One to Pick for a Single User, Family or Switcher

Pick Bitwarden Free for one person who wants unlimited passwords and devices at no cost. Pick Bitwarden Premium when integrated TOTP, encrypted attachments, emergency access, vault health reports or advanced two-step authentication justify $19.80 per year. Prices checked October 29, 2026.

Pick 1Password Individual when the Secret Key, hosted workflow, Travel Mode and account design matter more than the higher renewal price. The promotional first year costs $35.88, then the displayed regular price is $47.88 per year.

For a family, Bitwarden Families is the price pick at $47.88 per year for up to six users. 1Password Families costs $53.88 for the promotional first year and $71.88 at the displayed regular price. Choose 1Password when its shared vaults, guests and Travel Mode fit the household better.

For a technical switcher, Bitwarden is the better fit if open-source code, encrypted exports and self-hosting matter. For a person moving a mixed vault with shared items and passkeys, inspect the import and export limits first. Keep the old service active until passwords, notes, attachments, passkeys and shared accounts work in the new one.

Setup, Terms and the Next Decision

Install the chosen manager on each supported phone and computer, add the browser extension to the browsers you use, sign in, and create a strong primary password. Enable two-step authentication before importing anything. Import a copy of the old vault, review duplicates, test important logins and confirm that shared items and attachments arrived.

Do not delete the original manager until the new vault has been checked. If an export file is plaintext, store it temporarily, keep it away from shared folders and delete it after the migration.

Both providers require lawful use and authorized sharing. A family or business account should not replace separate accounts for people who need their own access. Check current security advisories and incident disclosures before purchase, then confirm the plan, trial, payment channel, first charge and renewal amount on checkout.

If your actual question is about encrypting a connection or changing the IP address websites see, a password manager is not a VPN. A VPN encrypts the connection between your device and the VPN server, but accounts, cookies and device fingerprints can still identify you. For that separate decision, use What Is a VPN and What Does It Do.

Frequently asked questions

Add an account-protection layer before comparing brands. A strong primary password, two-step authentication and secure devices matter more than a marketing label.

Which is safer, 1Password or Google Password Manager?

Neither can be declared universally safest from the documented information. Bitwarden publishes open-source code and many named assessments, while 1Password documents end-to-end encryption, a Secret Key, certifications and independent testing. Google Password Manager is integrated into Google accounts and Chrome, so its practical security depends on the protection of that Google account, the device and the passkeys or passwords used.

What has happened to 1Password?

1Password continues to operate as a subscription password manager. Its 2026 product changes included universal sign-in, improved iOS autofill, phishing-prevention changes, credential-transfer work, developer features and 1Password for Agents. 1Password 7 is scheduled for retirement in early 2027, so people still using it should plan a move to 1Password 8.

Which password manager has never been breached?

“Never breached” is not a reliable security standard. A provider may experience an infrastructure or account incident without attackers obtaining readable vault contents, and the absence of a public incident does not prove that no security event occurred. 1Password disclosed an October 2023 Okta-related incident and said no 1Password user data or sensitive information was accessed.

Which is the safest free password manager?

Bitwarden has a documented free plan with unlimited password storage, unlimited devices and passkey management. It does not include every paid feature, such as advanced two-step options, integrated TOTP, encrypted attachments, emergency access or vault health reports. The practical choice is the free manager whose account protection and device support you can maintain correctly.

How much does Bitwarden cost?

Bitwarden Free costs $0. Bitwarden Premium was displayed at $19.80 for one year, equivalent to $1.65 per month, and Families was displayed at $47.88 for one year, equivalent to $3.99 per month, on October 29, 2026. Teams was $4 per seat per month with annual billing, and Enterprise was $6 per seat per month with annual billing. Prices checked October 29, 2026.

Is Bitwarden free?

Yes. Bitwarden’s free individual plan supports unlimited passwords and devices. Free organization sharing supports two users and up to two collections, while paid plans add features such as integrated TOTP, encrypted attachments, emergency access and additional sharing controls.

How secure is Bitwarden?

Bitwarden says it encrypts vault data locally with AES-CBC 256-bit encryption, HMAC authentication and PBKDF2-SHA-256 or Argon2id key derivation. It describes its design as zero knowledge and publishes its code and named third-party assessments. Your primary password, recovery methods, devices and email account still need protection.

What is Bitwarden and what is it for?

Bitwarden is a password manager for storing, generating and autofilling passwords, passkeys, notes, cards and identity information across supported devices. It also supports secure sharing, encrypted exports, emergency access and optional self-hosting. It does not encrypt your general internet connection or change the IP address websites see.

Glossary

Find more VPN guides on Tunnel Verdict. Have a question about your own setup? Contact us and include your device and the VPN you use.