Blog

All Posts
Card Fraud
Cards & Online Payments
Product
Security
Subscription Management
VPN
Virtual Cards
Privacy Virtual Cards
Spending Limits

Set a spending limit and Privacy will decline any transactions that go over the limit

Merchant-Locked Cards

Lock Privacy Cards to the first merchant they’re used at to prevent misuse if stolen

Single-Use Cards

Create Privacy Cards that close automatically after the first purchase is made on them

Pause/Close Cards

Pause or close your Privacy Cards at any time to block future transaction attempts

Sign Up For Privacy Now

Bitwarden Password Manager—A Detailed Walkthrough

Ashley Ferraro, Product
Written by
Ashley Ferraro, Product
Reviewed by
Oct 31, 2024
 • 
10
 Min Read
Protect Your Payments
Sign Up

According to Bitwarden's World Password Day Survey 2024[1], 25% of internet users reuse passwords across 11–20+ accounts, with 36% using personal information such as name or birth date in their passwords. These practices expose them to potential data theft and fraud, a risk that could be mitigated by using password managers.

This review will analyze Bitwarden Password Manager, focusing on its security measures, features, and customer support. We'll also explain how virtual cards help protect your financial information from cybercriminals when shopping online.

Disclaimer: The information in this article is accurate as of September 2024. For more up-to-date information, visit the official website or contact the provider directly.

Everything Bitwarden Password Manager Offers

A photo of a person logging into an account on a laptop, with a smartphone and coffee mug next to it
Source: Mohamed_hassan

Bitwarden is an open-source password manager that allows users to inspect, audit, and modify its source code. Its self-hosting option[2] makes it an appropriate choice for individuals looking for more control over their password management. We'll examine Bitwarden Password Manager in four categories:

  1. Security measures
  2. Password and file management features
  3. Device compatibility and customer support
  4. Plans and pricing

Security Measures

Bitwarden Password Manager employs zero-knowledge, end-to-end AES-CBC 256-bit encryption for all vault data[2], which only a user's master password can decrypt. Not even Bitwarden can access or view a user's stored information, providing complete privacy and security. 

To reduce the likelihood of unauthorized access, Bitwarden generates strong encryption keys using key derivation functions such as PBKDF2 SHA-256 bit or Argon2id[2]. It also integrates with two-factor authentication options like email, FIDO2 security keys, Duo, YubiKey, or authenticator apps[3].

Other security measures include:

  • Passwordless login[4]—After setting up, Bitwarden allows users to access their vault via a notification without entering their password. When logged in, users can also use biometrics such as a fingerprint or face ID to unlock the stored vault data[5]. 
  • Annual source code audits[6]—Independent security experts audit Bitwarden's source code annually to detect vulnerabilities before cybercriminals can exploit them.
  • HackerOne bug bounty program[7]—Bitwarden partners with HackerOne to incentivize security experts to report potential vulnerabilities in the app. This enables timely resolution of security issues and continuous improvement of Bitwarden's products.
  • Security compliance[8]—Bitwarden complies with industry regulations, such as GDPR, HIPAA, SOC 2 Type II, and SOC 3, to ensure user data is handled according to the highest security standards.

Password and File Management Features

Bitwarden's password generator[9] creates unique passwords and usernames and stores them in the user's vault for easy and secure access. The autofill feature[10] automatically enters login credentials and other web form entries into websites and apps, reducing the risk of password theft by keyloggers.

Other password and file management features Bitwarden offers include:

  • Secure Notes[11]—In addition to usernames and passwords, users can store other personal details and credit card numbers in their Bitwarden vault.
  • File Attachments[12]—Bitwarden allows users to attach files to specific vault items for secure storage. 
  • Vault Health Reports[13]—Bitwarden evaluates stored passwords for their strength or reuse and sends data breach reports for compromised credentials.
  • Password sharing[14]—With Bitwarden Send, users can securely share encrypted files, passwords, or notes with trusted contacts. Users can set a maximum access limit and an expiration date, and disable access after the first view.
  • Emergency access[15]—Bitwarden allows users to designate trusted contacts who can access their vault in an emergency.
  • Passkey support[16]—Bitwarden users can store passkeys and use them with websites and apps that support passkey login. 
  • 2FA support[17][18]—Users can rely on the Bitwarden authenticator app or an integrated third-party app to generate time-based one-time passwords (TOTP).
  • Email alias integration[19]— Bitwarden integrates with proxy email providers, allowing users to generate unique email aliases and protect their primary email address from spam and phishing attempts.

Device Compatibility and Customer Support

A photo of a person holding a smartphone displaying a login page surrounded by other devices showing the same page
Source: geralt

Bitwarden Password Manager enables users to access their password vault from various devices and platforms, including desktops, mobile devices, and web browsers[20]:

Web Browser Extensions Desktop Applications Mobile Applications

  • Firefox

  • Chrome

  • Edge

  • Safari

  • Opera

  • Brave

  • Vivaldi

  • Tor

  • DuckDuckGo

  • Windows (10 and 11)

  • macOS (macOS 12+ and Safari 14+)

  • Linux

  • iOS

  • Android

Bitwarden provides comprehensive customer support through various channels, including a support ticketing system and community forums. Its searchable help center[21] offers getting-started guides, FAQs, and troubleshooting tips. 

Bitwarden also has an active X (formerly Twitter), Reddit, and GitHub presence[21]. This allows users to engage with the community, report bugs or suggestions, and stay updated on new features and updates.

Plans and Pricing

Bitwarden offers a free plan with all core functions, passkey management, password sharing, advanced two-step login, and email alias integration[22]. To access features such as the integrated authenticator, emergency access, file attachments, and all security reports, users can opt for the Premium plan, which is priced at less than $1 per month[22]. 

The Family plan costs $3.33/month for up to six family members. It includes all the Premium features plus unlimited sharing, unlimited collections, and shared storage[22]. 

Bitwarden's business plans cater to teams, small businesses, and enterprises, starting at $4 per user/month[22]. They offer organization-wide password and file management, event log monitoring, and passwordless single sign-on (SSO) authentication, among other features. 

Alternative Password Managers With Comparable Security and Features

Bitwarden is a comprehensive password management solution with options such as self-hosting that make it a standout on the market. However, every password manager has features that make it more suitable for different needs and use cases. 

If you prioritize robust security features on par with Bitwarden's and you're willing to explore your options before committing to a password manager, here are some tools you might look into: 

  1. 1Password—Offers a Travel Mode that lets you temporarily remove sensitive data from your device
  2. Bitdefender Password Manager—Allows you to remotely log out of the password managers and websites and delete browsing history
  3. RoboForm—Provides advanced form-filling features and enables you to log in to multiple websites with a single click
  4. LastPass—Allows you to log in to the password managers using biometrics
  5. Password Manager Pro—An enterprise solution that offers advanced access controls 

Is Bitwarden Safe Enough to Store Your Card Details?

An illustration showing four computer monitors against an orange background, each showing a different warning sign
Source: 200degrees

Bitwarden employs industry-grade security measures to safeguard your sensitive information. However, once that data leaves your Bitwarden vault, the password manager cannot guarantee its safety.

For instance, when you shop online and use Bitwarden's autofill feature to enter your payment card details at checkout, the security of those details depends on the website's security measures. If the merchant's database is breached, your details could be compromised and used for fraudulent activities.

To protect your financial information from cyber risks, consider using virtual cards when shopping online. Virtual cards are unique, randomly generated card numbers you can use to complete transactions. They are linked to a real debit card or bank account, shielding your actual card or account details from prying eyes and reducing the risk of fraud.

While reputable banks like American Express® and Capital One® offer virtual cards, specialized card providers like Privacy provide advanced security features and card controls.

Use Privacy Virtual Cards for Enhanced Online Security

Privacy is a BBB®-accredited virtual card provider with over 250,000 users. It employs rigorous security measures, including military-grade AES-256 encryption and regular third-party audits. It provides the same level of protection as a bank or any other financial institution.

To further enhance the security of your account and funds, Privacy also employs:

  • Two-factor authentication (2FA)—Privacy lets you enable 2FA for your account, adding an extra layer of security to log-in attempts.
  • Transaction notifications—You'll receive instant alerts on your phone or via email from Privacy whenever your Privacy Cards are used or declined, enabling you to spot unusual activity.
  • Fraud protection—Privacy investigates disputed transactions and initiates chargeback claims on your behalf if it finds grounds for them.
  • OWASP compliance—Privacy adheres to the Open Web Application Security Project (OWASP) guidelines, which are globally recognized standards for web application security. These guidelines help ensure that your data is safe from common cyber threats.

Privacy Card Types

Privacy lets you create three types of cards:

Card Type Description What To Use It For
Single-Use These cards close shortly after the first transaction. Further charge attempts are declined, making the card useless to potential hackers. Single-Use Cards are designed for one-time purchases on unfamiliar websites and those you don't plan on shopping from again. Single-Use Cards are ideal for purchasing from unfamiliar websites and those whose security practices you haven't verified. 
Merchant-Locked These cards "lock" to the first merchant you use them with and decline payments from other vendors. They're ideal for purchases from your favorite stores and recurring charges like subscriptions and utility bills. Use Merchant-Locked Cards to shop at your favorite online stores or for recurring payments like utility bills and subscriptions.
Category-Locked These cards aid in budgeting by "locking" to a specific product or service category, blocking transactions within other categories. You can use them for purchases such as groceries, travel, or entertainment. Category Cards help you budget within specific categories like groceries, travel, or health and wellness.

You can pause or close Privacy Cards, stopping all further charges. This feature can be helpful if you're in the process of canceling a subscription and you want to protect your account from accidental charges.

Privacy also lets you set spending limits on your virtual cards. Any charges that go above the limit will be declined, which can help you avoid hidden fees and price hikes from sneaky merchants.

Convenience Features

A cropped photo of a person holding a payment card in one hand while browsing an online store on a laptop
Source: Marcial Comeron

Privacy offers extensive convenience features for seamless virtual card management, such as:

  • Integration with 1Password—You can generate and access your Privacy Cards and manage your passwords from the password manager's browser extension.
  • Mobile app—With the Privacy App, available for iOS or Android, you can create, manage, and monitor your cards on the go.
  • Browser extension—Whether using Chrome, Edge, Firefox, Safari, or Safari for iOS, the Privacy Browser Extension lets you quickly access virtual cards directly from your browser and autofill payment details for faster checkouts.
  • Shared Cards—You can share Privacy Cards with trusted family members and friends to delegate online purchases while keeping your bank account and card details safe.
  • Card Notes—Privacy allows you to attach notes to each card, making it easy to track when and where your virtual cards should be used next.

How To Get Privacy Cards

To get started with Privacy, follow these four steps:

  1. Sign up for a Privacy account
  2. Verify your identity
  3. Link your bank account or debit card
  4. Request your first virtual card
    ‍

Privacy offers four monthly plans:

  1. Personal—This plan is free for domestic transactions and allows you to generate up to 12 new Single-Use and Merchant-Locked Cards per month. You can set spending limits, pause, and close cards at any time to prevent unwanted purchases from going through. The plan also offers access to the browser extension, web app, and mobile app.
  2. Plus—At $5 per month, this plan includes all features in the Personal plan. It allows you to generate up to 24 new cards every month and create Category-Locked Cards. You can also add custom card notes, share cards, get priority support, and access support via a live chat (Monday to Friday, 9 a.m.–5 p.m. ET).
  3. Pro—At $10 per month, the Pro plan includes all features of the Plus plan. It offers up to  36 new cards per month, fee-free foreign transactions, and 1% cashback on eligible purchases of up to $4,500 per month. 
  4. Premium—At $25 per month, the Premium plan includes all Pro plan features and allows you to create up to 60 new virtual cards per month.

References

[1] Bitwarden. https://bitwarden.com/resources/world-password-day/, sourced September 13, 2024
[2] Bitwarden. https://bitwarden.com/help/self-host-an-organization/, sourced September 13, 2024
[3] Bitwarden. https://bitwarden.com/help/setup-two-step-login/, sourced September 13, 2024
[4] Bitwarden. https://bitwarden.com/blog/access-your-bitwarden-vault-without-a-password/, sourced September 13, 2024
[5] Bitwarden. https://bitwarden.com/help/biometrics/, sourced September 13, 2024
[6] Bitwarden. https://bitwarden.com/help/bitwarden-security-white-paper/, sourced September 13, 2024
[7] HackerOne. https://hackerone.com/bitwarden/?type=team, sourced September 13, 2024
[8] Bitwarden. https://bitwarden.com/compliance/, sourced September 13, 2024
[9] Bitwarden. https://bitwarden.com/help/generator/, sourced September 13, 2024
[10] Bitwarden. https://bitwarden.com/help/auto-fill-browser/, sourced September 13, 2024
[11]Bitwarden. https://bitwarden.com/blog/what-is-a-bitwarden-secure-note/, sourced September 13, 2024
[12] Bitwarden. https://bitwarden.com/help/attachments/, sourced September 13, 2024
[13] Bitwarden. https://bitwarden.com/help/reports/, sourced September 13, 2024
[14] Bitwarden. https://bitwarden.com/products/send/, sourced September 13, 2024
[15] Bitwarden. https://bitwarden.com/help/emergency-access/, sourced September 13, 2024
[16] Bitwarden. https://bitwarden.com/help/storing-passkeys/, sourced September 13, 2024
[17] Bitwarden. https://bitwarden.com/help/bitwarden-authenticator/, sourced September 13, 2024
[18] Bitwarden. https://bitwarden.com/help/integrated-authenticator/, sourced September 13, 2024
[19] Bitwarden. https://bitwarden.com/help/generator/#username-types, sourced September 13, 2024
[20] Bitwarden. https://bitwarden.com/download/, sourced September 13, 2024
[21] Bitwarden. https://bitwarden.com/contact/, sourced September 13, 2024
[22] Bitwarden. https://bitwarden.com/pricing/, sourced September 13, 2024

‍

Privacy — Seamless & Secure Online Card Payments
Protect your online payments against malicious actors
Checkout securely online by creating unique virtual card numbers for every purchase. Avoid data breaches, unwanted charges, and stolen credit card numbers.
Shop with Privacy Virtual Cards instead of your real card numbers to protect your sensitive bank information from being exposed.
Sign Up
Privacy — Seamless & Secure Online Card Payments
Enjoy greater control over your financial information
Checkout securely online by creating unique virtual card numbers for every purchase. Avoid data breaches, unwanted charges, and stolen credit card numbers.
Privacy Virtual Cards allow you to set limits or pause/close your cards at any time, protecting against unwanted expenses.
Sign Up
Privacy Virtual Cards
Spending Limits

Set a spending limit and Privacy will decline any transactions that go over the limit

Merchant-Locked Cards

Lock Privacy Cards to the first merchant they’re used at to prevent misuse if stolen

Single-Use Cards

Create Privacy Cards that close automatically after the first purchase is made on them

Pause/Close Cards

Pause or close your Privacy Cards at any time to block future transaction attempts

Sign Up For Privacy Now
Privacy — Seamless & Secure Online Card Payments
Sign Up