The Quiet Renovation at Bitwarden
96 points by DaSHacka 2 days ago | 47 comments

kn100 2 minutes ago
Good post. I switched from Bitwarden to KeepassXC / KeepassDX / Syncthing across my Android phone, Linux PC, and Windows PC. This was the setup I had prior to using Bitwarden for the first time. The Keepass experience is significantly better these days! Importing from Bitwarden is trivial too. Recommended!
reply
welder 35 minutes ago
I don't care about raising prices, I'm worried about the new CEO having a PE mindset. That means Bitwarden will now focus on extracting value while the product stagnates and degrades in quality. Time to jump ship before their security and quality goes down the drain.
reply
adfm 2 minutes ago
PE? Private Equity is the slippery slope to Public Enshitification.
reply
xweb 50 minutes ago
Thank you for this post/link. I have been side eyeing Bitwarden since they started ensh*ttifying the desktop UX last year to make it more like everything else and take up too much space. It had been working perfectly well for browser autofill - super fast and staying out of the way. Now it is bloated white space, slow, standardized UX elements like any SaaS built by AI. Will check out Vaultwarden, Proton Pass, Keepass, I guess. But sadly - yet another tool that worked perfectly well that was ruined in contempt of its own users (LastPass, Authy, Google Reader, etc - the list goes on)
reply
dust-jacket 34 minutes ago
Ah damn. I've only recently moved in to Bitwarden - paid - largely on the basis of a multiple-user shared vault and emergency grants to personal vaults.

I'd really, really like them to not to ruin it or make it massively more expensive.

reply
RyJones 24 minutes ago
Thank you for pushing me to migrate away from Bitwarden. I've used them for years but I was moving away slowly; now I've moved.
reply
nemomarx 11 minutes ago
Out of interest, where are you moving?
reply
Havoc 28 minutes ago
After the LastPass fiasco I switched to selfhosting a password manager (bw).

Rapidly starting to think even a vibecoded solution may be a better plan relying on commercial options. High risk of don’t roll your own crypto mistakes but realistically that’s not the threat model here anymore for the random individual. It’s online breaches or perhaps a wrench attack not highly skilled crypto adversary. Plus there are probably ready made crypto modules so wouldn’t be a true handroll

reply
schnitzelstoat 18 minutes ago
The LLMs also help a script kiddie become a highly skilled crypto adversary though.

Especially if the concerns around Mythos are well founded.

reply
Havoc 10 minutes ago
True. No chance of me putting a DIY password manager on the open internet though. Would be behind WireGuard etc
reply
ptdorf 8 minutes ago
I wouldn't worry.

The mythical Mythos can't even find Claude code bugs before releases.

reply
evanjrowley 51 minutes ago
Lately I've been scrutinizing Bitwarden after discovering a long history of memory leak problems in the GitHub issue tracker. It's an extention I use with all of my browsers. It seems to use an unusually high amount of RAM on Safari and I suspect it's why RAM just never stops growing in MS Edge.

Overall it's not a problem for me if Bitwarden wants more money, but I have to draw the line at replacing top leadership with randoms from private equity and secret price hikes. I'm glad this is being highlighted and it's motivating me even more to find suitable FOSS-friendly alternative.

reply
waysa 42 minutes ago
It still says "Always free" on the website for me. It's both on the billing page on the page linked in the article.

I do share the concerns though. The change in leadership, the poor transparency, 100% price increase and the quiet change in core values.

I was happy paying $10 yearly for Bitwarden. I'm still okay with $20 but there's a seed of doubt.

reply
faccacta 4 minutes ago
Enshittification is properly viewed as a cybersecurity risk, a category of insider threat. You defend against it, when possible, by using open source software and open, documented file formats. That way, if open source enshittifies, the community can defend by forking. I’m so grateful for KeepassXC.
reply
gerty 48 minutes ago
Not disputing the overall feeling about the changes at Bitwarden but "Always free" phrase is still actually there if you're creating a personal Free account.
reply
notsylver 38 minutes ago
I believe they added it back after people noticed, archive.org has versions where its gone
reply
accrual 17 minutes ago
Yeah, to me this isn't about whether or not it's "always free". It's about the rug pull.

"They put some of the rug back!" isn't enough to restore goodwill in my case.

reply
flossly 60 minutes ago
I use BitWarden because I'd never trust a password manager with close source clients. Before BitWarden I used a local manager: BitWarden made my life easier.

The web interface I'd never use: I have no guarantee that my passphrase does not leave my computer. Same for the import feature: this also requires the passphrase to be sent to their servers.

Needless to say I move to the next ethical e2ee password manager if BitWarden turns it's back on open source.

reply
zug_zug 39 minutes ago
funny, I just changed to bitwarden from 1-password after they had a big price increase (I probably otherwise would have been a lifetime customer if it could have been a leave it and never think about it again for the next 40 years deal).

I'm not too worried, if bitwarden changes their price somebody is going to vibecode a decent enough solution for pennies on the dollar, or there's always apples built-in product.

reply
dpark 34 minutes ago
A password management system is one thing I definitely don’t want vibe coded.
reply
deanc 56 minutes ago
I don't see the problem here. It's a great product and if they want to make money then I don't mind. If it's too expensive, and they hike the price to something ridiculous then I'll vote with my wallet.
reply
dpark 37 minutes ago
I’m fine with paying a bit more. I honestly don’t think I even use any of the premium features. I started paying because their founder answered some question I sent years ago and I figured that kinds of support deserved my support. I could still be on the free tier if cost were a concern.

With that said, I do find the direction here concerning. Quietly rewriting values, removing promise of free tier, hiking prices with almost no notice. I’m concerned that this feels sudden and sneaky. Sneaky behavior erodes trust.

reply
notsylver 41 minutes ago
I am fine with the price increase, for me its how sneaky they're being about everything. If they sent a few emails about the recent changes I wouldn't care, but it feels like they do not want customers to know which is the last thing I want from a password manager.
reply
mschuster91 51 minutes ago
The problem is the rug-pull. You can't go and proudly state "free forever", and then silently back down on that commitment. That is a textbook example for the enshittification cycle... lure users in with grand promises, sell out once you got enough of a following.

(Well, technically, you can, but then don't complain about getting called out)

reply
craigmart 41 minutes ago
they haven't backed down, you find the "Always free" claim in the very same webpage OP linked https://bitwarden.com/products/personal/#whats-the-differenc...
reply
dpark 35 minutes ago
You must be getting a different version of that page than me. The free tier is there but there’s no “always free” verbiage. There is “start free” verbiage.

Edit: “always free” was hidden under a collapsed section

reply
darkwater 25 minutes ago
It's not super big but it is there in the comparison list.

Pricing: Always free

Ctrl+f for "Always"

reply
dpark 24 minutes ago
I searched for the word “always”. It was not (and is not; I just checked again) there on the version of the page I was served.

Edit: Actually, it is there, hidden from search under the collapsed pricing section.

reply
davoneus 19 minutes ago
LOL.. you are correct. Funny thing though... the 'Always Free' text is linked to a "/start-free/" action\page. One could argue that they are hedging their bets.
reply
darkwater 10 minutes ago
Some other commenter says there are Archive.org cached versions with "Start free" instead of "Always free", so they must have backpedaled on this. Maybe they realized they turned the knob a bit too much towards "hot", increasing the temperature of the proverbial water too noticeably.
reply
basch 39 minutes ago
as long as the people who signed up when it said it are granfathered, is it ok then?
reply
corncob0067 25 minutes ago
Maybe okay on a personal level, but the PE maw eating another great option is just depressing in a more general sense.
reply
cglan 2 hours ago
I don't think these companies are obligated to run a free tier. Someone has to pay the infra. It's a little shady that they didn't announce any of this though. But bitwarden is open source and you can host it all yourself
reply
nodeflare 46 minutes ago
This feels more like an expectation management problem than a product problem.
reply
megamike 2 days ago
what are some bitwarden alternatives?
reply
dabber21 47 minutes ago
I went with the classic: KeepassXC + Syncthing

All locally synced

There are sharing options but they are not really convenient, not a problem for me since I mostly don't share passwords

reply
arbitrarian 2 hours ago
Keepass or one of its variants are great. Pair it with a shared folder via SyncThing/GDrive/Dropbox/whatever and you'll be set.
reply
RockstarSprain 2 hours ago
Proton Pass. Not ideal but actively developing and IMO its UX is way better than what I had with Bitwarden.
reply
wirybeige 25 minutes ago
Personal anecdote --- Proton Pass very quickly went from worse than Bitwarden to better with more reliable auto-fill.
reply
gonzalohm 60 minutes ago
Depends on what you are looking for. I use keepass to store my password + syncthing to sync across devices
reply
hirvi74 53 minutes ago
I left for Apples Passwords.app and never looked back. Of course, that has its own limitations if you are not bought into Apple's ecosystem.
reply
dpark 49 minutes ago
Apple apparently has an iCloud app for Windows that syncs passwords and provides extensions for major browsers. I had no idea.
reply
dannyphantom 31 minutes ago
The Windows app for iCloud Passwords works fairly well, no real complaints about it to share. It can sometimes be a bit clunky and slow, though that's likely related to my environment rather than the app itself.

Would love it a ton more if it could offer an experience similar to BitWarden where you can view notes linked to logins or autofill credit card details with a single click from the browser extension. But overall it's really helpful.

reply
quantumwoke 36 minutes ago
This is terrifying, but I couldn't help myself from frustration at the LLM writing that only worsened over the course of the post. Bloggers, it's not subtle. Please, stop, or at least disclose it.
reply
kwar13 49 minutes ago
curious whether "always free" is only marketing or actually has some legal implications
reply
therealfigtree 14 minutes ago
Well the CEO has released a blog post about having an "always" free version. So the people crying here can stop, unless you want to whine/rant more.

https://bitwarden.com/blog/my-first-100-days-at-bitwarden/

reply
dewey 9 minutes ago
The "First time?" meme would be appropriate here. Companies change their policies all the time. Most recent example: https://cal.com/blog/cal-com-goes-closed-source-why
reply