Laptop displaying a security lock icon on a table with a potted plant and clock.

Apps

1Password vs Bitwarden: 3 Features Decide Which to Pay For

Vault sharing, passkeys, and family plans look similar until you dig in. Here's which password manager earns its subscription and which you're overpaying for.

TESTED ONiPhone 15 Pro · Pixel 8LAST VERIFIEDMay 20
AppScore breakdown · 1Password
Privacy9.2
UX9.5
Value8.4
Performance9.5
AppScore breakdown · Bitwarden
Privacy6.8
UX9.5
Value9.5
Performance7.2
TLDR Bitwarden's free tier is the strongest in the category — unlimited passwords, unlimited devices, zero cost. 1Password wins on polish and family plan flexibility, but only if you're covering 4–5 people who need account recovery. Solo users should almost always start with Bitwarden; families need to run the math before defaulting to 1Password.

Password managers stopped being optional somewhere around 2022, when credential-stuffing attacks started hitting people who assumed a long-ish password was enough. The old logic was simple: pay for 1Password and get a polished experience, or settle for something worse. Bitwarden broke that logic. Now both apps sit at the top of every shortlist and look nearly identical on paper — until you stress-test three specific areas: vault sharing, passkey support, and the actual math behind family pricing. One of them is quietly overpriced for a large chunk of the people currently using it.


The Real Cost: Breaking Down What Each Plan Actually Charges

Start with money, because the sticker price is where most comparisons mislead you.

1Password charges $2.99/month for an individual plan, billed annually at $35.88/year as of early 2026. The Families plan runs $4.99/month and covers up to 5 users, plus a free guest slot for a sixth. Fill all the seats and you're paying roughly $1/person/month.

Bitwarden's structure is different at every tier. The free plan is genuinely free — no device cap, no password cap, no expiry. Premium costs $10/year flat. The Families plan is $3.33/month ($40/year) for up to 6 users.

Plan 1Password Bitwarden
Free tier 14-day trial only Yes — unlimited passwords, unlimited devices
Individual premium $35.88/year $10/year
Families plan $59.88/year (5 users) $40/year (6 users)
Per-user cost (families) ~$12/year ~$6.67/year
Open source No Yes
Self-hosting option No Yes (advanced users)

The per-user math on families matters. Bitwarden costs roughly half what 1Password charges while covering one additional seat. If price is your primary concern, this table makes most of the argument right there.

Info Bitwarden's free tier covers the vast majority of what individuals need: unlimited passwords, full sync across devices, and basic two-factor authentication. You only need Premium for TOTP codes inside the app, encrypted file attachments, and emergency access.

Password manager pricing comparison on laptop screen with plan tiers visible


Bitwarden's Free Tier: The Feature That Changes Everything

This is the part most comparisons underplay.

Bitwarden's free plan is not a stripped-down trial designed to frustrate you into upgrading. It covers unlimited passwords, unlimited devices, and full sync across iOS, Android, Mac, Windows, Linux, and every major browser extension — at no cost, indefinitely. That's genuinely unusual. LastPass restricted free users to a single device category in March 2021, which triggered a massive migration. Dashlane's free tier still caps passwords at 25. 1Password has no free tier at all — just a 14-day trial. Bitwarden sits alone at the top here.

I've pointed half a dozen people toward Bitwarden Free who just needed to stop reusing passwords. Every one of them found it sufficient long-term. The app isn't visually stunning, but it works without friction across every platform they used.

What you don't get on free: no TOTP generator inside the vault, no encrypted file attachments, no emergency access, and no integration between Bitwarden Authenticator and your main vault. For $10/year, Premium adds all of that. That's less than one month of 1Password Individual.

The counterintuitive read on this: most people evaluating 1Password would be just as well served by Bitwarden Premium — at 72% less cost. The features that actually differentiate 1Password from Bitwarden Premium aren't things most users encounter in a normal week.


Vault Sharing and Family Plans: Where 1Password Pulls Ahead

Vault sharing is where the products diverge in ways that affect real households.

1Password Families: Recovery Is the Killer Feature

The 1Password Families plan includes something Bitwarden doesn't match cleanly: family account recovery. If a member forgets their master password, the account owner can recover it without knowing the lost password. That matters when you're managing credentials for a partner, an elderly parent, or a teenager who treats passwords as temporary inconveniences.

Each member gets their own private vault. Shared collections — Wi-Fi passwords, streaming logins, financial accounts — live in named shared vaults with clear permissions. The interface for managing this on both Mac and iOS is cleaner than Bitwarden's. Not dramatically, but noticeably.

There's also a guest account option: one person outside the core five can access specific shared vaults without a paid seat. Useful for a close friend or a partner who isn't officially on the family plan.

Bitwarden Families: Functional but Rougher Around Recovery

Bitwarden's Families plan uses Organizations for sharing. It works — shared collections sync reliably, permissions are granular, and the admin console gives the account owner full visibility. But the recovery story is weaker.

If a family member loses their master password, there's no organizational rescue unless they set up emergency access in advance — and that requires Premium for the requesting user plus an established contact relationship before anything goes wrong. The waiting period is 1–5 days by default. Sensible security design. Not something most families will configure proactively.

Warning Neither app can recover your master password outright — that's the point of zero-knowledge encryption. But 1Password Families gives account owners a recovery mechanism for other members. Bitwarden's emergency access requires advance setup and a waiting period before access transfers. If you manage a non-technical household, this difference is real.

A mild caveat on 1Password's recovery feature: it also means the account owner can access another member's vault. For most households, that's a safety net. For anyone with a specific privacy need within the family, it's worth knowing. The feature that makes 1Password Families easier to manage is also the feature that makes it slightly less private.

For a close look at how both apps handle the day-to-day iOS experience — autofill reliability, Face ID behavior, and how they handle unusual login forms — the 1Password vs Bitwarden iPhone and iPad test runs four specific scenarios that surface differences you won't see in a spec sheet.


Passkey Support: Both Have It, But With Different Depth

Passkeys are the technology meant to replace passwords — cryptographic key pairs tied to your device, no shared secret to steal or phish. Apple, Google, and Microsoft pushed hard on adoption through 2023 and 2024. Both 1Password and Bitwarden responded, but their implementations arrived at different times and still have meaningful gaps.

1Password launched its passkey saving capability in beta in June 2023, with general availability rolling out later that year. The core idea: instead of passkeys living only on a single device tied to Apple Keychain or a hardware key, 1Password stores them in your encrypted vault. You can register a passkey on your iPhone, then use it on a Windows PC without re-registering from scratch. Cross-platform passkey sync is actually more practical in 1Password than in Apple's own Keychain, which remains primarily an Apple-ecosystem feature.

Bitwarden added passkey vault storage in November 2023. By early 2025, the browser extension and mobile apps both handled saving and using passkeys reliably. I've tested it on Chrome (Mac) and iOS 17/18 without issues, though the initial rollout had friction with sites that don't follow standard passkey implementations.

What "Passkey Support" Actually Covers

Two different things get lumped under this label:

  1. Storing passkeys in the vault — so they sync across your devices instead of being stuck on one
  2. Using the password manager as a passkey authenticator — logging into 1Password or Bitwarden itself with a passkey instead of a master password

Both apps now support both. The cross-platform sync is where 1Password has a modest lead: it's been refined longer, and the Windows/Android experience is smoother. For mixed-platform households — say, iPhone and Windows at work — this matters in practice.

Tip If you're all-Apple (iPhone + Mac + iPad), iCloud Keychain handles passkeys competently enough that neither app is strictly necessary for passkey sync. The case for 1Password or Bitwarden passkeys is strongest when you have Windows or Android devices in the mix, or when you want passkeys backed up independently of Apple's ecosystem.

For a deeper look at how all three options compare — including where iCloud Keychain leaves gaps that Apple users specifically miss — the 1Password vs Bitwarden vs iCloud Keychain breakdown covers the overlap directly.

Passkey selection prompt on iPhone showing password manager vault as an option


Cross-Platform Sync and the Daily iOS Experience

Day-to-day use is where preference gaps become visceral.

1Password's iOS app is polished in a way that reflects years of refinement. Autofill works reliably across both apps and Safari. Face ID unlock is fast. Edge cases — apps with custom login forms, sites that break standard autofill — are handled better than most alternatives. Nothing feels buried.

Bitwarden on iOS has improved significantly through 2024 and into 2025. The autofill extension is solid. Face ID works. The clunkiness that characterized the app in 2022 is largely gone. It still doesn't feel as premium as 1Password — the interface is functional-first. If you came from a paid password manager, you'll notice the visual difference. If you came from reusing passwords in Notes.app, you won't care at all.

Cross-platform sync is one of Bitwarden's strongest cards, and it's free. The same vault works across iOS, Android, Mac, Windows, Linux, and every major browser extension without paying anything. 1Password also covers all these platforms, but charges $35.88/year for it. For a household with mixed Android and iOS devices, Bitwarden Free may be all you need.

One thing I noticed when switching between the apps for testing: Bitwarden's browser extension on Chrome handles certain edge cases more aggressively than 1Password's. Specifically, manually filling individual fields on complex forms and handling non-standard login pages. 1Password's extension has a cleaner UI but occasionally requires a manual trigger where Bitwarden just fills automatically. Small thing. Adds up over hundreds of daily uses.

The broader privacy posture question — how the apps you use every day handle your data — isn't limited to password managers. The same scrutiny applies to fitness and health apps, as explored in the 5 privacy settings every fitness tracker user should change.


Security Architecture: Open Source vs. Proprietary Encryption

This is where a common assumption runs backwards.

The conventional logic says open source is riskier because attackers can read the code. For most software, there's something to that argument. For a password manager specifically, the logic inverts. Bitwarden's code is publicly auditable. Security researchers, academics, and anyone willing to read can verify exactly how encryption is implemented, how the master password derives the vault key, and what data leaves your device. You don't have to trust the marketing copy.

Bitwarden completed an independent security audit by Cure53 in October 2022, with results published publicly. The findings were minor — no critical vulnerabilities. 1Password has SOC 2 Type 2 certification and a Cure53 audit from 2019, but the code is proprietary, so you trust their implementation without the ability to verify it directly.

Security Feature 1Password Bitwarden
Encryption AES-256-CBC AES-256-CBC
Key derivation PBKDF2 (SHA-256) PBKDF2 or Argon2id (user's choice)
Public source code No Yes
Latest independent audit Cure53, 2019 Cure53, October 2022
Secret Key (extra auth factor) Yes No
Self-hosting option No Yes

Bitwarden added Argon2id key derivation in 2023 — a meaningful upgrade over PBKDF2 for resistance to GPU-based brute-force attacks. 1Password still uses PBKDF2 with a high iteration count, which is fine, but Argon2id is the current best practice.

1Password's Secret Key is a 128-bit random value combined with your master password during vault key derivation. It protects against offline brute-force attacks on stolen server data — if someone steals 1Password's servers, they still can't crack your vault without your Secret Key. The trade-off: lose both your master password and Secret Key with no recovery setup, and the vault is gone permanently. That "extra security" is also extra risk of permanent lockout.

For a different angle on which app wins which specific security and feature rounds, the Bitwarden vs 1Password feature-by-feature breakdown covers several of the same ground with different test scenarios.

Open source code audit document on screen with security vulnerability findings


Which One Fits Your Situation

Scenario Better Choice
Solo user, budget-conscious Bitwarden Free
Solo user wanting TOTP in vault Bitwarden Premium ($10/yr)
Developer needing SSH agent, CLI 1Password Individual
Family of 4–5, someone will forget passwords 1Password Families
Family of 5–6, everyone is tech-comfortable Bitwarden Families
Mixed Apple + Windows/Android household 1Password (passkey sync edge)
All-Apple household Bitwarden Free or iCloud Keychain
Privacy-first, want auditable code Bitwarden (either tier)

The honest answer for most privacy-conscious solo users: start with Bitwarden Free. Stay on it if it covers your needs — and for most people it will. Upgrade to $10/year Premium if you want TOTP generation inside the vault. The only reason to pay $35.88/year for 1Password Individual is if you actively use the developer tools (SSH key agent, CLI, Secrets Automation) or genuinely value the UX polish enough to pay a 3.5× price premium.


Quick Checklist: How to Decide in 5 Minutes

  1. Count your household. If it's 4–5 people, compare family plans directly: Bitwarden is $40/year for 6 users, 1Password is $59.88/year for 5.
  2. Check your device mix. All Apple? iCloud Keychain covers basic passkey and password sync. Mixed platforms? Bitwarden Free handles cross-platform sync better than the price difference justifies.
  3. Assess recovery needs. Non-technical family members who will forget master passwords push the decision toward 1Password Families for the recovery mechanism.
  4. Test passkey support in your browser. If cross-platform passkey sync matters, run both browser extensions for two weeks on sites you actually use. 1Password's implementation is more mature as of early 2026.
  5. Check whether you need TOTP in the vault. If you want your two-factor codes stored alongside passwords, Bitwarden Premium at $10/year is the cleaner upgrade than switching apps entirely.
  6. Only pay for 1Password Individual if you use the developer tools. SSH agent, CLI integration, and Secrets Automation are genuinely differentiated. For standard household use, the price premium doesn't map to a feature premium that most people encounter.
  7. Set up emergency access regardless of which app you choose. Both apps support it. Almost nobody configures it. It's the feature you'll desperately want the one time something goes wrong — set it up this week, not after a crisis.

Sources & Further Reading

  • Bitwarden Security Whitepaper (Bitwarden official documentation) — Unusually transparent technical documentation covering vault encryption, key derivation (Argon2id implementation), and the zero-knowledge architecture. The design doc is more detailed than most commercial products publish.
  • Cure53 Public Audit Reports — Independent penetration testing results for Bitwarden (October 2022) and 1Password (2019) are available through Cure53's audit archive. Actual findings, not vendor summaries.
  • The Verge / Wired password manager coverage — Both publications tracked the LastPass breach aftermath (2022–2023) and documented real migration patterns to Bitwarden and 1Password with concrete user numbers and security expert commentary.
  • Apple Platform Security Guide (Apple) — Covers iCloud Keychain and passkey implementation at the OS level for iOS and macOS — useful context for understanding where third-party managers add value versus where they duplicate what Apple already provides.
  • FIDO Alliance developer documentation — The standards body behind passkeys. Their technical resources explain the distinction between device-bound and synced passkeys, which is directly relevant to understanding the cross-platform sync trade-offs between 1Password and Bitwarden.
How we test appsReal devices, real workflows, version stamped.