# Bitwarden Secrets Manager | Store, Manage, and Deploy Secrets

Developer and DevOps teams choose end-to-end encrypted Bitwarden Secrets Manager to secure their infrastructure and machine secrets. Open source. Third-party audited. Enterprise ready.

---

### Secure your secrets. Manage AI agent access.

*Bitwarden Secrets Manager*

Developer and DevOps teams choose end-to-end encrypted Bitwarden Secrets Manager to secure their infrastructure and machine secrets. Open source. Third-party audited. Enterprise ready.

![secrets-manager-header-terminal](https://bitwarden.com/assets/5BBr7S0IxRNwGphsBxMhTf/ccbac03e611f2e2cac82c22131ff6235/secrets-manager-integrations_4C.png)

[Contact Sales](https://bitwarden.com/go/contact-sales-secrets-manager/)

## Awards and Recognition

![millions-customers-trust-bitwarden](https://bitwarden.com/assets/6PLCdWI1MGA3pjrDYaqlC/a94aa530aaad1fad7c4166839df9790f/millions-customers-trust-bitwarden.png)

![chrome-apple-ratings](https://bitwarden.com/assets/pnhB8Fu1vhLkbFF3iEmXa/f073ebf18f517b694270448f2dfb7b1b/chrome-apple-ratings.png)

![three-g2-badges](https://bitwarden.com/assets/5B81Aj9KW1iMdSFYT87ZpC/26b03acb58973069f90a6bc1e3af7404/three-g2-badges.png)

![g2-rating-start-top-50](https://bitwarden.com/assets/1I86PvwiYWVVayP7kPUvka/5e53b4cb3403ac07f8d925ce85eb1344/g2-rating-start-top-50.png)

![hundred-thousand-community memebers](https://bitwarden.com/assets/Xn4u9CQNuogrUx6grSLjo/617f74d213192ff2e8dcee5442ac0273/hundred-thousand-community_memebers.png)

### Secrets sprawl is a breach waiting to happen

**The problem:** Unmanaged plaintext secrets pose serious security risks.

- Hardcoded credentials in repos
- Shared .env files in Slack or email
- API keys in CI/CD logs
- AI agents requesting broad credential access

These practices expose critical credentials, paving the way for a costly data breach. 

![illustration-exposed-secrets](https://bitwarden.com/assets/5OxHsxMTZE3fzULx4vs7w0/6c2e699c798037d8ed5e7a20b294cdae/illustration-exposed-secrets.png)

## One secure vault for every secret

## Governance without slowing down your developers

For IT teams looking for a complete enterprise solution, Bitwarden helps your business meet development deadlines while staying secure throughout the whole process.

### Audit-ready event logs

Every secret access, user login and administrative change is timestamped and logged. Export to CSV or pipe into your SIEM. Ready for your next audit. 

### Role-based access controls

IT controls who can create projects, manage machine accounts and access secrets, ensuring compliance with least-privilege access. 

### SSO, SCIM and directory integrations

Connect Secrets Manager to your existing business tech stack. Automatically provision users with SCIM, enforce SSO logins and invite developers via your directory provider. 

## Secrets management. Streamlined.

Say goodbye to complex management systems that leave your secrets scattered. The Bitwarden process is easy to configure and deploy.

### Store secrets

Set up a project based on service, initiative or environment. Control who and what can read each project. 

![icon-step-1-blue](https://bitwarden.com/assets/3ga9N0Z9jQZqXXvp5L9sjf/4090fa3119b8e11e71333ada77c43d34/icon-step-1.png)

### Organise by project

Centralise API keys, DB credentials, SSH keys and certificates in an end-to-end encrypted vault, each assigned to a project.

![icon-step-2-blue](https://bitwarden.com/assets/5xUVP9C8Cl8NHOJC2Ut9U2/9397949ffc4a2465af560f6ba1994c47/icon-step-2.png)

### Issue machine access

Give each machine or agent its own access token scoped to exactly what it needs.

![icon-step-3-blue](https://bitwarden.com/assets/2pGJ2lZ4TMH6ogk2DHUTV0/1650b1df12f65d6d34baaddfb2bd49b8/icon-step-3.png)

### Use secrets

Securely deploy secrets within your development workflows, CI/CD pipelines and agent processes.

![icon-step-4-blue](https://bitwarden.com/assets/4554xgVZDD8zperWPoHI3Z/38ad2c647d4082e8523c81ffa303aff8/icon-step-4.png)

## Compare Secrets Manager plans and features

| Features | Free | Teams | Enterprise |
| --- | --- | --- | --- |
| Unlimited secret storage<br><sub>*Store unlimited developer secrets at no additional cost.*</sub> | ✓ | ✓ | ✓ |
| Securely share secrets with users<br><sub>*Securely grant read or write secret access to users across the organisation.*</sub> | Up to 2 users | Unlimited users | Unlimited users |
| Machine and AI agent access via machine accounts<br><sub>*Facilitate programmatic machine and AI agent access to a discrete set of secrets via machine accounts.*</sub> | Up to 3 machine accounts | Up to 20 machine accounts, $1 per additional machine account | Up to 50 machine accounts, $1 per additional machine account |
| Organise secrets via projects<br><sub>*Group relevant secrets together by project to easily assign user and machine access.*</sub> | Up to 3 projects | Unlimited projects | Unlimited projects |
| Two-step login<br><sub>*Add extra security to your login process with two-step login, also known as 2FA or multi-factor authentication.*</sub> | Authenticator apps, email | Authenticator apps, email, YubiKey, FIDO2 and Duo | Authenticator apps, email, YubiKey, FIDO2 and Duo |
| Organisation two-step login via Duo<br><sub>*Enable and enforce organisation-wide two-factor authentication through Duo MFA.*</sub> | - | ✓ | ✓ |
| Event and audit logs<br><sub>*View detailed records of login and organisation actions.*</sub> | - | ✓ | ✓ |
| User groups<br><sub>*Organise users by groups and grant them permissions for specific projects and access controls.*</sub> | - | ✓ | ✓ |
| Directory Connector<br><sub>*Synchronise your directory service with Bitwarden using the standalone Directory Connector application to easily provision users and groups.*</sub> | - | ✓ | ✓ |
| SSO Integration<br><sub>*Integrate with your existing Identity Provider to log in to Bitwarden.*</sub> | - | - | ✓ |
| SCIM Support<br><sub>*Use the SCIM protocol to manage and provision Bitwarden users from your Identity Provider or directory service for easy onboarding and employee succession.*</sub> | - | - | ✓ |
| Enterprise policies<br><sub>*Set organisation-wide controls and additional settings for how Bitwarden is used, with many customisation options.*</sub> | - | - | ✓ |
| Account Recovery Administration<br><sub>*Recover locked-out accounts by having an administrator initiate the account recovery process, which maintains the Bitwarden zero-knowledge encryption policy.*</sub> | - | - | ✓ |
| Custom roles<br><sub>*Assign specific permissions to users, including policies like SSO or Account Recovery.*</sub> | - | - | ✓ |
| Priority Support<br><sub>*24/7 priority email support*</sub> | - | - | ✓ |
| Self-host option<br><sub>*Run the Bitwarden server application on your own network or server.*</sub> | - | - | ✓ |
| Pricing<br><sub>*Based on annual plan*</sub> | **Free** | **$6/Month/User** | **$12/Month/User** |

## Unlimited secrets, no matter your size. 

Get streamlined secrets management. Pick your plan.

### Teams

*For development teams that need more business capabilities.*

**$6** *per month / per user*

All Free features, plus:

- Unlimited secrets and projects
- Up to 20 machine accounts
- Audit activity with event logs
- Manage access with user groups

[Start Free Trial](https://bitwarden.com/go/start-secrets-teams-trial/)

---

### Enterprise

*SSO, SCIM, self-hosting, and enterprise policies for orgs with compliance requirements.*

**$12** *per month / per user*

All Free and Teams features, plus:

- Up to 50 machine accounts
- Granular access control
- Passwordless SSO integration
- Automate provisioning with SCIM
- Easy account recovery
- Flexibility to self-host

[Start free trial](https://bitwarden.com/go/start-secrets-enterprise-trial/)

[Contact Sales](https://bitwarden.com/contact-sales-secrets-manager/)

---

### Start free, scale later

*For solo developers and small projects*

*per month*

[Sign up now](https://bitwarden.com/go/start-secrets-free/)

---

Pricing shown in USD and based on an annual subscription. Taxes not included.