Bitwarden Resources

SSH key management: How to secure keys across teams and infrastructure

This SSH key management guide covers key inventory, rotation, permissions, automation, and when to replace static keys with SSH certificates.

IT offboarding checklist for secure credential and access removal

This IT offboarding checklist shows what IT, HR, and security must cover to deprovision credentials, SaaS accounts, SSO, MFA, and devices.

April 2026 spotlight: World Password Day (3)

A new Bitwarden UI is coming to the browser extension and desktop app.

Bitwarden 2026 UI update 1-pager

Docker container security: A layered approach from build to runtime

Docker container security works best as a layered workflow rather than a single control. This guide breaks down what to control at each layer.

IT due diligence checklist: How password management closes the credential gap

IT due diligence scrutinizes credential governance and access controls. See how password management helps organizations reduce deal friction and pass review faster.

How to set up a break glass account for secure emergency access

IT due diligence scrutinizes credential governance and access controls. See how password management helps organizations reduce deal friction and pass review faster.

How to choose a password manager: a practical five-factor framework

Choosing a password manager is one of the most practical steps anyone can take to protect online accounts, learn more about how to select the best password manager for your needs.

Browser WebMCP and credential security for AI agents

Browser WebMCP is a browser-native mechanism that enables websites to expose structured tools to AI agents running in a live browser tab, learn more today!

Why a password manager for federal agencies helps close the public sector's credential security gap

As federal cybersecurity resources get stretched thin, agencies have more reason to control what they can: credentials.

April 2026 spotlight: World Password Day (2)

The Credential Exchange Protocol just landed on Android, meaning passkeys stored in Bitwarden can now move freely between passkey managers on both iOS and Android.

PCI password requirements: How Bitwarden closes the gap between policy and practice

Payment Card Industry Data Security Standard (PCI DSS) compliance often breaks down where it is hardest to see: in the daily credential habits of the people who need access to cardholder data.

NCSC password list: The common passwords attackers rely on most

The common passwords attackers rely on most, and how you can combat them with password deny lists, also called password blacklists. Learn more today!

How open source bug bounty programs improve software security

Open source software invites continuous scrutiny from developers, researchers, customers, and independent security experts worldwide. Learn more about the security of open source.

Is autofill safe? How password managers reduce the risk and protect sensitive data

Password manager autofill addresses autofill gaps through exact site matching, locked vault access, and user-initiated filling, making it a more dependable option for everyday use.

NCSC guidance on passwords: what it recommends and where a password manager fills the gap

The National Cyber Security Centre (NCSC) guidance on passwords now centers on length, uniqueness, and tools that make good habits sustainable. Learn more today!

AI agent identity management: Why governance beats direct access

Without a structured identity model, AI access expands beyond intended boundaries, making it difficult to enforce least privilege access or trace actions back to a defined owner.

Infostealer malware response: a step-by-step checklist for enterprise security teams

Infostealer malware is one of the hardest threats for enterprise security teams to catch in time, this checklist covers what security teams need to know.

End-of-life software risks: what enterprises need to know about credential exposure

Many enterprise systems become risky at the end of their supported life, not because they stop working, but because they keep working long after they can be properly secured.

Shadow AI security: Why access governance is the real problem

Shadow AI security extends well beyond data leakage. Unmanaged agents inherit user permissions, create persistent tokens, and generate credentials that outlast workflows.

Cyber resilience strategy: Identity as the core control layer

Cyber resilience covers what happens when those controls prove insufficient, and how quickly the organization recovers when they do. Learn more today!

April 2026 spotlight: World Password Day (1)

MFA for shared accounts

How to set up MFA for shared accounts

How a password manager fits into an effective security incident response playbook

A well-structured security incident response playbook defines the answer before the pressure is on.

Salesforce is enforcing phishing-resistant MFA: What you need to know

Salesforce is enforcing phishing-resistant MFA for privileged users starting July 1, 2026. Learn what's changing, what qualifies, and how to get compliant quickly with Bitwarden.