Invite & Manage Members

Add and manage your organization members to ensure the right people have access to Bitwarden.

To ensure the security of your organization, Bitwarden applies a three-step process for adding and onboarding a new member: invite → accept → confirm. This is designed to facilitate secure sharing between organizations and users by maintaining end-to-end encryption.

To invite someone to your organization:

1. Log in to the Bitwarden web app and open the Admin Console using the product switcher:
   

   

2. Navigate to Members and select  Invite User:
   

   

3. On the Invite user panel:

   • Enter the Email address where new users should receive invites. You can add multiple users at a time by comma-separating email addresses.

   • Select the Member role to be applied to new users. Member role will determine what permissions these users will have at an organizational level.

   • In the Groups tab, select which groups to add this user to.

   • In the Collections tab, select collects to give this user access to and what permissions they should have to each collection.

4. Click Save to invite the designated users to your organization.



note

Invitations expire after five days, at which point the member will need to be re-invited. Re-invite members in bulk by selecting each member and using the  Options icons to select Resend invitations:

If you're self-hosting Bitwarden, you can configure the invitation expiration period using an environment variable.

Invited users will receive an email from Bitwarden inviting them to join the organization. Clicking the link in the email will open the Bitwarden web app, where the user can log in or create an account to accept the invitation:

You must fully log in to the Bitwarden web app to accept the invitation. When you accept an invitation, an administrator will need to confirm access. Once confirmed, you'll be notified that you can access the organization. Additionally, organization members will have their email automatically verified when they accept an invitation.

To confirm accepted invitations into your organization:

1. Log in to the Bitwarden web app and open the Admin Console using the product switcher:
   

   

2. Navigate to Members.

3. Select any Accepted users and use the  options menu to  Confirm selected:
   

   

4. Verify that the fingerprint phrase on your screen matches the one your new member can find in Settings → My account:
   

   

Each fingerprint phrase is unique to its account, and ensures a final layer of oversight in securely adding users. If they match, select Submit.

From the Members page, you can also review and update individual members' accounts, like adding them to groups, collections, or the Secrets Manager. Select the  Menu icon for available options per user:

The 2FA status of users can be viewed from the Members page. If the user has a  Lock icon, two-step login is used on their Bitwarden account:

If you want to view or share a list of all organization members outside of the Admin Console, owners, admins, and custom role users with Manage users permission can export a .csv. This is available to all organizations.

To export your member list, go to Members and select the  Download icon:

Included data

The member list export includes the following information about each account:

The Members page is also where you can withdraw someone from an organization. There are three methods:

• Temporarily revoke access

• Permanently remove access

• Delete organization member accounts
  

  

  warning

  Deleting an account is permanent and cannot be undone or restored. To create a backup of your vault data to store in a safe location, export your vault data.