Bitwarden believes source code transparency is an absolute requirement for security solutions like ours. View full, detailed Release Notes in GitHub using any of the following links:
Dates on this page represent Cloud Server and Web releases. Bitwarden incrementally updates each client application (Desktop, Browser Extension, Mobile, etc.) and for self-hosted servers following the initial release date to ensure feature efficacy and stability. As a result, client applications and self-hosted servers should expect listed features following the initial release.
Want Release Announcements delivered straight to your inbox?
You can also subscribe to the Bitwarden Status RSS Feed for service updates, including announcements of release windows.
Desktop 1.330, Browser Extension 1.58.0, Mobile 2.18.0, CLI 1.22.1, Directory Connector 2.10.1
As of this release, macOS desktop apps downloaded from the App Store will require macOS Mojave (10.14) or greater.
.dmg installers, available from bitwarden.com/download and Github, are not subject to the same restriction.
Username Generator for Browser and Desktop: Generate usernames for new credentials using email-based conventions like plus addressing or using random words (see here).
CLI - New
serveOption: Use the
—hostnameoption to securely bind your API web server to a host (see here).
Server 1.48.0, Web 2.28.0
The latest release includes community-requested features and the beginning of a multi-part effort to update the web vault UI. Updates to client apps (browser extension, mobile, desktop, and CLI) will come in a follow-on release:
Username Generator for Web Vault: Generate usernames for new credentials using email-based conventions like plus addressing or using random words. A follow-on release will include the username generator for browser extensions and desktop apps (see here).
Web Vault - Reports Page: We've updated the location and feel of the Reports page to make it easier to find and take action on report results (see here).
Improvements to macOS & Safari Importer: We've fixed some issues that resulted in the macOS and Safari importer failing to import URLs and notes properly.
Accessibility Improvements: This release includes a few changes that will improve the performance of Bitwarden with assistive technologies like screen readers.
Browser Extension 1.57.0, Mobile 2.17.0
Following last week's release, the following has been released for mobile apps and browser extensions:
Account Switching added to Mobile: Log in to up to 5 accounts and switch seamlessly between them when using Bitwarden on Android and iOS (see here).
Support for Firefox Private Mode: This release includes more robust support for Firefox Private Windows (see here).
Server 1.47.0, Web 2.27.0, Desktop 1.32.0, CLI 1.22.0, Directory Connector 2.9.11
The latest release focuses on improvements to individual applications so that you can use Bitwarden exactly the way you need to. Updates to mobile apps and browser extensions will come in a follow-on release:
Vault Management API via CLI: Using the new
serveCLI command, you can make API calls to a full suite of Vault Management endpoints (see here).
Changes to export CLI Command:
exportno longer requires a master password, however you can now use a
--passwordargument to set a custom encryption/decryption password for encrypted exports (see here).
New Importers: We've added custom importers for Dashlane
.csvfiles and 1Password
.1puxfiles (requires 1Password v8.5+).
Improvements to Myki Importer: Learn more.
Deprecation of Artifact Binding: Due to security concerns, Artifact binding for SAML SSO configurations has been removed (learn more).
Support for Docker Compose v2
Server 1.46.0, Web 2.26.0, Desktop 1.31.0, Browser Extension 1.56.0, Mobile 2.16.0, CLI 1.21.0, Directory Connector 2.9.9
To kickoff 2022, Bitwarden is pleased to release:
Account Switching for Desktop: Log in to up to 5 accounts at once in the Bitwarden desktop app. This is the beginning of a phased rollout of this feature across Bitwarden apps, with more to come soon (see here).
Send on iOS: You can now share a Bitwarden Send directly from the iOS share menu (see here).
Delete Account from Mobile: You can now delete your Bitwarden account from the mobile app, but why would you (see here)?
New Icons: We've updated the look and feel of all Bitwarden apps with all-new icons. Feast your eyes!
Directory Connector - Azure AD Sync Performance: Performance for Directory Connector syncs against Azure Active Directory has been improved. Organizations syncing with Azure AD will not need to change their sync configuration.
Back End Improvements: We've been hard at work improving the general performance and stability of the Bitwarden platform, which will springboard some great new features in the future.
Server 1.45.0, Web 2.25.0, Desktop 1.30.0, Browser Extension 1.55.0, Mobile 2.15.0, CLI 1.20.0
Bitwarden is proud to announce new enterprise features in the December release that add flexibility and value to the enterprise plans:
Key Connector: (Only available to Self-hosted Organizations) When using Login with SSO with customer-managed encryption, the self-hosted Key Connector application serves cryptographic keys to Bitwarden clients as an alternative to requiring a Master Password for Vault decryption (see here).
Families for Enterprise: (Only available to Cloud-hosted Organizations, self-hosted in a future release) Starting with this release, members of Enterprise Organizations can redeem a free Bitwarden Families Organization for sharing with up to 5 friends or family members. Families Organizations include all premium features for all 6 users and unlimited secure data sharing (see here for details).
MacOS and Safari Importer: We've added a custom importer for passwords exported from Safari and macOS (see here for details).
New Custom Field Type: Linked custom fields can be used to solve issues where your Browser Extension has trouble auto-filling usernames and passwords for a particular site by linking usernames and passwords to bespoke form elements (see here for details).
Browser Extension - Unlock Vault while Auto-filling: Trying to auto-fill with the context menu or keyboard shortcut when your Vault is locked will now prompt you to unlock your Vault and automatically auto-fill your credentials once it's unlocked.
Server 1.44.0, Web 2.24.0, Desktop 1.29.0, Browser Extension 1.54.0, Mobile 2.14.0, CLI 1.19.0
The Bitwarden team is pleased to release a set of features and updates continuing our mission of making password management easy and accessible for individuals and businesses:
Disable Personal Vault Export Policy: The Disable Personal Vault Export policy will prohibit non-Owner/non-Admin members of your Organization from exporting private Vault data (see here for details).
Auto-scale Organization Seats: Teams and Enterprise Organizations will automatically scale up user seats as new users are invited. Organizations can set a limit on scaling to prevent the seat count from exceeding a specified number (see here for details).
Custom Vault Timeout: You can now specify a custom timeframe (Hours and Minutes) for Vault Timeout (see here for details).
Custom Role - Improved Collection Permissions: Collection-management permissions for the Custom role have been expanded to include granular controls over whether the user can create, edit, or delete assigned or all Collections (see here for details).
Admin Password Reset - Update Password after Reset: Passwords reset by an Admin must now be updated by the user they belong to immediately when they log in to Bitwarden (see here for details).
Browser Extension - Automatic Biometrics Prompt: The Browser Extension can now automatically prompt for your biometric input when opened. You can toggle this behavior from the Settings menu (see here for details).
Web Vault - Dark Mode: The Web Vault now has dark mode (see here for details)!
generatePassphrase Options: The
bw generate --passphrasecommand now includes the options
--includeNumber(see here for details).
Server 1.43.0, Web 2.23.0, Desktop 1.28.3, Browser Extension 1.53.0, Mobile 2.13.0, CLI 1.18.1
The latest release of Bitwarden focuses on often requested improvements to existing functionality:
FIDO2 WebAuthn on Mobile: Two-step Login via FIDO2 WebAuthn is now supported on iOS and Android (see here for details).
Admin Password Reset - Automatic Enrollment Improvement: The Automatic Enrollment policy option will now prevent users from withdrawing from Admin Password Reset (see here for details).
Browser Extension - Custom Field Context Menu Item: You can now copy an HTML element name directly from the Browser Extension's context menu for easy custom field creation (see here for details).
Web Vault - Policies Relocation: Enterprise Policies can now only be configured from your Organization's Manage → Policies screen, rather than from the Business Portal.
CAPTCHA Validation: Starting with this release, we're turning on hCaptcha validation to protect against bot attacks like credential stuffing. Please note, challenges in the CLI are delivered differently than in other client applications (see here for CLI details).
Interested in becoming a Provider? To get started, we ask that:
Your business has an active Enterprise Organization.
Your business has a client ready to be onboarded under your Provider.
The latest release of Bitwarden is focused on enabling Managed Service Providers (MSPs) to support their customers' password management needs:
Provider Portal: The Provider Portal allows Managed Service Providers (MSPs) and Resellers to create and administer Organizations on behalf of customers. Using the Portal, Providers can seamlessly support credential management across multiple customers (see here for details).
Share Verbiage Change: We've updated the Share button to Move to Organization to make it cleared that shared items are owned by the Organization. Additionally, we've updated the "shared item" indicator () to match the Collections indicator ().
moveCommand: In keeping with the above item, the CLI
sharecommand has been changed to
move(see here for details).
The Bitwarden team is happy to announce the rollout of Admin Password Reset, the latest feature purpose-built to help enterprises seeking to ensure password security at scale. This release includes:
Admin Password Reset: Enterprise Organizations can enroll in Admin Password Reset to allow designated administrators to reset the Master Password of Organization users (see here for details).
Master Password Re-prompt: Use the new Master Password re-prompt option to require verification of your Master Password to access sensitive Vault items as designated by the user (see here for details).
Bulk User Management: Organization Owners and Admins can now re-send invitations, confirm accepted users, and remove users from an Organization in-bulk (see here for details).
Event Log Export: Export event logs directly from the Web Vault (see here for details).
Directory Connector API Key Authentication: Starting with this release, users of Directory Connector will need to use the Organization API Key to login.
Directory Connector Sync Limit Increase: Directory Connector can now sync an unlimited number of users or groups, where previously the limit was set at 2000 of either. To sync more than 2000 users or groups, toggle the new Sync Option (see here for details).
Autofill On Page Load Enhancements: The Browser Extension's Auto-fill on page load feature has been upgraded to more flexibly fit users' unique needs (see here for details).
More CLI Options: We've added a few new CLI options, including easy retrieval of Vault item notes (
bw get notes <id>) and the ability to set maximum access count for Sends (
bw send create --maxAccessCount <#>).
Web Developer Autofill Exclusion: Web Development contributors can now prevent the Browser Extension from auto-filling a given form element by adding a
data-bwignore="true") to an
The Bitwarden team is pleased to release a set of features and updates continuing our mission of making password management easy and accessible for individuals and businesses:
Privacy & Security Options for Send: Use a new Send Privacy option to hide your email from recipients (see here for details). To prevent abuse, File Sends will now require a verified email address. Additionally, Enterprise Organizations can implement a new policy to set the availability of the Hide Email option (see here for details).
FIDO Updates & Expanded Support: Our FIDO implementation has been upgraded from FIDO U2F to FIDO2 WebAuthn, but existing FIDO U2F keys will retain their integrity. FIDO support has been expanded to more Browser Extensions and the Windows Desktop App (see here for details).
Custom Fields for Keys: Custom Field values have been upgraded to support up to 5000 characters, allowing storage of keys like RSA 4096-bit SSH keys (see here for details).
File Size Increases: You can now create File Attachments or File Sends that are up to 500 MB each. Due to device restrictions, the old 100 MB limit is still in place for Mobile Apps.
As a result of the Attachment upgrade, Attachments uploaded on the newest clients cannot be opened on older client versions. If you find you're unable to access a recently-created Attachment, upgrade your client to the newest version. (Hint: The Cloud Web Vault is always on the newest version.) Frozen or legacy client versions, including the Safari 13 (or earlier) macOS Desktop App & App Extension, will not support accessing these attachments.
Disable Browser Extension Counter: Disable the Browser Extension badge counter using a new toggle in the Settings → Options menu (see here for details).
Biometrics for Safari: The Safari Web Extension now includes support for Unlock with Biometrics for Safari 14+ (see here for details).
Search Internationalization: Vaults can now be searched against 1 character, improving the experience for languages with 1-character words like Simplified and Traditional Chinese.
Sorted Weak Passwords Report: The Weak Passwords Report is now sorted by the severity of the password's weakness (see here for details)
Since implementing Soft Delete back in 2020, we've been patient to take out the Trash. Starting 5/15/2021, we'll activate the nightly job that will permanently delete items that have been in your trash for 30 days or more.
Prior to 5/15/2021, we recommend digging through your Trash for anything you might want to Restore!
Bitwarden is proud to announce the release of Bitwarden Send, and end-to-end encrypted solution for ephemeral sharing. This release includes:
FIDO U2F Support for Edge: Two-step Login via FIDO U2F is now available for the Web Vault and Browser Extensions in Microsoft Edge (see here for details).
Domain Exclusion in Browser Extensions: Bitwarden Browser Extensions can now be configured with domains to explicitly not offer to remember passwords for (see here for details).
Improved Import Error Messages: We've had lots of folks migrating to Bitwarden recently, so we cleaned up an import error message to help you reconcile issues faster (see here for details).
Safari Web Extension Port: Our Safari App Extension has officially been ported to a Web Extension for use with Safari 14+. Due to changes to Safari, Web Extension use is now limited to only those obtained through Mac App Store downloads (see here for details).
2021-01-19 Post-Release Update
Biometric Unlock for Browser Extensions is available for only Chromium-based browsers (e.g. Chrome, Edge) with v1.48.0 of the Browser Extension, provided you have the latest version (2021-01-19) of the Desktop App.
When your Browser Extension updates to this version, you may be asked to accept a new permission for Bitwarden to
Communicate with cooperating native applications. This permission is safe, but optional, and will enable the Browser Extension to communicate with the Bitwarden Desktop App, which is required to enable Biometric Unlock (see here for details). Declining this permission will allow you to use v1.48.0 without Biometric Unlock functionality.
Biometric Unlock is currently not available for:
Firefox Browser Extensions below version 87.
Microsoft App Store Desktop Apps (a side-loaded Windows Desktop App, available at bitwarden.com/download/ will work fine).
Side-loaded MacOS Desktop Apps (an App Store Desktop app will work fine).
The Bitwarden team is investigating these and will provide updates as things progress.
For the first major release of 2021, the Bitwarden team combined multiple major enhancements to address the critical needs of all users, including:
Emergency Access: Bitwarden's new Emergency Access feature enables users to designate and manage trusted emergency contacts, who may request access to their Vault in a zero knowledge encryption environment (see here for details).here
Encrypted Exports: Personal users and Organizations can now export Vault data in an encrypted
.jsonfile (see here for details).
New Role: A Custom role is now available to allow for granular control over user permissions (see here for details).
New Enterprise Policy: The Personal Ownership policy is now available for use by Enterprise Organization (see here for details).
Biometric Unlock for Browser Extensions: Using an integration with a native Desktop application, you can now use Biometric input to unlock Chromium-based Browser Extensions (see here for details).
The latest release of Bitwarden adds SSO-related enhancements to all client applications, including:
New Enterprise Policies: The Single Organization and Single Sign-On Authentication polices are now available for use by Enterprise Organizations (see here for details).
API Key for CLI: Authenticate into the Bitwarden CLI using an API Key newly available from your Web Vault (see here for details).
Improvements to SSO Onboarding: We've made some improvements to the way users are onboarded via SSO to prevent potential security risks (see here for details).
The latest release of Bitwarden adds much-anticipated Login with SSO functionality for all client applications, and the Business Portal for Web Vaults. Read this blog post for more information about Login with SSO, and refer to our documentation.
Early 2020 releases
The following items were released between March and September of 2020.