bitwarden/clients

Features

• Password Managers - Provides a secure, end-to-end encrypted vault for storing, syncing, and autofilling passwords, passkeys, and sensitive credentials.
• Centralized Secrets Management - Centralizes and secures organizational passwords, passkeys, and sensitive data through managed access controls and administrative oversight.
• Credential Encryption - Ensures all encryption and decryption occur locally on the client, keeping plaintext inaccessible to the server.
• Passwordless Authentication - Provides phishing-resistant login methods like passkeys and biometric authentication to eliminate reliance on traditional master passwords.
• End-to-End Encryption - Maintains a consistent, end-to-end encrypted vault across multiple devices by syncing opaque data blobs.
• Cross-Device Synchronization Engines - Ensures information is available anywhere by enabling access to stored passwords and sensitive data across multiple devices.
• Self-Hosted Infrastructure - Allows deployment of the complete backend service stack using containerization to maintain full data sovereignty.
• End-To-End Encryption Systems - Ensures no service provider can access stored vault contents by using zero-knowledge architecture where only the user holds the keys.
• Enterprise Identity Providers - Integrates with directory services to automate user provisioning, enforce single sign-on, and manage organizational access policies.
• Passkey Authentication - Enables access to applications using phishing-resistant passkeys stored within a secure, encrypted vault.
• Zero-Knowledge Suites - Protects sensitive data using a zero-knowledge architecture where all encryption and decryption occur locally on the client.
• Team Member Management - Distributes sensitive information among team members using a scalable model that manages access permissions.
• Memory-Isolated Decryption - Ensures sensitive data is never written to persistent disk storage by storing decrypted vault information exclusively in volatile system memory.
• Secret Management - Injects sensitive API keys and configuration secrets into automated deployment pipelines and infrastructure workflows using secure programmatic interfaces.
• Credential Management Integrations - Populates login information automatically and manages credentials during the browsing experience through direct integration.
• Credential Storage - Transfers sensitive information from other password managers or encrypted files into a secure vault.
• Multi-Factor Authentication - Secures account access by requiring secondary verification methods in addition to the master password during the login process.
• Resource Access Policies - Provides programmatic interfaces to control user access, group permissions, and security policies for team resources.
• Identity Provider Connections - Delegates user verification to external directory services using standardized protocols like SAML and OpenID Connect.
• Secure Vaults - Unlocks encrypted data stored locally on the client using master passwords, passkeys, or device-based approval.
• User Account Management - Automates user onboarding and access control by synchronizing accounts with existing directory services.
• Vault Integrations - Enables secure retrieval of sensitive credentials from vault storage at runtime for application workflows.
• Security And Privacy - Password management and secure credential storage.
• Command Line Interfaces - Provides a command-line interface for full vault management, including credential retrieval and account administration.
• Vault Infrastructure - Deploys and manages private, containerized vault instances on internal networks to maintain full data sovereignty.
• Runtime Credential Injection - Integrates secure storage into deployment pipelines to inject sensitive keys safely during build and release processes.
• Mobile Access Clients - Provides a dedicated mobile application to access, manage, and synchronize credentials on handheld devices.
• Encrypted Storage Solutions - Provides secure, encrypted storage for sensitive documents, identification scans, and photos.
• Multifactor Encryption - Prevents unauthorized access by adding an extra layer of cryptographic protection to stored data, even if the primary encrypted vault file is compromised.
• Credential Sharing - Facilitates secure sharing and access management among team members by importing credentials into specific collections.
• One-Time Passwords - Generates time-based one-time passwords for services requiring two-factor authentication.
• Policy-Based Access Control - Enforces granular security rules and organizational permissions by evaluating metadata and user roles against administrative configurations.
• Role-Based Access Control - Defines access to management tasks, security settings, and administrative features by assigning default or custom roles.
• Password Hashing Utilities - Transforms master passwords into secure encryption keys using salted hashing algorithms before data transmission.
• Secret Injection Tools - Populates environment variables or files securely during automated processes by retrieving configuration data via CLI.
• Desktop Applications - Provides native desktop applications for Windows, macOS, and Linux to manage and synchronize sensitive information.
• Compliance & Audit Tools - Ensures team compliance with security best practices by automatically detecting weak, reused, or exposed credentials.
• Credential Security - Helps administrators prioritize improvements and monitor security posture by identifying weak security practices and shadow IT.
• Password Policies - Ensures account security across the organization by mandating specific complexity, length, and character requirements for user master passwords.
• Data Encryption - Generates secure, encrypted archives of stored vault data for recovery outside the primary service environment.
• Automated Provisioning - Automates user onboarding and offboarding by synchronizing directory services via command line tools.
• Volatile Memory Processing - Keeps decrypted vault contents exclusively in volatile system memory to prevent sensitive data from being written to disk.
• Organization Management - Provides a centralized portal for service providers to oversee licenses and security configurations for multiple customer accounts.
• Security Audit Logs - Tracks user actions and verifies compliance with internal security policies by logging detailed event data.
• Backup and Recovery - Stores and restores authentication data automatically during device recovery using native mobile backup services.
• Export Restrictions - Prohibits members from exporting individual vault data to prevent unauthorized data exfiltration from the organization.
• Software Development Kits - Provides software development kits for building custom integrations that interact directly with secure credential storage.
• Account Recovery - Assists members in regaining access to their accounts by resetting master passwords or clearing two-step login methods.
• Secret Synchronization Tools - Centralizes verification code management by synchronizing secret keys via QR code scanning or manual entry.
• Single Sign-On - Enables one-click automated logins for web-based applications that lack native single sign-on support.
• Account Creation Controls - Prevents users with email addresses from a claimed domain from creating personal accounts outside the organization.
• Audit Log Exports - Generates reports of system events in standard formats for external analysis, record keeping, or integration with security platforms.
• Emergency Access Delegation - Permits trusted contacts to request and gain view-only or full account access to a vault after a specified waiting period.

Star history