Bitwarden Updates & Release Notes

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.5.0, Browser Extension 2026.5.0, Desktop 2026.5.0, Mobile 2026.5.0, and CLI 2026.5.0)

Password Manager

• Devices list now available on desktop: The Devices list is now available on the desktop app, alongside the web app and browser extension, to surface devices that your account has been used on.
• Biometrics integration now available on Flatpak and Snap: Biometric unlock of browser extensions, usable through an integration with the Bitwarden desktop app, is now available on Flatpak and Snap distributions.
• Web app quick actions: Launch a website and copy vault data from new quick actions buttons, available by hovering over an item in the web app.
• Send UI update: Selecting a Send item in the browser extension and web app will now display a View screen instead of routing directly to the Edit screen.

Admin Console

• Blumira SIEM integration: Teams and Enterprise organizations can now integrate with Blumira for security and event management (SIEM).
• Expanded account recovery options: Account recovery now supports revoked members and can reset two-step login methods.
• Revoked member reason: There's a new tooltip next to each member on the Members → Revoked page that explains why members were revoked from your organization.
• Updated event logs: Password Manager now saves when an attachment is added to an organization-owned item, using the existing Created attachment for item event.

Self-host

• Helm Chart v2.0: Version 2.0 of the self-host Helm chart will includes two breaking changes:
  • NGINX ingress is now disabled by default in this version of the chart. The chart includes support for Gateway API as an alternative.
  • The image.name field has been removed from values.yaml. Any configurations using image.name must be updated to use image.repository instead.

Note

Before upgrading to this version of the chart, review these changes and update your values file accordingly. For additional information on setting up or migrating to Gateway API, refer to Helm Traffic Routing.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.4.2, Browser Extension 2026.4.0, Desktop 2026.4.0, Mobile 2026.4.1, and CLI 2026.4.0)

Password Manager

• Change master password on extensions and desktop: You can now change your master password on browser extensions and desktop apps. To support future improvements, workflows that allowed a master password change via the CLI were removed.
• Desktop UI updates: The desktop app UI has been updated with visual improvements.
• Click to autofill by default: Within the browser extension, you can now click anywhere on an item within Autofill suggestions to insert your credentials. This update removes the Fill button and Click items in autofill suggestions to fill setting for a more streamlined appearance.
• Updated Clear Clipboard default: The browser extension's Clear Clipboard setting now defaults to five minutes, an extra precaution to help keep your credentials secure.
• mTLS support now on iOS: Both the iOS and Android mobile apps now support uploading mTLS certificates for self-hosted servers that require client authentication. Upload your certificate when you set your server URL.
• Attachment status loading bar: Uploading an attachment on the desktop app and browser extension will display an upload status bar.
• Keeper JSON importer: You can now import data from Keeper with a JSON file.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.4.0 and Mobile 2026.4.0.)

Password Manager

• Preview image attachments on Android: You can now preview image attachments from within the Password Manager Android app, without having to download the file to your device. Previewing image attachments will be available on iOS in a future release.

Admin Console

• Send controls Enterprise policy: Two Enterprise policies, Send Options and Remove Send, were merged into the newly titled Send controls policy. If either policy was previously turned on, the chosen options will transfer and remain unchanged.
• Updated Enterprise Policies page: On the Policies page, the Enterprise Policies are now organized into three categories: Data Controls, Authentication, and Vault Management. You can also review at a glance which policies are turned on or off.
• Access Intelligence dashboard update: Visualize how at-risk applications, passwords, and members have changed over time relative to absolute changes in application, password, and member counts with new graphs on the Access Intelligence Activity view.

2026.3.2

(Release number for Bitwarden Server, other versions include Web 2026.3.1, Browser Extension 2026.3.0, Mobile 2026.3.1, Desktop 2026.3.1, and CLI 2026.3.0.)

Password Manager

• Autofill button on View Login: Autofill credentials directly from the View Login page in the browser extension.
• Generator options for password protected Sends: All password generator features are now available when creating password protected Sends.
• Arm64 builds available for Linux: Arm64 desktop builds are now available for Linux users on Snapcraft and Flathub.

Admin Console

• Automatic confirmation policy: A new policy allows for automatic confirmation of new members joining the organization. Using this policy requires an understanding of how it works and Bitwarden support must be contacted to activate it in your organization.
• Policy name update: The Enforce organization data ownership policy has been renamed to Centralize organization ownership.
• Transfer items from My Vault to My Items: Organizations using the Centralize organization ownership policy can now opt to prompt users to transfer items from My Vault to My Items using the browser extension.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.3.1, Browser Extension 2026.3.0, Mobile 2026.3.1, Desktop 2026.3.1, and CLI 2026.3.0.)

Password Manager

• Autofill button on View Login: Autofill credentials directly from the View Login page in the browser extension.
• Generator options for password protected Sends: All password generator features are now available when creating password protected Sends.
• Arm64 builds available for Linux: Arm64 desktop builds are now available for Linux users on Snapcraft and Flathub. See downloads for additional information.

Admin Console

• Automatic confirmation policy: A new policy allows for automatic confirmation of new members joining the organization. Using this policy requires an understanding of how it works and Bitwarden support must be contacted to activate it in your organization.
• Policy name update: The Enforce organization data ownership policy has been renamed to Centralize organization ownership.
• Transfer items from My Vault to My Items: Organizations using the Centralize organization ownership policy can now opt to prompt users to transfer items from My Vault to My Items using the browser extension.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.3.0, Browser Extension 2026.3.0, and Mobile 2026.3.0.)

Password Manager

• Email verification for Bitwarden Send: Protect Sends with email verification is now available on mobile clients. Learn more about Bitwarden Send.

Authenticator

• Session timeout for Android: The Bitwarden Authenticator Android app can now be set to lock after a period of time that you can set. Unlock with your device’s chosen method, like a pin or biometric.
• New app icon for iOS: The Bitwarden Authenticator iOS app has a new app icon.

Admin Console

• Bulk invite improvements: Several improvements have been added to the organization user invite process, such as a visual status indicator and bulk-action warnings.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.2.1, Browser Extension 2026.2.0, Mobile 2026.2.1, Desktop 2026.2.1, and CLI 2026.2.0.)

Password Manager

• Email verification for Bitwarden Send: When users create a Send, they can choose to protect it with email verification for recipients. Learn more about Bitwarden Send.
• Item archiving: Users on paid subscriptions can now archive vault items to exclude them from search and from autofill without removing them from the vault.
• Biometric unlock for Flatpak: Flatpak-installed desktop apps now support unlock with biometrics.
• Increase minimum KDF iterations: If your PBKDF2 KDF iterations are below 600,000, the default level since release 2023.2.0, you'll be asked to update the setting or the increase will apply automatically when you next log in or unlock with your master password.

Admin Console

• Huntress SIEM integration: Bitwarden Teams and Enterprise organizations can now integrate with Huntress for security information and event management (SIEM).

Secrets Manager

• Jenkins integration: The Bitwarden Secrets Manager CLI can now be used to inject secrets into Jenkins Pipelines.

(This listed release number is for the Bitwarden Server, other version numbers released in this cycle include Web 2026.2.0, Browser Extension 2026.1.1, and Mobile 2026.2.0.)

Password Manager

• Import SSH keys from 1Password: SSH keys can now be imported directly to Bitwarden using the .1pux export format offered by 1Password.
• Import passkeys from a Bitwarden .json: Passkeys that are exported from Bitwarden in a .json file can now be imported to a new Bitwarden account or used as a short-term backup.

Admin Console

• API - New member management endpoints: The Public API now includes endpoints for revoking and restoring access to organization members.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.1.1, Browser Extension 2026.1.0, Mobile 2026.1.0, Desktop 2026.1.0, and CLI 2026.1.0.)

Password Manager

• Unlock with passkeys: Passkeys can now unlock your web app or browser extension. This grows existing passkey support beyond logging in, letting you access your vault without entering the master password.
• Desktop app UI update: The desktop app UI has been updated, and more updates will follow.
• New default width for extensions: Browser extensions have a new, wider default width. You can change back to the narrow version interface or to an extra wide one from the Appearance menu.

Note

This release includes an update of our Linux desktop to Electron 39. Users of the Bitwarden Flatpak application on Fedora-based Linux distributions with KDE may experience issues with the clipboard when importing SSH keys. This is a known issue that Bitwarden is investigating.

Self-host

• Enhanced error log redaction: Error logs created for authentication tokens that are invalid, expired, or have an incorrect issuer, audience, or signature, now redact all personally identifiable information (PII) and authentication data.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.2, Browser Extension 2025.12.1, Mobile 2025.12.1, Desktop 2025.12.1, and CLI 2025.12.1)

Password Manager

Note

An issue has been fixed for the Windows portable desktop app, the result of which will automatically log users out when the app is updated to this version. Once logged back in, the Windows portable desktop app will resume working as normal.

• Subscription storage increase: Premium subscriptions and paid organizations now offer 5GB of storage for attachments and Sends.
• Updating PINs on legacy clients: Updating Bitwarden clients from version 2025.9.0 or older to this version will require users to set their PIN again in order to continue using unlock with PIN. No changes have been made to PIN requirements themselves.

Admin Console

• Block account creation for claimed domains policy: This new policy will allow administrators to prevent people with email addresses that match your claimed domain from creating a Bitwarden account outside of the organization.
• Optimized bulk re-inviting: The ability to re-send organization invitations in bulk from the Admin Console, previously limited to 500 invitations per action, now supports up to 8,000 invitations per action.
• Session timeout policy: You can now pick from more options in the session timeout Enterprise policy: On system lock, On app restart, and Never. All of the new timeout options are enforced across all Bitwarden clients when selected.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.1)

Password Manager

• Import and export pages renamed: To improve the user experience, the "Import data" and "Export vault" pages have been renamed simply "Import" and "Export" on the web app. These pages will be renamed in other clients in a future release.

Admin Console

• Enterprise policy name updated: The "Remove individual vault export" policy is now called Remove export. This is a name change only; what the policy does remains the same.

Self-host

• Key Connector confirmations: To increase security, an additional organization confirmation dialogue has been added to the Key Connector login process for new users.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.0, Browser Extension 2025.12.0, Mobile 2025.12.0, Desktop 2025.12.0, and CLI 2025.12.0)

Password Manager

• Vault health alerts and password coaching: As a new feature for Premium plans, Password Manager will now alert users that they should update a password when it's detected that the password is weak, re-used, or exposed and recommend that they be updated.
• Direct import for Chrome and Brave: Transfer your data from Chrome and Brave browsers into Bitwarden quicker than ever with direct import.
• Autofill and save URI: In the browser extension, the option to Fill & save has been rolled into the normal Autofill option. Now, when selecting Autofill for an item without a matching URI, an option to save the current website URI to the login item will appear.

Admin Console

• Prevent SSO login for revoked users: Users that have been revoked from an organization will no longer be able to use SSO to log in to their SSO-linked account.

Password Manager

• Log in with passkeys: Now generally available in the browser extension and web app, log in to your Bitwarden account faster and more securely using passkeys.
• Android autofill update: Password manager on Android uses an updated autofill match logic for Opera, Edge, and Samsung Internet by default. Prior to this version, this logic used only when the Compatibility Mode option was turned on.

Admin Console

• Access Intelligence: Enterprise organizations can use Access Intelligence to review at-risk credentials and notify members they need to take action on those credentials.
• Policy name update: The Automatically log in users for allowed applications policy has been renamed to Automatic login with SSO.

Self-host

• Bitwarden lite general availability: Bitwarden lite, formerly Bitwarden Unified, is now generally available.
• Environment variable update: The self-host environment variable globalSettings__syslog__destination has been deprecated. Learn more about Self-hosted environment variables.

Password Manager

• Log in with passkey support on browser extensions: Users can now log in to browser extensions with a passkey. Currently, Chrome and Chromium-based browsers like Edge are supported.
• Windows Hello update: You can now unlock your vault with biometrics immediately after the Windows desktop app restarts, rather than entering a master password or PIN. When setting up biometrics in the Windows desktop app, uncheck Require master password or PIN on app restart.
• Right-click in web app: In the web app Vaults view, you can now right-click to call up the same menu you'd access using the options menu.
• Improved sign-up flow for premium subscription: Users seeking the benefits of a paid Bitwarden plan will find it easier to upgrade their account. Select the Upgrade your plan button within the web app navigation to learn more about and select a paid plan.

Admin Console

• Default URI match detection for organizations: Organization owners and admins can now choose the default URI match detection method for their members. Members can still edit the URI match detection method for individual login items.
• My items: When the Enforce organization data ownership policy is turned on, the organization owns new members’ items by default. Members subject to this policy can now save items in a new My items location, providing members with privacy while ensuring admins can transfer data after a member leaves the organization.

Self-host

• Backup script update: Docker deployments utilizing the packaged backup-db.sh script have been updated to the Simple recovery model to prevent transaction log file sizes from compounding.
• Web clients require https configuration: Self-hosted server connections will now require https:// configuration. Server URLs without https:// will receive an error message.

Password Manager

• Android Chrome integration version requirement: To continue using the Chrome browser integration on Android, upgrade the Chrome app to at least version 135. This is required due structural changes in Chrome and Bitwarden autofill integration processes.

Admin Console

• Sumo Logic SIEM integration: A new integration is available for security information and event management (SIEM) with Sumo Logic. The integration offers comprehensive event coverage across authentication, organizational activities, and vault items.