Bitwarden Updates & Release Notes

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle include Web 2026.6.2, Browser Extension 2026.6.0, Desktop 2026.6.0, Mobile 2026.6.1, and CLI 2026.6.0)

Password Manager

• Fill assist for browser extensions: Activate fill assist to improve autofill accuracy on a Bitwarden-curated selection of websites known to cause widespread autofill issues.
• Biometrics on Linux simplified: Setting up biometrics on Linux to unlock the Bitwarden desktop no longer requires a secret service daemon.
• Desktop app settings UI update: The Desktop app settings dialogue has been updated. Learn more about the Desktop app.
• Send recipient limit: When creating a Send restricted to specific people, the email address field now supports up to 2,500 characters.
• At-risk password notification UI update: The at-risk password label below the password field on View Login remains, but the banner that previously appeared at the top of the view was removed. The banner that appears in your vault when Access Intelligence is used to request a password change did not change.
• Vault sync UI update in browser extension: The Sync vault now text is now greyed out while a sync is in progress and becomes clickable again once the sync is complete.

Admin Console

• Organization policies now enforced for accepted members: Once a user accepts an organization invite, all configured organization policies apply to their account.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Directory Connector 2026.6.0, Web 2026.6.0 and Mobile 2026.5.1)

Password Manager

• Devices list now available on Android: The Devices list, used to surface devices that your account has been used on, is now available on the Android.

Directory Connector

The newest version of Directory Connector includes modernizations and infrastructure improvements that will affect installing or updating the app:

• Directory Connector for macOS is now shipped as a native ARM64 binary, replacing the Rosetta build of the app. On macOS, Directory Connector is now only supported on Apple Silicon.
• If you use both the Directory Connector Desktop App and CLI, you must update both clients before using the newest version of either.
• Keytar has been replaced with OS-specific native modules. As a result, a different file is packaged with the bwdc CLI executable. The setup process remains the same despite the new filename.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.5.0, Browser Extension 2026.5.0, Desktop 2026.5.0, Mobile 2026.5.0, and CLI 2026.5.0)

Password Manager

• Devices list now available on desktop: The Devices list is now available on the desktop app, alongside the web app and browser extension, to surface devices that your account has been used on.
• Biometrics integration now available on Flatpak and Snap: Biometric unlock of browser extensions, usable through an integration with the Bitwarden desktop app, is now available on Flatpak and Snap distributions.
• Web app quick actions: Launch a website and copy vault data from new quick actions buttons, available by hovering over an item in the web app.
• Send UI update: Selecting a Send item in the browser extension and web app will now display a View screen instead of routing directly to the Edit screen.

Admin Console

• Blumira SIEM integration: Teams and Enterprise organizations can now integrate with Blumira for security and event management (SIEM).
• Expanded account recovery options: Account recovery now supports revoked members and can reset two-step login methods.
• Revoked member reason: There's a new tooltip next to each member on the Members → Revoked page that explains why members were revoked from your organization.
• Updated event logs: Password Manager now saves when an attachment is added to an organization-owned item, using the existing Created attachment for item event.

Self-host

• Helm Chart v2.0: Version 2.0 of the self-host Helm chart will includes two breaking changes:
  • NGINX ingress is now disabled by default in this version of the chart. The chart includes support for Gateway API as an alternative.
  • The image.name field has been removed from values.yaml. Any configurations using image.name must be updated to use image.repository instead.

Note

Before upgrading to this version of the chart, review these changes and update your values file accordingly. For additional information on setting up or migrating to Gateway API, refer to Helm Traffic Routing.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.4.2, Browser Extension 2026.4.0, Desktop 2026.4.0, Mobile 2026.4.1, and CLI 2026.4.0)

Password Manager

• Change master password on extensions and desktop: You can now change your master password on browser extensions and desktop apps. To support future improvements, workflows that allowed a master password change via the CLI were removed.
• Desktop UI updates: The desktop app UI has been updated with visual improvements.
• Click to autofill by default: Within the browser extension, you can now click anywhere on an item within Autofill suggestions to insert your credentials. This update removes the Fill button and Click items in autofill suggestions to fill setting for a more streamlined appearance.
• Updated Clear Clipboard default: The browser extension's Clear Clipboard setting now defaults to five minutes, an extra precaution to help keep your credentials secure.
• mTLS support now on iOS: Both the iOS and Android mobile apps now support uploading mTLS certificates for self-hosted servers that require client authentication. Upload your certificate when you set your server URL.
• Attachment status loading bar: Uploading an attachment on the desktop app and browser extension will display an upload status bar.
• Keeper JSON importer: You can now import data from Keeper with a JSON file.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.4.0 and Mobile 2026.4.0.)

Password Manager

• Preview image attachments on Android: You can now preview image attachments from within the Password Manager Android app, without having to download the file to your device. Previewing image attachments will be available on iOS in a future release.

Admin Console

• Send controls Enterprise policy: Two Enterprise policies, Send Options and Remove Send, were merged into the newly titled Send controls policy. If either policy was previously turned on, the chosen options will transfer and remain unchanged.
• Updated Enterprise Policies page: On the Policies page, the Enterprise Policies are now organized into three categories: Data Controls, Authentication, and Vault Management. You can also review at a glance which policies are turned on or off.
• Access Intelligence dashboard update: Visualize how at-risk applications, passwords, and members have changed over time relative to absolute changes in application, password, and member counts with new graphs on the Access Intelligence Activity view.

2026.3.2

(Release details omitted for brevity.)

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.3.1, Browser Extension 2026.3.0, Mobile 2026.3.1, Desktop 2026.3.1, and CLI 2026.3.0.)

Password Manager

• Autofill button on View Login: Autofill credentials directly from the View Login page in the browser extension.
• Generator options for password protected Sends: All password generator features are now available when creating password protected Sends.
• Arm64 builds available for Linux: Arm64 desktop builds are now available for Linux users on Snapcraft and Flathub.

Admin Console

• Automatic confirmation policy: A new policy allows for automatic confirmation of new members joining the organization. Using this policy requires an understanding of how it works and Bitwarden support must be contacted to activate it in your organization.
• Policy name update: The Enforce organization data ownership policy has been renamed to Centralize organization ownership.
• Transfer items from My Vault to My Items: Organizations using the Centralize organization ownership policy can now opt to prompt users to transfer items from My Vault to My Items using the browser extension.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.3.0, Browser Extension 2026.3.0, and Mobile 2026.3.0.)

Password Manager

• Email verification for Bitwarden Send: Protect Sends with email verification is now available on mobile clients.

Authenticator

• Session timeout for Android: The Bitwarden Authenticator Android app can now be set to lock after a period of time that you can set. Unlock with your device’s chosen method, like a pin or biometric.
• New app icon for iOS: The Bitwarden Authenticator iOS app has a new app icon.

Admin Console

• Bulk invite improvements: Several improvements have been added to the organization user invite process, such as a visual status indicator and bulk-action warnings.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.2.1, Browser Extension 2026.2.0, Mobile 2026.2.1, Desktop 2026.2.1, and CLI 2026.2.0.)

Password Manager

• Email verification for Bitwarden Send: When users create a Send, they can choose to protect it with email verification for recipients. Learn more about Bitwarden Send.
• Item archiving: Users on paid subscriptions can now archive vault items to exclude them from search and from autofill without removing them from the vault.
• Biometric unlock for Flatpak: Flatpak-installed desktop apps now support unlock with biometrics.
• Increase minimum KDF iterations: If your PBKDF2 KDF iterations are below 600,000, the default level since release 2023.2.0, you'll be asked to update the setting or the increase will apply automatically when you next log in or unlock with your master password.

Admin Console

• Huntress SIEM integration: Bitwarden Teams and Enterprise organizations can now integrate with Huntress for security information and event management (SIEM).

Secrets Manager

• Jenkins integration: The Bitwarden Secrets Manager CLI can now be used to inject secrets into Jenkins Pipelines.

(This listed release number is for the Bitwarden Server, other version numbers released in this cycle include Web 2026.2.0, Browser Extension 2026.1.1, and Mobile 2026.2.0.)

Password Manager

• Import SSH keys from 1Password: SSH keys can now be imported directly to Bitwarden using the .1pux export format offered by 1Password.
• Import passkeys from a Bitwarden .json: Passkeys that are exported from Bitwarden in a .json file can now be imported to a new Bitwarden account or used as a short-term backup.

Admin Console

• API - New member management endpoints: The Public API now includes endpoints for revoking and restoring access to organization members.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.1.1, Browser Extension 2026.1.0, Mobile 2026.1.0, Desktop 2026.1.0, and CLI 2026.1.0.)

Password Manager

• Unlock with passkeys: Passkeys can now unlock your web app or browser extension. This grows existing passkey support beyond logging in, letting you access your vault without entering the master password.
• Desktop app UI update: The desktop app UI has been updated, and more updates will follow.
• New default width for extensions: Browser extensions have a new, wider default width. You can change back to the narrow version interface or to an extra wide one from the Appearance menu.

Note

This release includes an update of our Linux desktop to Electron 39. Users of the Bitwarden Flatpak application on Fedora-based Linux distributions with KDE may experience issues with the clipboard when importing SSH keys. This is a known issue that Bitwarden is investigating.

Self-host

• Enhanced error log redaction: Error logs created for authentication tokens that are invalid, expired, or have an incorrect issuer, audience, or signature, now redact all personally identifiable information (PII) and authentication data.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.2, Browser Extension 2025.12.1, Mobile 2025.12.1, Desktop 2025.12.1, and CLI 2025.12.1)

Password Manager

Note

An issue has been fixed for the Windows portable desktop app, the result of which will automatically log users out when the app is updated to this version. Once logged back in, the Windows portable desktop app will resume working as normal.

• Subscription storage increase: Premium subscriptions and paid organizations now offer 5GB of storage for attachments and Sends.
• Updating PINs on legacy clients: Updating Bitwarden clients from version 2025.9.0 or older to this version will require users to set their PIN again in order to continue using unlock with PIN. No changes have been made to PIN requirements themselves.

Admin Console

• Block account creation for claimed domains policy: This new policy will allow administrators to prevent people with email addresses that match your claimed domain from creating a Bitwarden account outside of the organization.
• Optimized bulk re-inviting: The ability to re-send organization invitations in bulk from the Admin Console, previously limited to 500 invitations per action, now supports up to 8,000 invitations per action.
• Session timeout policy: You can now pick from more options in the session timeout Enterprise policy: On system lock, On app restart, and Never. All of the new timeout options are enforced across all Bitwarden clients when selected.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.1)

Password Manager

• Import and export pages renamed: To improve the user experience, the "Import data" and "Export vault" pages have been renamed simply "Import" and "Export" on the web app. These pages will be renamed in other clients in a future release.

Admin Console

• Enterprise policy name updated: The "Remove individual vault export" policy is now called Remove export. This is a name change only; what the policy does remains the same.

Self-host

• Key Connector confirmations: To increase security, an additional organization confirmation dialogue has been added to the Key Connector login process for new users.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.0, Browser Extension 2025.12.0, Mobile 2025.12.0, Desktop 2025.12.0, and CLI 2025.12.0)

Password Manager

• Vault health alerts and password coaching: As a new feature for Premium plans, Password Manager will now alert users that they should update a password when it's detected that the password is weak, re-used, or exposed and recommend that they be updated.
• Direct import for Chrome and Brave: Transfer your data from Chrome and Brave browsers into Bitwarden quicker than ever with direct import.
• Autofill and save URI: In the browser extension, the option to Fill & save has been rolled into the normal Autofill option. Now, when selecting Autofill for an item without a matching URI, an option to save the current website URI to the login item will appear.

Admin Console

• Prevent SSO login for revoked users: Users that have been revoked from an organization will no longer be able to use SSO to log in to their SSO-linked account.