Bitwarden Release Notes

note

Biometric Unlock for Browser Extensions is available for only Chromium-based browsers (e.g. Chrome, Edge) with v1.48.0 of the Browser Extension, provided you have the latest version (2021-01-19) of the Desktop App.

When your Browser Extension updates to this version, you may be asked to accept a new permission for Bitwarden to Communicate with cooperating native applications. This permission is safe, but optional, and will enable the Browser Extension to communicate with the Bitwarden Desktop App, which is required to enable Biometric Unlock (see here for details). Declining this permission will allow you to use v1.48.0 without Biometric Unlock functionality.

Biometric Unlock is currently not available for:

• Firefox Browser Extensions below version 87.

• Microsoft App Store Desktop Apps (a side-loaded Windows Desktop App, available at bitwarden.com/download/ will work fine).

• Side-loaded MacOS Desktop Apps (an App Store Desktop app will work fine).

The Bitwarden team is investigating these and will provide updates as things progress.

For the first major release of 2021, the Bitwarden team combined multiple major enhancements to address the critical needs of all users, including:

• Emergency Access: Bitwarden's new Emergency Access feature enables users to designate and manage trusted emergency contacts, who may request access to their Vault in a zero knowledge encryption environment (see here for details).here

• Encrypted Exports: Personal users and Organizations can now export Vault data in an encrypted .json file (see here for details).

• New Role: A Custom role is now available to allow for granular control over user permissions (see here for details).

• New Enterprise Policy: The Personal Ownership policy is now available for use by Enterprise Organization (see here for details).

• Biometric Unlock for Browser Extensions: Using an integration with a native Desktop application, you can now use Biometric input to unlock Chromium-based Browser Extensions (see here for details).

The latest release of Bitwarden adds SSO-related enhancements to all client applications, including:

• New Enterprise Policies: The Single Organization and Single Sign-On Authentication polices are now available for use by Enterprise Organizations (see here for details).

• API Key for CLI: Authenticate into the Bitwarden CLI using an API Key newly available from your Web Vault (see here for details).

• Improvements to SSO Onboarding: We've made some improvements to the way users are onboarded via SSO to prevent potential security risks (see here for details).

• GDPR Acknowledgement: From now on, new users of Bitwarden will be asked to acknowledge a Privacy Policy on registration.

• Android 11 Inline Auto-fill: For devices using Android 11+, enabling the Auto-fill Service will display suggestions inline for IMEs that also support this feature (see here for details).

(The listed release number is for the Bitwarden Server. Other version numbers released in this cycle include Web 2026.9.0, Browser Extension 2026.9.0, Desktop 2026.9.0, Mobile 2026.9.0, and CLI 2026.9.0)

Password Manager

• Autofill SSH keys: SSH key items stored in your vault can now be autofilled using existing browser extension autofill methods, the same way logins, cards, and identities are autofilled. Learn more about autofill and SSH keys.

•  Quick copy from desktop app: Copy shortcut buttons are now available for vault items when you hover over them in the desktop app, making it faster to copy an item's credentials.

Admin Console

•  Stage users with SCIM and Directory Connector: Users provisioned with SCIM or Directory Connector can now be provisioned into a Staged status rather than immediately issued invitations. This is controlled by a new setting in the SCIM provisioning view or within Directory Connector's sync options.

  tip

  For new organizations and organizations not yet using SCIM or Directory Connector, both tools by default will be set to provision users into the Staged status rather than automatically issue invitations. …

(The listed release number is for the Bitwarden Server. Other version numbers released in this cycle include Web 2026.8.1, and Mobile 2026.8.1)

Password Manager

•  Quick copy from web app: A new setting displays copy shortcut buttons on vault items when you hover over them in the web app, making it faster to copy an item's credentials.

•  "New" buttons renamed to "Add" or "Create": The New button is now Add in most locations, including when adding a new vault item, and to Create when configuring a Send. This is a cosmetic update only; there are no changes to functionality.

Admin Console

•  Generate organization invite link: Enterprise organizations can now generate a shareable link to invite members. Share the link through your organization's preferred communication channel, and restrict it to specific email domains to control who can use it. Rotate the link at any time to invalidate the previous one, or deactivate it to stop new members from joining.

(The listed release number is for the Bitwarden Server. Other version numbers released in this cycle include Web 2026.8.0, Browser Extension 2026.8.0, Desktop 2026.8.0, Mobile 2026.8.0, and CLI 2026.8.0.)

Password Manager

•  Action bar on desktop: The action bar is now available on the Bitwarden desktop app. Use the action bar to perform bulk vault activities such as assigning item(s) to a collection or folder, and archiving vault items.

• Devices list now available on iOS: The Devices list, used to surface devices that your account has been used on, is now available on iOS.

• Import from Delinea: You can now import .csv and .xml files from Delinea to quickly transfer your data to Bitwarden.

  note

  When importing secrets from Delinea Secret Server, any item with a URL associated with it will automatically take the Login item type. All other imported data will take the Secure Note type with custom fields to accommodate your data.

Admin Console

•  Manage Send policy: Organizations can now control all Send-related functions with the Manage Send policy in the Admin Console. The new policy replaces the previous set of separate Send policies. …

(The listed release number is for the Bitwarden Server. Other version numbers released in this cycle include Web 2026.7.0, Browser Extension 2026.7.0, Desktop 2026.7.0, Mobile 2026.7.0, and CLI 2026.7.0.)

Password Manager

•  Action bar for vault items: A new batch action bar has been added to the vault web app and admin console. Use the action bar to perform vault activities such as sharing item(s) to a collection or folder, and archiving vault items.

• Save and fill from extensions: On browser extensions, the inline menu can now more easily simultaneously save and autofill new credentials.

• CXP available on Android: With Android 10+, you can import directly to or export directly from Bitwarden and any other Android app that supports FIDO's Credential Exchange Protocol.

•  Make Bitwarden default on extension installation: Browser extensions will now prompt you to make Bitwarden your browser's default password manager on installation. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle include Web 2026.6.2, Browser Extension 2026.6.0, Desktop 2026.6.0, Mobile 2026.6.0, and CLI 2026.6.0)

Password Manager

• Fill assist for browser extensions: Activate fill assist to improve autofill accuracy on a Bitwarden-curated selection of websites known to cause widespread autofill issues.

•  Biometrics on Linux simplified: Setting up biometrics on Linux to unlock the Bitwarden desktop no longer requires a secret service daemon.

•  Desktop app settings UI update: The Desktop app settings dialogue has been updated. Learn more about the Desktop app.

• Send recipient limit: When creating a Send restricted to specific people, the email address field now supports up to 2,500 characters.

•  At-risk password notification UI update: The at-risk password label below the password field on View Login remains, but the banner that previously appeared at the top of the view was removed. The banner that appears in your vault when Access Intelligence is used to request a password change did not change. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Directory Connector 2026.6.0, Web 2026.6.0 and Mobile 2026.5.1)

Password Manager

• Devices list now available on Android: The Devices list, used to surface devices that your account has been used on, is now available on the Android.

Directory Connector

The newest version of Directory Connector includes modernizations and infrastructure improvements that will affect installing or updating the app:

• Directory Connector for macOS is now shipped as a native ARM64 binary, replacing the Rosetta build of the app. On macOS, Directory Connector is now only supported on Apple Silicon.

• If you use both the Directory Connector Desktop App and CLI, you must update both clients before using the newest version of either.

• Keytar has been replaced with OS-specific native modules. As a result, a different file is packaged with the bwdc CLI executable. The setup process remains the same despite the new filename.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.5.0, Browser Extension 2026.5.0, Desktop 2026.5.0, Mobile 2026.5.0, and CLI 2026.5.0)

Password Manager

•  Devices list now available on desktop: The Devices list is now available on the desktop app, alongside the web app and browser extension, to surface devices that your account has been used on.

• Biometrics integration now available on Flatpak and Snap: Biometric unlock of browser extensions, usable through an integration with the Bitwarden desktop app, is now available on Flatpak and Snap distributions.

•  Web app quick actions: Launch a website and copy vault data from new quick actions buttons, available by hovering over an item in the web app.

• Send UI update: Selecting a Send item in the browser extension and web app will now display a View screen instead of routing directly to the Edit screen.

Admin Console

•  Blumira SIEM integration: Teams and Enterprise organizations can now integrate with Blumira for security and event management (SIEM).

•  Expanded account recovery options: Account recovery now supports revoked members and can reset two-step login methods. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.4.2, Browser Extension 2026.4.0, Desktop 2026.4.0, Mobile 2026.4.1, and CLI 2026.4.0)

Password Manager

•  Change master password on extensions and desktop: You can now change your master password on browser extensions and desktop apps. To support future improvements, workflows that allowed a master password change via the CLI were removed.

•  Desktop UI updates: The desktop app UI has been updated with visual improvements.

•  Click to autofill by default: Within the browser extension, you can now click anywhere on an item within Autofill suggestions to insert your credentials. This update removes the Fill button and Click items in autofill suggestions to fill setting for a more streamlined appearance.

• Updated Clear Clipboard default: The browser extension's Clear Clipboard setting now defaults to five minutes, an extra precaution to help keep your credentials secure.

• mTLS support now on iOS: Both the iOS and Android mobile apps now support uploading mTLS certificates for self-hosted servers that require client authentication. Upload your certificate when you set your server URL. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.4.0 and Mobile 2026.4.0.)

Password Manager

• Preview image attachments on Android: You can now preview image attachments from within the Password Manager Android app, without having to download the file to your device. Previewing image attachments will be available on iOS in a future release.

Admin Console

• Updated Enterprise Policies page: On the Policies page, the Enterprise Policies are now organized into three categories: Data Controls, Authentication, and Vault Management. You can also review at a glance which policies are turned on or off.

• Access Intelligence dashboard update: Visualize how at-risk applications, passwords, and members have changed over time relative to absolute changes in application, password, and member counts with new graphs on the Access Intelligence Activity view.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.3.1, Browser Extension 2026.3.0, Mobile 2026.3.1, Desktop 2026.3.1, and CLI 2026.3.0.)

Password Manager

•  Autofill button on View Login: Autofill credentials directly from the View Login page in the browser extension.

• Generator options for password protected Sends: All password generator features are now available when creating password protected Sends.

• Arm64 builds available for Linux: Arm64 desktop builds are now available for Linux users on Snapcraft and Flathub. See downloads for additional information.

Admin Console

•  Automatic confirmation policy: A new policy allows for automatic confirmation of new members joining the organization. Using this policy requires an understanding of how it works and Bitwarden support must be contacted to activate it in your organization.

•  Policy name update: The Enforce organization data ownership policy has been renamed to Centralize organization ownership. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.3.0, Browser Extension 2026.3.0, and Mobile 2026.3.0.)

Password Manager

• Email verification for Bitwarden Send: Protect Sends with email verification is now available on mobile clients. Learn more about Bitwarden Send.

Authenticator

• Session timeout for Android: The Bitwarden Authenticator Android app can now be set to lock after a period of time that you can set. Unlock with your device’s chosen method, like a pin or biometric.

• New app icon for iOS: The Bitwarden Authenticator iOS app has a new app icon.

Admin Console

• Bulk invite improvements: Several improvements have been added to the organization user invite process, such as a visual status indicator and bulk-action warnings.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.2.1, Browser Extension 2026.2.0, Mobile 2026.2.1, Desktop 2026.2.1, and CLI 2026.2.0.)

Password Manager

• Email verification for Bitwarden Send: When users create a Send, they can choose to protect it with email verification for recipients. Learn more about Bitwarden Send.

• Item archiving: Users on paid subscriptions can now archive vault items to exclude them from search and from autofill without removing them from the vault.

• Biometric unlock for Flatpak: Flatpak-installed desktop apps now support unlock with biometrics.

• Increase minimum KDF iterations: If your PBKDF2 KDF iterations are below 600,000, the default level since release 2023.2.0, you'll be asked to update the setting or the increase will apply automatically when you next log in or unlock with your master password.

Admin Console

• Huntress SIEM integration: Bitwarden Teams and Enterprise organizations can now integrate with Huntress for security information and event management (SIEM).

Secrets Manager …

(This listed release number is for the Bitwarden Server, other version numbers released in this cycle include Web 2026.2.0, Browser Extension 2026.1.1, and Mobile 2026.2.0.)

Password Manager

• Import SSH keys from 1Password: SSH keys can now be imported directly to Bitwarden using the .1pux export format offered by 1Password.

• Import passkeys from a Bitwarden .json: Passkeys that are exported from Bitwarden in a .json file can now be imported to a new Bitwarden account or used as a short-term backup.

Admin Console

• API - New member management endpoints: The Public API now includes endpoints for revoking and restoring access to organization members.