Bitwarden Release Notes

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2026.1.1, Browser Extension 2026.1.0, Mobile 2026.1.0, Desktop 2026.1.0, and CLI 2026.1.0.)

Password Manager

• Unlock with passkeys: Passkeys can now unlock your web app or browser extension. This grows existing passkey support beyond logging in, letting you access your vault without entering the master password.

• Desktop app UI update: The desktop app UI has been updated, and more updates will follow.

• New default width for extensions: Browser extensions have a new, wider default width. You can change back to the narrow version interface or to an extra wide one from the Appearance menu.

note

This release includes an update of our Linux desktop to Electron 39. Users of the Bitwarden Flatpak application on Fedora-based Linux distributions with KDE may experience issues with the clipboard when importing SSH keys. This is a known issue that Bitwarden is investigating.

Self-host

• Enhanced error log redaction: Error logs created for authentication tokens that are invalid, expired, or have an incorrect issuer, audience, or signature, now redact all personally identifiable information (PII) and authentication data.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.2, Browser Extension 2025.12.1, Mobile 2025.12.1, Desktop 2025.12.1, and CLI 2025.12.1)

Password Manager

note

Desktop App Announcement

An issue has been fixed for the Windows portable desktop app, the result of which will automatically log users out when the app is updated to this version. Once logged back in, the Windows portable desktop app will resume working as normal.

• Subscription storage increase: Premium subscriptions and paid organizations now offer 5GB of storage for attachments and Sends.

• Updating PINs on legacy clients: Updating Bitwarden clients from version 2025.9.0 or older to this version will require users to set their PIN again in order to continue using unlock with PIN. No changes have been made to PIN requirements themselves.

Admin Console

• Block account creation for claimed domains policy: This new policy will allow administrators to prevent people with email addresses that match your claimed domain from creating a Bitwarden account outside of the organization. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.1)

Password Manager

• Import and export pages renamed: To improve the user experience, the "Import data" and "Export vault" pages have been renamed simply "Import" and "Export" on the web app. These pages will be renamed in other clients in a future release.

Admin Console

• Enterprise policy name updated: The "Remove individual vault export" policy is now called Remove export. This is a name change only; what the policy does remains the same.

Self-host

• Key Connector confirmations: To increase security, an additional organization confirmation dialogue has been added to the Key Connector login process for new users.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.12.0, Browser Extension 2025.12.0, Mobile 2025.12.0, Desktop 2025.12.0, and CLI 2025.12.0)

Password Manager

• Vault health alerts and password coaching: As a new feature for Premium plans, Password Manager will now alert users that they should update a password when it's detected that the password is weak, re-used, or exposed and recommend that they be updated.

• Direct import for Chrome and Brave: Transfer your data from Chrome and Brave browsers into Bitwarden quicker than ever with direct import.

• Autofill and save URI: In the browser extension, the option to Fill & save has been rolled into the normal Autofill option. Now, when selecting Autofill for an item without a matching URI, an option to save the current website URI to the login item will appear.

Admin Console

• Prevent SSO login for revoked users: Users that have been revoked from an organization will no longer be able to use SSO to log in to their SSO-linked account.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.11.2, iOS 2025.11.0, and Android 2025.11.1)

Password Manager

• Log in with passkeys: Now generally available in the browser extension and web app, log in to your Bitwarden account faster and more securely using passkeys.

• Android autofill update: Password manager on Android uses an updated autofill match logic for Opera, Edge, and Samsung Internet by default. Prior to this version, this logic used only when the Compatibility Mode option was turned on.

Admin Console

• Access Intelligence: Enterprise organizations can use Access Intelligence to review at-risk credentials and notify members they need to take action on those credentials.

• Policy name update: The Automatically log in users for allowed applications policy has been renamed to Automatic login with SSO.

Self-host

• Bitwarden lite general availability: Bitwarden lite, formerly Bitwarden Unified, is now generally available. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.11.0, Browser Extension 2025.11.0, Mobile 2025.11.0, Desktop 2025.11.0, and CLI 2025.11.0)

Password Manager

• Log in with passkey support on browser extensions: Users can now log in to browser extensions with a passkey. Currently, Chrome and Chromium-based browsers like Edge are supported.

• Windows Hello update: You can now unlock your vault with biometrics immediately after the Windows desktop app restarts, rather than entering a master password or PIN. When setting up biometrics in the Windows desktop app, uncheck Require master password or PIN on app restart.

• Right-click in web app: In the web app Vaults view, you can now right-click to call up the same menu you'd access using the  options menu.

• Improved sign-up flow for premium subscription: Users seeking the benefits of a paid Bitwarden plan will find it easier to upgrade their account. Select the Upgrade your plan button within the web app navigation to learn more about and select a paid plan.

Admin Console …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.10.1 and Mobile 2025.10.1)

Password Manager

• Android Chrome integration version requirement: To continue using the Chrome browser integration on Android, upgrade the Chrome app to at least version 135. This is required due structural changes in Chrome and Bitwarden autofill integration processes.

Admin Console

• Sumo Logic SIEM integration: A new integration is available for security information and event management (SIEM) with Sumo Logic. The integration offers comprehensive event coverage across authentication, organizational activities, and vault items.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.10.0, Browser Extension 2025.10.0, Mobile 2025.10.0, Desktop 2025.10.0, and CLI 2025.10.0)

Password Manager

• Direct importer for Edge, Opera, and Vivaldi browsers: Move your data into Bitwarden quickly and securely with direct import for Edge, Opera, and Vivaldi browsers.

• Simplified login screen for SSO users: Members of organizations using the Require single sign-on policy will now have other authentication options greyed-out on the login screen, provided they've authenticated at least once on that device.

Secrets Manager

• New event logs: Secrets Manager will now log events when machine accounts are created, deleted, have users or groups assigned to them, and have users or groups removed from them.

Self-host

• New environment variables: New environment variables are available for configuring the handling of refresh tokens, allowing users to determine the lifetime and timeout of authentication tokens on self-hosted servers.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.9.1)

Admin Console

• Member invitation subject line update: The email subject line for invitations to join an organization was updated.

• Tax ID reminder: If you're a business owner or provider admin in a country that collects value added tax (VAT) and haven't added your tax ID yet, you'll see a banner on the Admin Console, Payment Details, and Provider Portal pages. Click Add a Tax ID to update the billing details with your organization's tax ID.

Secrets Manager

• Terraform Provider: Bitwarden Secrets Manager now offers a Terraform provider, capable of fetching, creating, and managing Secrets Manager secrets for your Terraform infrastructure. Learn more about the Terraform provider here.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.9.0, Browser Extension 2025.9.0, Mobile 2025.9.0, Desktop 2025.9.0, and CLI 2025.9.0)

Password Manager

• Device approval using browser extensions: Approve new trusted devices and login with device requests using the browser extension.

• CXP for iOS 26: Users on iOS 26 can now import directly to or export directly from Bitwarden and any other iOS app that supports FIDO's Credential Exchange Protocol. Learn more about importing and exporting.

Admin Console

• Collection settings updates: Some collection management settings have been renamed and more granular events will now be logged when they're turned on or off. Learn more here.

• Organization SSH keys: SSH keys created with the Bitwarden SSH agent can now be stored and shared in organization collections. Learn more about the Bitwarden SSH agent here.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.8.2 and Mobile 2025.8.1)

Password Manager

• Card autofill for Android: The Bitwarden Android app can now autofill cards, such as debit or credit cards, in Chrome and Chromium-based browsers. Learn more here.

• Failed 2FA emails: Users will now receive an email notifying them of failed login attempts that were prevented by two-step login. If you receive these emails, update your master password immediately to one that is strong, unique, and has never been used before. Learn more here.

Secrets Manager

• New event logs: Secrets Manager will now log events when projects are accessed, created, edited, or deleted. Learn more here.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.8.0, Browser Extension 2025.8.0, Mobile 2025.8.0, Desktop 2025.8.0, and CLI 2025.8.0)

note

To ensure compatibility with the latest Bitwarden release, please update both your clients and self-hosted server. Keeping your software current in accordance with the Bitwarden software release support policy will help to maintain full compatibility, support, and unlock the latest Bitwarden features.

Admin Console

• Remove card item type policy: An enterprise policy was added that allows enterprise organizations to restrict the use of the card item type. Learn more here.

Password Manager

• Inline autofill password generator improvements: The inline autofill password generator will now immediately offer to save the generated password as a new login item. Learn more about the inline autofill here.

• Improved Item view: New improvements to viewing vault items have been added. Updates include favicons and other important information presented at the top of the vault item. Learn more about vault items here. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.7.2)

Admin Console

• Members view performance improvements: Loading times for the Members view, particularly for organizations with large numbers of members, have been optimized.

Provider Portal

• Billing update: Providers that have not added a payment method on the Billing → Subscription page should do so as soon as possible. Providers with unpaid invoices will now be suspended 30 days after an unpaid invoice is due, including suspension of client organizations. Adding a valid payment method, for those that have not already, will ensure seamless continuation of service.

Self-host

• Deprecated logging methods: For self-hosted users, the direct integration with syslog in Bitwarden - enabled by overriding enabledglobalSettings__syslog__destination - has been deprecated in favor of integrating with Docker's syslog drivers. Users with the deprecated method will receive warning logs to notify them of the change. Learn more here.

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.7.1, Browser Extension 2025.7.0, Desktop 2025.7.1, and CLI 2025.7.0)

Password Manager

• URI Match Detection warning update: Users who choose to setup URI match detection with the advanced options Starts with and Regular expression will see a warning dialogue to confirm they understand the potential security risks associated with these autofill options. Learn more here.

• Onscreen tips for new users - Browser extension: To assist new users, onscreen tips have been added to the browser extension. These tips will help introduce new users to the features and components of the browser extension. Learn more here.

• Browser extension permission update: Browser extensions on Firefox and Safari will now require the notifications permission to support log in with device.

• Chromium integrations on Android: If you use Brave or Chrome as your web browser, toggle the new Use Brave autofill integration or Use Chrome autofill integration options. Learn more here.

Secrets Manager

• New secrets events: Event Logs will now log when secrets are created, edited, or deleted. Learn more here. …

(The listed release number is for the Bitwarden Server, other version numbers released in this cycle also include Web 2025.7.0)

Password Manager

• Password Depot 17 import: Password Depot 17 has been added to the list of formats available for direct import into Bitwarden Password Manager. Learn more here.

Admin Console

• Policy rename: The Remove individual vault policy has been renamed to the Enforce organization data ownership policy. Learn more here.

• Member permissions update: Organization members with the Manage account recovery permission can reset organization member's master passwords. This permission can be granted separately from the Manage users permission. Learn more here.

(The listed release number is for the Bitwarden server, other version numbers released in this cycle also include Web 2025.6.1, Browser Extension 2025.6.0, Desktop 2025.6.0, and CLI 2025.6.0)

note

Accounts using a legacy encryption scheme are no longer supported. Older accounts that were created before 2017 and have not logged into the web app since 2023 are using a legacy encryption scheme that is no longer supported. Only inactive accounts without user activity for two years may be impacted. Learn more here.

warning

Kerberos authentication support notice for Self-host: In some deployment modes, self-host server versions 2025.6.0 through 2025.6.2 have had an interruption in their support for Kerberos external database authentication. This will be fixed in an upcoming release of the self-host server. Customers using Kerberos authentication should wait to upgrade their self-host deployments until the next release unless instructed otherwise by Bitwarden support.

Password Manager

• Persistence in browser extensions when adding & editing items: Browser extensions will now cache changes to item data for up to two minutes even if you click out of or minimize the extension window.

• Browser extension notification redesign: Browser extension notifications have a new look and feel. Learn more here. …

(The listed release number is for the Bitwarden server, other version numbers released in this cycle include Web 2025.6.0 and Self-host 2025.6.1)

warning

Kerberos authentication support notice for Self-host: In some deployment modes, self-host server versions 2025.6.0 through 2025.6.2 have had an interruption in their support for Kerberos external database authentication. This will be fixed in an upcoming release of the self-host server. Customers using Kerberos authentication should wait to upgrade their self-host deployments until the next release unless instructed otherwise by Bitwarden support.

Self-host

• Rootless Containers for Helm: Helm deployments can now run Bitwarden in rootless mode. Learn more here.