CINXE.COM

<!DOCTYPE html><html lang="en-us" dir="ltr"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><meta name="generator" content="Gatsby 5.13.3"/><meta data-react-helmet="true" name="description" content="The Bitwarden Security Whitepaper highlights the security and compliance program, elaborating on security principles like password hashing and key derivation."/><meta data-react-helmet="true" name="keywords" content="password manager, credential manager, password security, open source password manager, self host password manager, business password manager, family password manager, team password manager, passkey security, passwordless authentication, browser password manager, best password manager"/><meta data-react-helmet="true" property="og:site_name" content="Bitwarden"/><meta data-react-helmet="true" property="og:title" content="Bitwarden Security Whitepaper | Bitwarden Help Center"/><meta data-react-helmet="true" property="og:description" content="The Bitwarden Security Whitepaper highlights the security and compliance program, elaborating on security principles like password hashing and key derivation."/><meta data-react-helmet="true" property="og:image" content="https://res.cloudinary.com/bw-com/image/upload/v1/ctf/7rncvj1f8mw7/4Vg7YzgID9SnHcXwc6HUgE/833d0c0f19e9e329aa555a837bf934f9/help-bitwarden-security-white-paper-og.png?_a=DATAdtfiZAA0"/><meta data-react-helmet="true" property="og:url" content="https://bitwarden.com/help/bitwarden-security-white-paper/"/><meta data-react-helmet="true" property="og:type" content="website"/><meta data-react-helmet="true" property="og:locale" content="en_us"/><meta data-react-helmet="true" property="og:locale:alternate" content="de_de"/><meta data-react-helmet="true" property="og:locale:alternate" content="es_la"/><meta data-react-helmet="true" property="og:locale:alternate" content="fr_fr"/><meta data-react-helmet="true" property="og:locale:alternate" content="ja_jp"/><meta data-react-helmet="true" property="og:locale:alternate" content="nl_nl"/><meta data-react-helmet="true" property="twitter:site" content="@bitwarden"/><meta data-react-helmet="true" property="twitter:domain" content="bitwarden.com"/><meta data-react-helmet="true" property="twitter:url" content="https://bitwarden.com/help/bitwarden-security-white-paper/"/><meta data-react-helmet="true" name="twitter:card" content="summary_large_image"/><meta data-react-helmet="true" name="twitter:title" content="Bitwarden Security Whitepaper | Bitwarden Help Center"/><meta data-react-helmet="true" name="twitter:description" content="The Bitwarden Security Whitepaper highlights the security and compliance program, elaborating on security principles like password hashing and key derivation."/><meta data-react-helmet="true" name="twitter:image" content="https://res.cloudinary.com/bw-com/image/upload/v1/ctf/7rncvj1f8mw7/4Vg7YzgID9SnHcXwc6HUgE/833d0c0f19e9e329aa555a837bf934f9/help-bitwarden-security-white-paper-og.png?_a=DATAdtfiZAA0"/><meta data-react-helmet="true" name="language" content="en-us"/><meta data-react-helmet="true" name="country" content="us"/><meta name="theme-color" content="#175ddc"/><style data-href="/styles.8555aa33e37dcd17c846.css" data-identity="gatsby-global-css">@font-face{font-display:block;font-family:bwi-font;font-style:normal;font-weight:400;src:url(/static/bwi-font-821cf30b0d046e49e0695c8549f13b15.woff2) format("woff2"),url(/static/bwi-font-32d9afc445aed7a3d098ef237ebde020.woff) format("woff"),url(/static/bwi-font-36db37b27e72d2c7309bb9710d7ca354.ttf) format("truetype")}[class*=" bwi-"],[class^=bwi-]{speak:never;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-family:bwi-font!important;font-style:normal;font-variant:normal;font-weight:400;line-height:1;text-transform:none}@font-face{font-display:swap;font-family:DM Sans;font-style:italic;font-weight:400;src:url(/static/dm-sans-latin-400-italic-a98234da0620cf37e17bf4f6313a2ebb.woff2) format("woff2"),url(/static/dm-sans-latin-400-italic-fb4e55c7c2cd87671c73ee6ae8302404.woff) format("woff")}@font-face{font-display:swap;font-family:DM Sans;font-style:normal;font-weight:400;src:url(/static/dm-sans-latin-400-normal-71edbde4a8ed19eeef941b7a3ad1639d.woff2) format("woff2"),url(/static/dm-sans-latin-400-normal-3343c4c5e4ff336a48d6cb0a841f4611.woff) format("woff")}@font-face{font-display:swap;font-family:DM Sans;font-style:normal;font-weight:500;src:url(/static/dm-sans-latin-500-normal-82c42c7339eddd68c79dc69dd2332da5.woff2) format("woff2"),url(/static/dm-sans-latin-500-normal-929fc41fba132f43f06325b76caf3e52.woff) format("woff")}@font-face{font-display:swap;font-family:DM Sans;font-style:normal;font-weight:700;src:url(/static/dm-sans-latin-700-normal-6261bc7f59cc2e5f8f293a89e362662f.woff2) format("woff2"),url(/static/dm-sans-latin-700-normal-3c5fc6e3ff5f9c9b09b4e3e728e052ed.woff) format("woff")} /*! @algolia/autocomplete-theme-classic 1.7.1 | MIT License | © Algolia, Inc. and contributors | https://github.com/algolia/autocomplete */:root{--aa-search-input-height:44px;--aa-input-icon-size:20px;--aa-base-unit:12;--aa-spacing-factor:1;--aa-spacing:calc(var(--aa-base-unit)*var(--aa-spacing-factor)*1px);--aa-spacing-half:calc(var(--aa-spacing)/2);--aa-panel-max-height:650px;--aa-base-z-index:9999;--aa-font-size:calc(var(--aa-base-unit)*1px);--aa-font-family:inherit;--aa-font-weight-medium:500;--aa-font-weight-semibold:600;--aa-font-weight-bold:700;--aa-icon-size:20px;--aa-icon-stroke-width:1;--aa-icon-color-rgb:119,119,163;--aa-icon-color-alpha:1;--aa-action-icon-size:20px;--aa-text-color-rgb:38,38,39;--aa-text-color-alpha:1;--aa-primary-color-rgb:62,52,211;--aa-primary-color-alpha:0.2;--aa-muted-color-rgb:128,126,163;--aa-muted-color-alpha:0.6;--aa-panel-border-color-rgb:128,126,163;--aa-panel-border-color-alpha:0.3;--aa-input-border-color-rgb:128,126,163;--aa-input-border-color-alpha:0.8;--aa-background-color-rgb:255,255,255;--aa-background-color-alpha:1;--aa-input-background-color-rgb:255,255,255;--aa-input-background-color-alpha:1;--aa-selected-color-rgb:179,173,214;--aa-selected-color-alpha:0.205;--aa-description-highlight-background-color-rgb:245,223,77;--aa-description-highlight-background-color-alpha:0.5;--aa-detached-media-query:(max-width:680px);--aa-detached-modal-media-query:(min-width:680px);--aa-detached-modal-max-width:680px;--aa-detached-modal-max-height:500px;--aa-overlay-color-rgb:115,114,129;--aa-overlay-color-alpha:0.4;--aa-panel-shadow:0 0 0 1px rgba(35,38,59,.1),0 6px 16px -4px rgba(35,38,59,.15);--aa-scrollbar-width:13px;--aa-scrollbar-track-background-color-rgb:234,234,234;--aa-scrollbar-track-background-color-alpha:1;--aa-scrollbar-thumb-background-color-rgb:var(--aa-background-color-rgb);--aa-scrollbar-thumb-background-color-alpha:1}@media (hover:none) and (pointer:coarse){:root{--aa-spacing-factor:1.2;--aa-action-icon-size:22px}}body.dark,body[data-theme=dark]{--aa-text-color-rgb:183,192,199;--aa-primary-color-rgb:146,138,255;--aa-muted-color-rgb:146,138,255;--aa-input-background-color-rgb:0,3,9;--aa-background-color-rgb:21,24,42;--aa-selected-color-rgb:146,138,255;--aa-selected-color-alpha:0.25;--aa-description-highlight-background-color-rgb:0 255 255;--aa-description-highlight-background-color-alpha:0.25;--aa-icon-color-rgb:119,119,163;--aa-panel-shadow:inset 1px 1px 0 0 #2c2e40,0 3px 8px 0 #000309;--aa-scrollbar-track-background-color-rgb:44,46,64;--aa-scrollbar-thumb-background-color-rgb:var(--aa-background-color-rgb)}.aa-Autocomplete *,.aa-DetachedFormContainer *,.aa-Panel *{box-sizing:border-box}.aa-Autocomplete,.aa-DetachedFormContainer,.aa-Panel{color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha));font-family:inherit;font-family:var(--aa-font-family);font-size:16px;font-size:var(--aa-font-size);font-weight:400;line-height:1em;margin:0;padding:0;text-align:left}.aa-Form{align-items:center;background-color:#fff;background-color:rgba(var(--aa-input-background-color-rgb),var(--aa-input-background-color-alpha));border:1px solid rgba(128,126,163,.8);border:1px solid rgba(var(--aa-input-border-color-rgb),var(--aa-input-border-color-alpha));border-radius:9999px;display:flex;line-height:1em;margin:0;position:relative;width:100%}.aa-Form[focus-within]{border-color:#3e34d3;border-color:rgba(var(--aa-primary-color-rgb),1);box-shadow:0 0 0 2px rgba(62,52,211,.2),inset 0 0 0 2px rgba(62,52,211,.2);box-shadow:rgba(var(--aa-primary-color-rgb),var(--aa-primary-color-alpha)) 0 0 0 2px,inset rgba(var(--aa-primary-color-rgb),var(--aa-primary-color-alpha)) 0 0 0 2px;outline:medium none currentColor}.aa-Form:focus-within{border-color:#3e34d3;border-color:rgba(var(--aa-primary-color-rgb),1);box-shadow:0 0 0 2px rgba(62,52,211,.2),inset 0 0 0 2px rgba(62,52,211,.2);box-shadow:rgba(var(--aa-primary-color-rgb),var(--aa-primary-color-alpha)) 0 0 0 2px,inset rgba(var(--aa-primary-color-rgb),var(--aa-primary-color-alpha)) 0 0 0 2px;outline:medium none currentColor}.aa-InputWrapperPrefix{align-items:center;display:flex;flex-shrink:0;height:44px;height:var(--aa-search-input-height);order:1}.aa-Label,.aa-LoadingIndicator{cursor:auto;flex-shrink:0;height:100%;padding:0;text-align:left}.aa-Label svg,.aa-LoadingIndicator svg{stroke-width:1;stroke-width:var(--aa-icon-stroke-width);color:#3e34d3;color:rgba(var(--aa-primary-color-rgb),1);height:auto;max-height:20px;max-height:var(--aa-input-icon-size);width:20px;width:var(--aa-input-icon-size)}.aa-LoadingIndicator,.aa-SubmitButton{height:100%;padding-left:11px;padding-left:calc(var(--aa-spacing)*.75 - 1px);padding-right:8px;padding-right:var(--aa-spacing-half);width:47px;width:calc(var(--aa-spacing)*1.75 + var(--aa-icon-size) - 1px)}@media (hover:none) and (pointer:coarse){.aa-LoadingIndicator,.aa-SubmitButton{padding-left:3px;padding-left:calc(var(--aa-spacing-half)/2 - 1px);width:39px;width:calc(var(--aa-icon-size) + var(--aa-spacing)*1.25 - 1px)}}.aa-SubmitButton{-webkit-appearance:none;appearance:none;background:none;border:0;margin:0}.aa-LoadingIndicator{align-items:center;display:flex;justify-content:center}.aa-LoadingIndicator[hidden]{display:none}.aa-InputWrapper{order:3;position:relative;width:100%}.aa-Input{-webkit-appearance:none;appearance:none;background:none;border:0;color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha));font-size:18px;height:44px;height:var(--aa-search-input-height);padding:0;width:100%}.aa-Input:-ms-input-placeholder{color:rgba(128,126,163,.6);color:rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha));opacity:1}.aa-Input::placeholder{color:rgba(128,126,163,.6);color:rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha));opacity:1}.aa-Input:focus{border-color:none;box-shadow:none;outline:none}.aa-Input::-webkit-search-cancel-button,.aa-Input::-webkit-search-decoration,.aa-Input::-webkit-search-results-button,.aa-Input::-webkit-search-results-decoration{-webkit-appearance:none;appearance:none}.aa-InputWrapperSuffix{align-items:center;display:flex;height:44px;height:var(--aa-search-input-height);order:4}.aa-ClearButton{align-items:center;background:none;border:0;color:rgba(128,126,163,.6);color:rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha));cursor:pointer;display:flex;height:100%;margin:0;padding:0 12.8333333333px;padding:0 calc(var(--aa-spacing)*.83333 - .5px)}@media (hover:none) and (pointer:coarse){.aa-ClearButton{padding:0 10.1666666667px;padding:0 calc(var(--aa-spacing)*.66667 - .5px)}}.aa-ClearButton:focus,.aa-ClearButton:hover{color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha))}.aa-ClearButton[hidden]{display:none}.aa-ClearButton svg{stroke-width:1;stroke-width:var(--aa-icon-stroke-width);width:20px;width:var(--aa-icon-size)}.aa-Panel{background-color:#fff;background-color:rgba(var(--aa-background-color-rgb),var(--aa-background-color-alpha));border-radius:4px;border-radius:calc(var(--aa-spacing)/4);box-shadow:0 0 0 1px rgba(35,38,59,.1),0 6px 16px -4px rgba(35,38,59,.15);box-shadow:var(--aa-panel-shadow);margin:0;overflow:hidden;position:absolute;transition:opacity .2s ease-in,filter .2s ease-in}@media screen and (prefers-reduced-motion){.aa-Panel{transition:none}}.aa-Panel button{-webkit-appearance:none;appearance:none;background:none;border:0;margin:0;padding:0}.aa-PanelLayout{height:100%;margin:0;max-height:650px;max-height:var(--aa-panel-max-height);overflow-y:auto;padding:0;position:relative;text-align:left}.aa-PanelLayoutColumns--twoGolden{display:grid;grid-template-columns:39.2% auto;overflow:hidden;padding:0}.aa-PanelLayoutColumns--two{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));overflow:hidden;padding:0}.aa-PanelLayoutColumns--three{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));overflow:hidden;padding:0}.aa-Panel--stalled .aa-Source{filter:grayscale(1);opacity:.8}.aa-Panel--scrollable{margin:0;max-height:650px;max-height:var(--aa-panel-max-height);overflow-x:hidden;overflow-y:auto;padding:8px;padding:var(--aa-spacing-half);scrollbar-color:#fff #eaeaea;scrollbar-color:rgba(var(--aa-scrollbar-thumb-background-color-rgb),var(--aa-scrollbar-thumb-background-color-alpha)) rgba(var(--aa-scrollbar-track-background-color-rgb),var(--aa-scrollbar-track-background-color-alpha));scrollbar-width:thin}.aa-Panel--scrollable::-webkit-scrollbar{width:13px;width:var(--aa-scrollbar-width)}.aa-Panel--scrollable::-webkit-scrollbar-track{background-color:#eaeaea;background-color:rgba(var(--aa-scrollbar-track-background-color-rgb),var(--aa-scrollbar-track-background-color-alpha))}.aa-Panel--scrollable::-webkit-scrollbar-thumb{background-color:#fff;background-color:rgba(var(--aa-scrollbar-thumb-background-color-rgb),var(--aa-scrollbar-thumb-background-color-alpha));border-color:#eaeaea;border-color:rgba(var(--aa-scrollbar-track-background-color-rgb),var(--aa-scrollbar-track-background-color-alpha));border-radius:9999px;border-style:solid;border-width:3px 2px 3px 3px}.aa-Source{margin:0;padding:0;position:relative;width:100%}.aa-Source:empty{display:none}.aa-SourceNoResults{font-size:1em;margin:0;padding:16px;padding:var(--aa-spacing)}.aa-List{list-style:none;margin:0}.aa-List,.aa-SourceHeader{padding:0;position:relative}.aa-SourceHeader{margin:8px .5em 8px 0;margin:var(--aa-spacing-half) .5em var(--aa-spacing-half) 0}.aa-SourceHeader:empty{display:none}.aa-SourceHeaderTitle{background:#fff;background:rgba(var(--aa-background-color-rgb),var(--aa-background-color-alpha));color:#3e34d3;color:rgba(var(--aa-primary-color-rgb),1);display:inline-block;font-size:.8em;font-weight:600;font-weight:var(--aa-font-weight-semibold);margin:0;padding:0 8px 0 0;padding:0 var(--aa-spacing-half) 0 0;position:relative;z-index:9999;z-index:var(--aa-base-z-index)}.aa-SourceHeaderLine{border-bottom:1px solid #3e34d3;border-bottom:1px solid rgba(var(--aa-primary-color-rgb),1);display:block;height:2px;left:0;margin:0;opacity:.3;padding:0;position:absolute;right:0;top:8px;top:var(--aa-spacing-half);z-index:9998;z-index:calc(var(--aa-base-z-index) - 1)}.aa-SourceFooterSeeAll{background:linear-gradient(180deg,#fff,rgba(128,126,163,.14));background:linear-gradient(180deg,rgba(var(--aa-background-color-rgb),var(--aa-background-color-alpha)),rgba(128,126,163,.14));border:1px solid rgba(128,126,163,.6);border:1px solid rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha));border-radius:5px;box-shadow:inset 0 0 2px #fff,0 2px 2px -1px rgba(76,69,88,.15);color:inherit;font-size:.95em;font-weight:500;font-weight:var(--aa-font-weight-medium);padding:.475em 1em .6em;text-decoration:none}.aa-SourceFooterSeeAll:focus,.aa-SourceFooterSeeAll:hover{border:1px solid #3e34d3;border:1px solid rgba(var(--aa-primary-color-rgb),1);color:#3e34d3;color:rgba(var(--aa-primary-color-rgb),1)}.aa-Item{align-items:center;border-radius:3px;cursor:pointer;display:grid;min-height:40px;min-height:calc(var(--aa-spacing)*2.5);padding:4px;padding:calc(var(--aa-spacing-half)/2)}.aa-Item[aria-selected=true]{background-color:rgba(179,173,214,.205);background-color:rgba(var(--aa-selected-color-rgb),var(--aa-selected-color-alpha))}.aa-Item[aria-selected=true] .aa-ActiveOnly,.aa-Item[aria-selected=true] .aa-ItemActionButton{visibility:visible}.aa-ItemIcon{stroke-width:1;stroke-width:var(--aa-icon-stroke-width);align-items:center;background:#fff;background:rgba(var(--aa-background-color-rgb),var(--aa-background-color-alpha));border-radius:3px;box-shadow:inset 0 0 0 1px rgba(128,126,163,.3);box-shadow:inset 0 0 0 1px rgba(var(--aa-panel-border-color-rgb),var(--aa-panel-border-color-alpha));color:#7777a3;color:rgba(var(--aa-icon-color-rgb),var(--aa-icon-color-alpha));display:flex;flex-shrink:0;font-size:.7em;height:28px;height:calc(var(--aa-icon-size) + var(--aa-spacing-half));justify-content:center;overflow:hidden;text-align:center;width:28px;width:calc(var(--aa-icon-size) + var(--aa-spacing-half))}.aa-ItemIcon img{height:auto;max-height:20px;max-height:calc(var(--aa-icon-size) + var(--aa-spacing-half) - 8px);max-width:20px;max-width:calc(var(--aa-icon-size) + var(--aa-spacing-half) - 8px);width:auto}.aa-ItemIcon svg{height:20px;height:var(--aa-icon-size);width:20px;width:var(--aa-icon-size)}.aa-ItemIcon--alignTop{align-self:flex-start}.aa-ItemIcon--noBorder{background:none;box-shadow:none}.aa-ItemIcon--picture{height:96px;width:96px}.aa-ItemIcon--picture img{max-height:100%;max-width:100%;padding:8px;padding:var(--aa-spacing-half)}.aa-ItemContent{grid-gap:8px;grid-gap:var(--aa-spacing-half);align-items:center;cursor:pointer;display:grid;gap:8px;gap:var(--aa-spacing-half);grid-auto-flow:column;line-height:1.25em;overflow:hidden}.aa-ItemContent:empty{display:none}.aa-ItemContent mark{background:none;color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha));font-style:normal;font-weight:700;font-weight:var(--aa-font-weight-bold)}.aa-ItemContent--dual{display:flex;flex-direction:column;justify-content:space-between;text-align:left}.aa-ItemContent--dual .aa-ItemContentSubtitle,.aa-ItemContent--dual .aa-ItemContentTitle{display:block}.aa-ItemContent--indented{padding-left:36px;padding-left:calc(var(--aa-icon-size) + var(--aa-spacing))}.aa-ItemContentBody{grid-gap:4px;grid-gap:calc(var(--aa-spacing-half)/2);display:grid;gap:4px;gap:calc(var(--aa-spacing-half)/2)}.aa-ItemContentTitle{display:inline-block;font-size:18px;margin:0 .5em 0 0;max-width:100%;overflow:hidden;padding:5px;text-overflow:ellipsis;white-space:nowrap}.aa-ItemContentSubtitle{font-size:.92em}.aa-ItemContentSubtitleIcon:before{border-color:rgba(128,126,163,.64);border-color:rgba(var(--aa-muted-color-rgb),.64);border-style:solid;content:"";display:inline-block;left:1px;position:relative;top:-3px}.aa-ItemContentSubtitle--inline .aa-ItemContentSubtitleIcon:before{border-width:0 0 1.5px;margin-left:8px;margin-left:var(--aa-spacing-half);margin-right:4px;margin-right:calc(var(--aa-spacing-half)/2);width:10px;width:calc(var(--aa-spacing-half) + 2px)}.aa-ItemContentSubtitle--standalone{grid-gap:8px;grid-gap:var(--aa-spacing-half);align-items:center;color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha));display:grid;gap:8px;gap:var(--aa-spacing-half);grid-auto-flow:column;justify-content:start}.aa-ItemContentSubtitle--standalone .aa-ItemContentSubtitleIcon:before{border-radius:0 0 0 3px;border-width:0 0 1.5px 1.5px;height:8px;height:var(--aa-spacing-half);width:8px;width:var(--aa-spacing-half)}.aa-ItemContentSubtitleCategory{color:#807ea3;color:rgba(var(--aa-muted-color-rgb),1);font-weight:500}.aa-ItemContentDescription{color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha));font-size:.85em;max-width:100%;overflow-x:hidden;text-overflow:ellipsis}.aa-ItemContentDescription:empty{display:none}.aa-ItemContentDescription mark{background:rgba(245,223,77,.5);background:rgba(var(--aa-description-highlight-background-color-rgb),var(--aa-description-highlight-background-color-alpha));color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha));font-style:normal;font-weight:500;font-weight:var(--aa-font-weight-medium)}.aa-ItemContentDash{color:rgba(128,126,163,.6);color:rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha));display:none;opacity:.4}.aa-ItemContentTag{background-color:rgba(62,52,211,.2);background-color:rgba(var(--aa-primary-color-rgb),var(--aa-primary-color-alpha));border-radius:3px;margin:0 .4em 0 0;padding:.08em .3em}.aa-ItemLink,.aa-ItemWrapper{grid-gap:4px;grid-gap:calc(var(--aa-spacing-half)/2);align-items:center;color:inherit;display:grid;gap:4px;gap:calc(var(--aa-spacing-half)/2);grid-auto-flow:column;justify-content:space-between;width:100%}.aa-ItemLink{color:inherit;text-decoration:none}.aa-ItemActions{display:grid;grid-auto-flow:column;height:100%;justify-self:end;margin:0 -5.3333333333px;margin:0 calc(var(--aa-spacing)/-3);padding:0 2px 0 0}.aa-ItemActionButton{align-items:center;background:none;border:0;color:rgba(128,126,163,.6);color:rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha));cursor:pointer;display:flex;flex-shrink:0;padding:0}.aa-ItemActionButton:focus svg,.aa-ItemActionButton:hover svg{color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha))}@media (hover:none) and (pointer:coarse){.aa-ItemActionButton:focus svg,.aa-ItemActionButton:hover svg{color:inherit}}.aa-ItemActionButton svg{stroke-width:1;stroke-width:var(--aa-icon-stroke-width);color:rgba(128,126,163,.6);color:rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha));margin:5.3333333333px;margin:calc(var(--aa-spacing)/3);width:20px;width:var(--aa-action-icon-size)}.aa-ActiveOnly{visibility:hidden}.aa-PanelHeader{align-items:center;background:#3e34d3;background:rgba(var(--aa-primary-color-rgb),1);color:#fff;display:grid;height:var(--aa-modal-header-height);margin:0;padding:8px 16px;padding:var(--aa-spacing-half) var(--aa-spacing);position:relative}.aa-PanelHeader:after{background-image:linear-gradient(#fff,hsla(0,0%,100%,0));background-image:linear-gradient(rgba(var(--aa-background-color-rgb),1),rgba(var(--aa-background-color-rgb),0));bottom:-8px;bottom:calc(var(--aa-spacing-half)*-1);content:"";height:8px;height:var(--aa-spacing-half);left:0;pointer-events:none;position:absolute;right:0}.aa-PanelFooter,.aa-PanelHeader:after{z-index:9999;z-index:var(--aa-base-z-index)}.aa-PanelFooter{background-color:#fff;background-color:rgba(var(--aa-background-color-rgb),var(--aa-background-color-alpha));box-shadow:inset 0 1px 0 rgba(128,126,163,.3);box-shadow:inset 0 1px 0 rgba(var(--aa-panel-border-color-rgb),var(--aa-panel-border-color-alpha));display:flex;justify-content:space-between;margin:0;padding:16px;padding:var(--aa-spacing);position:relative}.aa-PanelFooter:after{background-image:linear-gradient(hsla(0,0%,100%,0),rgba(128,126,163,.6));background-image:linear-gradient(rgba(var(--aa-background-color-rgb),0),rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha)));content:"";height:16px;height:var(--aa-spacing);left:0;opacity:.12;pointer-events:none;position:absolute;right:0;top:-16px;top:calc(var(--aa-spacing)*-1);z-index:9998;z-index:calc(var(--aa-base-z-index) - 1)}.aa-DetachedContainer{background:#fff;background:rgba(var(--aa-background-color-rgb),var(--aa-background-color-alpha));bottom:0;box-shadow:0 0 0 1px rgba(35,38,59,.1),0 6px 16px -4px rgba(35,38,59,.15);box-shadow:var(--aa-panel-shadow);display:flex;flex-direction:column;left:0;margin:0;overflow:hidden;padding:0;position:fixed;right:0;top:0;z-index:9999;z-index:var(--aa-base-z-index)}.aa-DetachedContainer:after{height:32px}.aa-DetachedContainer .aa-SourceHeader{margin:8px 0 8px 2px;margin:var(--aa-spacing-half) 0 var(--aa-spacing-half) 2px}.aa-DetachedContainer .aa-Panel{background-color:#fff;background-color:rgba(var(--aa-background-color-rgb),var(--aa-background-color-alpha));border-radius:0;box-shadow:none;flex-grow:1;margin:0;padding:0;position:relative}.aa-DetachedContainer .aa-PanelLayout{bottom:0;box-shadow:none;left:0;margin:0;max-height:none;overflow-y:auto;position:absolute;right:0;top:0;width:100%}.aa-DetachedFormContainer{border-bottom:1px solid rgba(128,126,163,.3);border-bottom:1px solid rgba(var(--aa-panel-border-color-rgb),var(--aa-panel-border-color-alpha));display:flex;flex-direction:row;justify-content:space-between;margin:0;padding:8px;padding:var(--aa-spacing-half)}.aa-DetachedCancelButton{background:none;border:0;border-radius:3px;color:inherit;color:#262627;color:rgba(var(--aa-text-color-rgb),var(--aa-text-color-alpha));cursor:pointer;font:inherit;margin:0 0 0 8px;margin:0 0 0 var(--aa-spacing-half);padding:0 8px;padding:0 var(--aa-spacing-half)}.aa-DetachedCancelButton:focus,.aa-DetachedCancelButton:hover{box-shadow:inset 0 0 0 1px rgba(128,126,163,.3);box-shadow:inset 0 0 0 1px rgba(var(--aa-panel-border-color-rgb),var(--aa-panel-border-color-alpha))}.aa-DetachedContainer--modal{border-radius:6px;bottom:inherit;height:auto;margin:0 auto;max-width:680px;max-width:var(--aa-detached-modal-max-width);position:absolute;top:3%}.aa-DetachedContainer--modal .aa-PanelLayout{max-height:500px;max-height:var(--aa-detached-modal-max-height);padding-bottom:8px;padding-bottom:var(--aa-spacing-half);position:static}.aa-DetachedSearchButton{align-items:center;background-color:#fff;background-color:rgba(var(--aa-input-background-color-rgb),var(--aa-input-background-color-alpha));border:1px solid rgba(128,126,163,.8);border:1px solid rgba(var(--aa-input-border-color-rgb),var(--aa-input-border-color-alpha));border-radius:3px;color:rgba(128,126,163,.6);color:rgba(var(--aa-muted-color-rgb),var(--aa-muted-color-alpha));cursor:pointer;display:flex;font:inherit;font-family:inherit;font-family:var(--aa-font-family);font-size:16px;font-size:var(--aa-font-size);height:44px;height:var(--aa-search-input-height);margin:0;padding:0 5.5px;padding:0 calc(var(--aa-search-input-height)/8);position:relative;text-align:left;width:100%}.aa-DetachedSearchButton:focus{border-color:#3e34d3;border-color:rgba(var(--aa-primary-color-rgb),1);box-shadow:0 0 0 3px rgba(62,52,211,.2),inset 0 0 0 2px rgba(62,52,211,.2);box-shadow:rgba(var(--aa-primary-color-rgb),var(--aa-primary-color-alpha)) 0 0 0 3px,inset rgba(var(--aa-primary-color-rgb),var(--aa-primary-color-alpha)) 0 0 0 2px;outline:medium none currentColor}.aa-DetachedSearchButtonIcon{align-items:center;color:#3e34d3;color:rgba(var(--aa-primary-color-rgb),1);cursor:auto;display:flex;height:100%;justify-content:center;width:36px;width:calc(var(--aa-icon-size) + var(--aa-spacing))}.aa-Detached{height:100vh;overflow:hidden}.aa-DetachedOverlay{background-color:hsla(244,6%,48%,.4);background-color:rgba(var(--aa-overlay-color-rgb),var(--aa-overlay-color-alpha));height:100vh;left:0;margin:0;padding:0;position:fixed;right:0;top:0;z-index:9998;z-index:calc(var(--aa-base-z-index) - 1)}.aa-GradientBottom,.aa-GradientTop{height:8px;height:var(--aa-spacing-half);left:0;pointer-events:none;position:absolute;right:0}.aa-GradientTop{background-image:linear-gradient(#fff,hsla(0,0%,100%,0));background-image:linear-gradient(rgba(var(--aa-background-color-rgb),1),rgba(var(--aa-background-color-rgb),0));top:0}.aa-GradientBottom{background-image:linear-gradient(hsla(0,0%,100%,0),#fff);background-image:linear-gradient(rgba(var(--aa-background-color-rgb),0),rgba(var(--aa-background-color-rgb),1));border-bottom-left-radius:4px;border-bottom-left-radius:calc(var(--aa-spacing)/4);border-bottom-right-radius:4px;border-bottom-right-radius:calc(var(--aa-spacing)/4);bottom:0}@media (hover:none) and (pointer:coarse){.aa-DesktopOnly{display:none}}@media (hover:hover){.aa-TouchOnly{display:none}}[data-rmiz]{position:relative}[data-rmiz-ghost]{pointer-events:none;position:absolute}[data-rmiz-btn-unzoom],[data-rmiz-btn-zoom]{-webkit-appearance:none;appearance:none;background-color:rgba(0,0,0,.7);border:none;border-radius:50%;box-shadow:0 0 1px hsla(0,0%,100%,.5);color:#fff;height:40px;margin:0;outline-offset:2px;padding:9px;touch-action:manipulation;width:40px}[data-rmiz-btn-zoom]:not(:focus):not(:active){clip:rect(0 0 0 0);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;overflow:hidden;pointer-events:none;position:absolute;white-space:nowrap;width:1px}[data-rmiz-btn-zoom]{cursor:zoom-in;inset:10px 10px auto auto;position:absolute}[data-rmiz-btn-unzoom]{cursor:zoom-out;inset:20px 20px auto auto;position:absolute;z-index:1}[data-rmiz-content=found] [data-zoom],[data-rmiz-content=found] [role=img],[data-rmiz-content=found] img,[data-rmiz-content=found] svg{cursor:zoom-in}[data-rmiz-modal]::-ms-backdrop{display:none}[data-rmiz-modal]::backdrop{display:none}[data-rmiz-modal][open]{background:transparent;border:0;height:100vh;height:100dvh;margin:0;max-height:none;max-width:none;overflow:hidden;padding:0;position:fixed;width:100vw;width:100dvw}[data-rmiz-modal-overlay]{inset:0;position:absolute;transition:background-color .3s}[data-rmiz-modal-overlay=hidden]{background-color:hsla(0,0%,100%,0)}[data-rmiz-modal-overlay=visible]{background-color:#fff}[data-rmiz-modal-content]{height:100%;position:relative;width:100%}[data-rmiz-modal-img]{cursor:zoom-out;image-rendering:high-quality;position:absolute;transform-origin:top left;transition:transform .3s}@media (prefers-reduced-motion:reduce){[data-rmiz-modal-img],[data-rmiz-modal-overlay]{transition-duration:.01ms!important}}</style><title data-react-helmet="true">Bitwarden Security Whitepaper | Bitwarden Help Center</title><link data-react-helmet="true" rel="canonical" href="https://bitwarden.com/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="x-default" href="https://bitwarden.com/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="en-us" href="https://bitwarden.com/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="ja-jp" href="https://bitwarden.com/ja-jp/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="de-de" href="https://bitwarden.com/de-de/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="fr-fr" href="https://bitwarden.com/fr-fr/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="es-la" href="https://bitwarden.com/es-la/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="nl-nl" href="https://bitwarden.com/nl-nl/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="en" href="https://bitwarden.com/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="ja" href="https://bitwarden.com/ja-jp/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="de" href="https://bitwarden.com/de-de/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="fr" href="https://bitwarden.com/fr-fr/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="es" href="https://bitwarden.com/es-la/help/bitwarden-security-white-paper/"/><link data-react-helmet="true" rel="alternate" hrefLang="nl" href="https://bitwarden.com/nl-nl/help/bitwarden-security-white-paper/"/><style>.gatsby-image-wrapper{position:relative;overflow:hidden}.gatsby-image-wrapper picture.object-fit-polyfill{position:static!important}.gatsby-image-wrapper img{bottom:0;height:100%;left:0;margin:0;max-width:none;padding:0;position:absolute;right:0;top:0;width:100%;object-fit:cover}.gatsby-image-wrapper [data-main-image]{opacity:0;transform:translateZ(0);transition:opacity .25s linear;will-change:opacity}.gatsby-image-wrapper-constrained{display:inline-block;vertical-align:top}</style><noscript><style>.gatsby-image-wrapper noscript [data-main-image]{opacity:1!important}.gatsby-image-wrapper [data-placeholder-image]{opacity:0!important}</style></noscript><script type="module">const e="undefined"!=typeof HTMLImageElement&&"loading"in HTMLImageElement.prototype;e&&document.body.addEventListener("load",(function(e){const t=e.target;if(void 0===t.dataset.mainImage)return;if(void 0===t.dataset.gatsbyImageSsr)return;let a=null,n=t;for(;null===a&&n;)void 0!==n.parentNode.dataset.gatsbyImageWrapper&&(a=n.parentNode),n=n.parentNode;const o=a.querySelector("[data-placeholder-image]"),r=new Image;r.src=t.currentSrc,r.decode().catch((()=>{})).then((()=>{t.style.opacity=1,o&&(o.style.opacity=0,o.style.transition="opacity 500ms linear")}))}),!0);</script><link rel="icon" href="/favicon-32x32.png?v=470f020c101877a6a1c4cc95d7464f51" type="image/png"/><link rel="manifest" href="/manifest.webmanifest" crossorigin="anonymous"/><link rel="apple-touch-icon" sizes="48x48" href="/icons/icon-48x48.png?v=470f020c101877a6a1c4cc95d7464f51"/><link rel="apple-touch-icon" sizes="72x72" href="/icons/icon-72x72.png?v=470f020c101877a6a1c4cc95d7464f51"/><link rel="apple-touch-icon" sizes="96x96" href="/icons/icon-96x96.png?v=470f020c101877a6a1c4cc95d7464f51"/><link rel="apple-touch-icon" sizes="144x144" href="/icons/icon-144x144.png?v=470f020c101877a6a1c4cc95d7464f51"/><link rel="apple-touch-icon" sizes="192x192" href="/icons/icon-192x192.png?v=470f020c101877a6a1c4cc95d7464f51"/><link rel="apple-touch-icon" sizes="256x256" href="/icons/icon-256x256.png?v=470f020c101877a6a1c4cc95d7464f51"/><link rel="apple-touch-icon" sizes="384x384" href="/icons/icon-384x384.png?v=470f020c101877a6a1c4cc95d7464f51"/><link rel="apple-touch-icon" sizes="512x512" href="/icons/icon-512x512.png?v=470f020c101877a6a1c4cc95d7464f51"/><script data-gatsby="web-vitals-polyfill"> !function(){var e,t,n,i,r={passive:!0,capture:!0},a=new Date,o=function(){i=[],t=-1,e=null,f(addEventListener)},c=function(i,r){e||(e=r,t=i,n=new Date,f(removeEventListener),u())},u=function(){if(t>=0&&t<n-a){var r={entryType:"first-input",name:e.type,target:e.target,cancelable:e.cancelable,startTime:e.timeStamp,processingStart:e.timeStamp+t};i.forEach((function(e){e(r)})),i=[]}},s=function(e){if(e.cancelable){var t=(e.timeStamp>1e12?new Date:performance.now())-e.timeStamp;"pointerdown"==e.type?function(e,t){var n=function(){c(e,t),a()},i=function(){a()},a=function(){removeEventListener("pointerup",n,r),removeEventListener("pointercancel",i,r)};addEventListener("pointerup",n,r),addEventListener("pointercancel",i,r)}(t,e):c(t,e)}},f=function(e){["mousedown","keydown","touchstart","pointerdown"].forEach((function(t){return e(t,s,r)}))},p="hidden"===document.visibilityState?0:1/0;addEventListener("visibilitychange",(function e(t){"hidden"===document.visibilityState&&(p=t.timeStamp,removeEventListener("visibilitychange",e,!0))}),!0);o(),self.webVitals={firstInputPolyfill:function(e){i.push(e),u()},resetFirstInputPolyfill:o,get firstHiddenTime(){return p}}}(); </script><script>window.dataLayer = window.dataLayer || [];window.dataLayer.push({"platform":"gatsby"}); (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl+'';f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer', 'GTM-NF32QCS');</script><link rel="alternate" type="application/rss+xml" title="Bitwarden Blog" href="/blog/feed.xml"/><script src="https://cmp.osano.com/16BZFqRx1MZfx2O4V/779c3da6-bffb-49bb-99b5-7e07b4c65269/osano.js"></script><script id="plausible-script" defer="" data-domain="bitwarden.com" src="https://plausible.io/js/script.outbound-links.file-downloads.tagged-events.pageview-props.js"></script></head><body><noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-NF32QCS" height="0" width="0" style="display: none; visibility: hidden" aria-hidden="true"></iframe></noscript><div id="___gatsby"><div style="outline:none" tabindex="-1" id="gatsby-focus-wrapper"><style data-emotion="css-global 1lvybaa">*,::before,::after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e6ebef;--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x:var(--tw-empty,/*!*/ /*!*/);--tw-pan-y:var(--tw-empty,/*!*/ /*!*/);--tw-pinch-zoom:var(--tw-empty,/*!*/ /*!*/);--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position:var(--tw-empty,/*!*/ /*!*/);--tw-gradient-via-position:var(--tw-empty,/*!*/ /*!*/);--tw-gradient-to-position:var(--tw-empty,/*!*/ /*!*/);--tw-ordinal:var(--tw-empty,/*!*/ /*!*/);--tw-slashed-zero:var(--tw-empty,/*!*/ /*!*/);--tw-numeric-figure:var(--tw-empty,/*!*/ /*!*/);--tw-numeric-spacing:var(--tw-empty,/*!*/ /*!*/);--tw-numeric-fraction:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgb(59 130 246 / 0.5);--tw-blur:var(--tw-empty,/*!*/ /*!*/);--tw-brightness:var(--tw-empty,/*!*/ /*!*/);--tw-contrast:var(--tw-empty,/*!*/ /*!*/);--tw-grayscale:var(--tw-empty,/*!*/ /*!*/);--tw-hue-rotate:var(--tw-empty,/*!*/ /*!*/);--tw-invert:var(--tw-empty,/*!*/ /*!*/);--tw-saturate:var(--tw-empty,/*!*/ /*!*/);--tw-sepia:var(--tw-empty,/*!*/ /*!*/);--tw-drop-shadow:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-blur:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-brightness:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-contrast:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-grayscale:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-hue-rotate:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-invert:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-opacity:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-saturate:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-sepia:var(--tw-empty,/*!*/ /*!*/);--tw-contain-size:var(--tw-empty,/*!*/ /*!*/);--tw-contain-layout:var(--tw-empty,/*!*/ /*!*/);--tw-contain-paint:var(--tw-empty,/*!*/ /*!*/);--tw-contain-style:var(--tw-empty,/*!*/ /*!*/);}::before,::after{--tw-content:'';}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;tab-size:4;font-family:ui-sans-serif;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent;}body{margin:0;line-height:inherit;}hr{height:0;color:inherit;border-top-width:1px;}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted;}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit;}a{color:inherit;-webkit-text-decoration:inherit;text-decoration:inherit;}b,strong{font-weight:bolder;}code,kbd,samp,pre{font-family:SFMono-Regular,ui-monospace,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em;}small{font-size:80%;}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline;}sub{bottom:-0.25em;}sup{top:-0.5em;}table{text-indent:0;border-color:inherit;border-collapse:collapse;}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0;}button,select{text-transform:none;}button,input:where([type='button']),input:where([type='reset']),input:where([type='submit']){-webkit-appearance:button;background-color:transparent;background-image:none;}:-moz-focusring{outline:auto;}:-moz-ui-invalid{box-shadow:none;}progress{vertical-align:baseline;}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto;}[type='search']{-webkit-appearance:textfield;outline-offset:-2px;}::-webkit-search-decoration{-webkit-appearance:none;}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit;}summary{display:-webkit-box;display:-webkit-list-item;display:-ms-list-itembox;display:list-item;}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0;}fieldset{margin:0;padding:0;}legend{padding:0;}ol,ul,menu{list-style:none;margin:0;padding:0;}dialog{padding:0;}textarea{resize:vertical;}input::-webkit-input-placeholder{opacity:1;color:#abb4bd;}input::-moz-placeholder{opacity:1;color:#abb4bd;}input:-ms-input-placeholder{opacity:1;color:#abb4bd;}textarea::-webkit-input-placeholder{opacity:1;color:#abb4bd;}textarea::-moz-placeholder{opacity:1;color:#abb4bd;}textarea:-ms-input-placeholder{opacity:1;color:#abb4bd;}input::placeholder,textarea::placeholder{opacity:1;color:#abb4bd;}button,[role="button"]{cursor:pointer;}:disabled{cursor:default;}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle;}img,video{max-width:100%;height:auto;}[hidden]{display:none;}::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x:var(--tw-empty,/*!*/ /*!*/);--tw-pan-y:var(--tw-empty,/*!*/ /*!*/);--tw-pinch-zoom:var(--tw-empty,/*!*/ /*!*/);--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position:var(--tw-empty,/*!*/ /*!*/);--tw-gradient-via-position:var(--tw-empty,/*!*/ /*!*/);--tw-gradient-to-position:var(--tw-empty,/*!*/ /*!*/);--tw-ordinal:var(--tw-empty,/*!*/ /*!*/);--tw-slashed-zero:var(--tw-empty,/*!*/ /*!*/);--tw-numeric-figure:var(--tw-empty,/*!*/ /*!*/);--tw-numeric-spacing:var(--tw-empty,/*!*/ /*!*/);--tw-numeric-fraction:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-ring-inset:var(--tw-empty,/*!*/ /*!*/);--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgb(59 130 246 / 0.5);--tw-blur:var(--tw-empty,/*!*/ /*!*/);--tw-brightness:var(--tw-empty,/*!*/ /*!*/);--tw-contrast:var(--tw-empty,/*!*/ /*!*/);--tw-grayscale:var(--tw-empty,/*!*/ /*!*/);--tw-hue-rotate:var(--tw-empty,/*!*/ /*!*/);--tw-invert:var(--tw-empty,/*!*/ /*!*/);--tw-saturate:var(--tw-empty,/*!*/ /*!*/);--tw-sepia:var(--tw-empty,/*!*/ /*!*/);--tw-drop-shadow:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-blur:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-brightness:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-contrast:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-grayscale:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-hue-rotate:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-invert:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-opacity:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-saturate:var(--tw-empty,/*!*/ /*!*/);--tw-backdrop-sepia:var(--tw-empty,/*!*/ /*!*/);--tw-contain-size:var(--tw-empty,/*!*/ /*!*/);--tw-contain-layout:var(--tw-empty,/*!*/ /*!*/);--tw-contain-paint:var(--tw-empty,/*!*/ /*!*/);--tw-contain-style:var(--tw-empty,/*!*/ /*!*/);}h1,.h1{font-size:2rem;}@media (min-width: 48rem){h1,.h1{font-size:3.75rem;}h2,.h2{font-size:2.8125rem;}h3,.h3{font-size:2.1875rem;}h4,.h4{font-size:1.875rem;}h5,.h5{font-size:1.75rem;}h6,.h6{font-size:1.5rem;}}h1{font-size:clamp(2rem, calc(2rem + (3.75 - 2) * ((100vw - 23.4375rem) / (92 - 23.4375))), 3.75rem);}h2,.h2{font-size:1.75rem;}h2{font-size:clamp(1.75rem, calc(1.75rem + (2.8125 - 1.75) * ((100vw - 23.4375rem) / (92 - 23.4375))), 2.8125rem);}h3,.h3{font-size:1.5625rem;}h3{font-size:clamp(1.5625rem, calc(1.5625rem + (2.1875 - 1.5625) * ((100vw - 23.4375rem) / (92 - 23.4375))), 2.1875rem);}h4,.h4{font-size:1.375rem;}h4{font-size:clamp(1.375rem, calc(1.375rem + (1.875 - 1.375) * ((100vw - 23.4375rem) / (92 - 23.4375))), 1.875rem);}h5,.h5{font-size:1.25rem;}h5{font-size:clamp(1.25rem, calc(1.25rem + (1.75 - 1.25) * ((100vw - 23.4375rem) / (92 - 23.4375))), 1.75rem);}h6,.h6{font-size:1.125rem;}h6{font-size:clamp(1.125rem, calc(1.125rem + (1.5 - 1.125) * ((100vw - 23.4375rem) / (92 - 23.4375))), 1.5rem);}</style><style data-emotion="css-global 1gap4fc">body{font-family:DM Sans,system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Helvetica Neue,sans-serif;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}body:where(.dark, .dark *){--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}h1,h2,h3,h4,h5,h6{margin-bottom:1rem;line-height:1.25;}p{margin-bottom:1rem;line-height:1.375;}h1,h2,h3,h4,h5,h6,p,div,section{scroll-margin:8rem;}p{margin-bottom:1rem;}a{--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));text-decoration-line:none;}a:where(.dark, .dark *){--tw-text-opacity:1;color:rgb(147 157 167 / var(--tw-text-opacity));}p a{text-decoration-line:underline;}ol{list-style-type:decimal;}ul{list-style-type:disc;}ol{list-style-type:decimal;}sup{top:-1rem;}svg{fill:currentColor;}code{word-break:break-all;font-family:SFMono-Regular,ui-monospace,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;}.osano-cm-widget{visibility:hidden!important;display:none!important;opacity:0!important;}@media (min-width: 1024px){table,ol,ul,p,button,label,input,select,textarea{font-size:1.125rem;line-height:1.75rem;}}.card-link-hover-style{position:relative;transition-property:transform;transition-timing-function:cubic-bezier(0, 0, 0.2, 1);transition-duration:300ms;}.card-link-hover-style::before{content:var(--tw-content);position:absolute;left:0px;top:0px;z-index:-10;height:100%;width:100%;border-radius:2.25rem;opacity:0;--tw-shadow:var(--tw-shadow-colored);--tw-shadow-colored:0 25px 50px -12px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow);--tw-shadow-color:#000;transition-property:opacity;transition-timing-function:cubic-bezier(0, 0, 0.2, 1);transition-duration:250ms;}@media (min-width: 768px){.card-link-hover-style::before{--tw-content:'';content:var(--tw-content);}.card-link-hover-style:hover{--tw-scale-x:1.02;--tw-scale-y:1.02;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));}.card-link-hover-style:hover::before{content:var(--tw-content);opacity:0.3;}}</style><style data-emotion="css 1o1wj7w">.css-1o1wj7w{height:0px;}</style><div class="css-1o1wj7w"></div><style data-emotion="css 1kr98ab">.css-1kr98ab{position:-webkit-sticky;position:sticky;left:0px;top:0px;z-index:50;padding-top:0.25rem;padding-bottom:0.25rem;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;--tw-bg-opacity:1;background-color:rgb(2 15 102 / var(--tw-bg-opacity));}</style><header class="css-1kr98ab"><style data-emotion="css hjvf1s">.css-hjvf1s{position:relative;margin-left:auto;margin-right:auto;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;max-width:80rem;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:justify;-webkit-justify-content:space-between;justify-content:space-between;padding-left:1.25rem;padding-right:1.25rem;padding-top:0.5rem;padding-bottom:0.5rem;}@media (min-width: 768px){.css-hjvf1s{display:none;}}</style><nav class="css-hjvf1s"><a title="Bitwarden homepage" href="/"><style data-emotion="css tefx0f">.css-tefx0f{width:10rem;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}</style><svg class="css-tefx0f" viewBox="0 0 528 83"><path d="M126.944 19.748c6.047 0 10.751 2.301 14.206 7.095 3.456 4.697 5.184 11.12 5.184 19.268 0 8.437-1.728 14.956-5.279 19.557-3.552 4.698-8.352 6.902-14.399 6.902-6.048 0-10.656-2.108-14.111-6.518h-.96l-1.824 4.505c-.288.671-.96 1.055-1.632 1.055h-7.679a1.72 1.72 0 0 1-1.728-1.726V2.493A1.72 1.72 0 0 1 100.45.767h10.367c.96 0 1.728.767 1.728 1.726v14.763c0 2.109-.192 5.464-.576 10.066h.576c3.167-4.985 8.063-7.574 14.399-7.574Zm-4.416 11.217c-3.36 0-5.952 1.054-7.584 3.163-1.535 2.11-2.399 5.656-2.399 10.45v1.533c0 5.465.768 9.395 2.399 11.696 1.632 2.301 4.224 3.547 7.776 3.547 2.784 0 5.183-1.342 6.815-4.026 1.632-2.589 2.496-6.519 2.496-11.408 0-4.985-.864-8.724-2.496-11.217-1.727-2.492-4.127-3.738-7.007-3.738Zm46.652 40.743h-10.367a1.72 1.72 0 0 1-1.728-1.726V22.53a1.72 1.72 0 0 1 1.728-1.726h10.367c.96 0 1.728.767 1.728 1.726v47.357c.096.863-.768 1.822-1.728 1.822Zm37.918-10.258c2.015 0 4.415-.383 7.295-1.15.768-.192 1.44.383 1.44 1.15v7.957c0 .48-.288.863-.672 1.055-3.264 1.342-7.392 2.013-11.999 2.013-5.568 0-9.599-1.343-12.095-4.218-2.496-2.78-3.84-6.999-3.84-12.559V31.252h-5.472c-.672 0-1.151-.479-1.151-1.15v-4.506c0-.096.096-.192.096-.287l7.583-4.506 3.744-9.97c.192-.48.576-.767 1.056-.767h6.911c.672 0 1.152.48 1.152 1.15V20.9h13.727c.288 0 .576.287.576.575v8.628c0 .671-.48 1.15-1.152 1.15h-13.055v24.35c0 1.918.576 3.451 1.632 4.314.96 1.055 2.496 1.534 4.224 1.534Zm64.603 10.258c-1.344 0-2.4-.863-2.976-2.11L258.55 38.635c-.672-2.205-1.536-5.56-2.688-9.874h-.288l-.96 3.451-2.016 6.519-10.463 30.965c-.384 1.246-1.536 2.013-2.88 2.013-1.344 0-2.496-.863-2.88-2.205l-12.767-44.578c-.384-1.342.672-2.78 2.208-2.78h.288c.96 0 1.824.671 2.112 1.63l7.487 27.13c1.824 7.094 3.072 12.27 3.648 15.722h.288c1.728-7.094 3.072-11.792 3.936-14.188l9.695-28.377c.384-1.15 1.44-1.917 2.784-1.917 1.248 0 2.304.767 2.688 1.917l9.023 28.185c2.208 7.19 3.552 11.791 4.032 14.188h.288c.288-1.917 1.439-7.286 3.647-15.914l7.2-26.746c.288-.959 1.152-1.63 2.112-1.63a2.184 2.184 0 0 1 2.111 2.78L275.06 69.503c-.384 1.342-1.535 2.205-2.975 2.205h-.384Zm57.019 0c-.864 0-1.632-.671-1.728-1.534l-.863-6.327h-.48c-2.496 3.163-4.992 5.464-7.68 6.806-2.592 1.342-5.759 1.917-9.311 1.917-4.896 0-8.639-1.246-11.327-3.738-2.4-2.205-3.744-5.177-3.936-8.916-.384-4.985 1.728-9.778 5.76-12.558 4.127-2.684 9.887-4.314 17.662-4.314l9.408-.288v-3.26c0-4.793-.96-8.244-2.976-10.64-2.016-2.397-4.992-3.547-9.216-3.547-4.031 0-8.063.958-12.287 2.971a2.11 2.11 0 0 1-2.783-1.054c-.48-1.055 0-2.3 1.055-2.684 4.8-1.918 9.504-2.972 14.303-2.972 5.472 0 9.504 1.438 12.287 4.314 2.688 2.78 4.032 7.286 4.032 13.133v31.157c-.096.575-.96 1.534-1.92 1.534Zm-19.87-3.26c5.375 0 9.503-1.534 12.479-4.505 3.072-2.972 4.608-7.286 4.608-12.559v-4.793l-8.64.383c-7.007.288-11.903 1.438-14.975 3.26-2.975 1.821-4.511 4.793-4.511 8.628 0 3.067.96 5.56 2.783 7.285 2.112 1.438 4.8 2.301 8.256 2.301Zm56.828-47.262c1.439 0 2.879.096 4.511.288a2.164 2.164 0 0 1 1.824 2.492c-.192 1.15-1.344 1.822-2.496 1.63-1.44-.192-2.88-.383-4.319-.383-4.224 0-7.68 1.821-10.368 5.368-2.687 3.547-4.031 8.149-4.031 13.517v25.117c0 1.246-.96 2.205-2.208 2.205-1.248 0-2.208-.959-2.208-2.205V24.158c0-1.054.864-1.917 1.92-1.917s1.92.767 1.92 1.821l.384 7.094h.288c2.016-3.642 4.223-6.23 6.527-7.669 2.208-1.534 4.992-2.3 8.256-2.3Zm33.789 0c3.552 0 6.72.671 9.311 1.918 2.688 1.246 4.992 3.547 7.008 6.71h.288c-.192-3.93-.288-7.573-.288-11.216V2.972c0-1.246.96-2.205 2.208-2.205 1.248 0 2.207.959 2.207 2.205v67.01c0 .863-.672 1.534-1.535 1.534-.768 0-1.44-.575-1.536-1.438l-.96-6.231h-.384c-3.744 5.656-9.216 8.436-16.223 8.436-6.911 0-11.999-2.11-15.743-6.423-3.552-4.314-5.471-10.45-5.471-18.598 0-8.532 1.727-15.051 5.375-19.653 3.648-4.122 8.832-6.423 15.743-6.423Zm0 4.123c-5.472 0-9.503 1.917-12.287 5.752-2.688 3.738-4.032 9.203-4.032 16.489 0 13.996 5.472 20.994 16.415 20.994 5.664 0 9.695-1.63 12.287-4.889 2.688-3.26 3.936-8.628 3.936-16.105v-.767c0-7.67-1.248-13.134-3.936-16.393-2.496-3.452-6.623-5.081-12.383-5.081Zm57.5 47.261c-7.2 0-12.767-2.204-16.895-6.71-4.032-4.41-6.048-10.641-6.048-18.598 0-7.957 1.92-14.284 5.856-18.982 3.936-4.793 9.119-7.19 15.743-7.19 5.759 0 10.463 2.014 13.727 6.04 3.456 4.026 5.087 9.587 5.087 16.585v3.643h-35.709c.096 6.806 1.632 11.983 4.8 15.626 3.167 3.643 7.583 5.273 13.439 5.273 2.783 0 5.375-.192 7.487-.576 1.536-.287 3.36-.767 5.568-1.534 1.248-.479 2.591.48 2.591 1.822 0 .767-.479 1.534-1.247 1.821-2.304.96-4.512 1.534-6.528 1.918-2.4.67-4.992.862-7.871.862Zm-1.344-47.357c-4.8 0-8.64 1.534-11.519 4.697-2.88 3.068-4.512 7.67-5.088 13.517h30.718c0-5.656-1.248-10.257-3.744-13.42-2.496-3.165-5.952-4.794-10.367-4.794Zm69.499 46.495c-1.248 0-2.208-.959-2.208-2.205V39.497c0-4.985-1.056-8.628-3.072-10.833-2.208-2.205-5.376-3.451-9.791-3.451-5.952 0-10.272 1.438-12.959 4.505-2.688 2.972-4.224 7.862-4.224 14.476v25.117c0 1.246-.96 2.205-2.208 2.205-1.248 0-2.208-.959-2.208-2.205V24.158c0-1.15.864-2.013 2.016-2.013 1.056 0 1.824.767 2.016 1.726l.576 4.985h.288c3.264-5.177 8.927-7.766 17.183-7.766 11.231 0 16.894 6.04 16.894 18.12V69.31c-.096 1.342-1.152 2.397-2.303 2.397ZM164.093 0c-4.512 0-8.16 3.451-8.16 7.765v.767c0 4.218 3.744 7.765 8.16 7.765 4.415 0 8.159-3.547 8.159-7.765v-.671c0-4.41-3.744-7.861-8.159-7.861ZM58.273 45.248V10.969H34.278v60.898c4.25-2.25 8.052-4.696 11.409-7.338 8.39-6.57 12.586-12.997 12.586-19.281ZM68.557 4.114v41.134c0 3.07-.598 6.114-1.795 9.132-1.196 3.017-2.678 5.695-4.445 8.034-1.767 2.338-3.874 4.615-6.32 6.829-2.446 2.213-4.704 4.052-6.775 5.516a85.29 85.29 0 0 1-6.481 4.151c-2.25 1.303-3.848 2.187-4.794 2.651a60.55 60.55 0 0 1-2.276 1.071 3.07 3.07 0 0 1-1.393.322c-.5 0-.964-.107-1.392-.322a60.55 60.55 0 0 1-2.277-1.07c-.946-.465-2.544-1.349-4.793-2.652a85.29 85.29 0 0 1-6.48-4.15c-2.072-1.465-4.33-3.304-6.776-5.517-2.446-2.214-4.553-4.49-6.32-6.83-1.768-2.338-3.25-5.016-4.446-8.033C.598 51.362 0 48.318 0 45.248V4.114c0-.929.34-1.732 1.018-2.41.678-.679 1.481-1.018 2.41-1.018h61.7c.93 0 1.733.339 2.411 1.017.678.679 1.018 1.482 1.018 2.41Z"></path></svg></a><style data-emotion="css a0377c">.css-a0377c{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;gap:0.75rem;}</style><div class="css-a0377c"><style data-emotion="css 18ykxoy">.css-18ykxoy{height:2.5rem;width:2.5rem;padding:0.25rem;}.css-18ykxoy:hover{--tw-text-opacity:1;color:rgb(207 212 218 / var(--tw-text-opacity));}@media (min-width: 1024px){.css-18ykxoy{height:3rem;width:3rem;padding:0.75rem;}}.css-18ykxoy:where(.dark, .dark *):hover{--tw-text-opacity:1;color:rgb(44 221 233 / var(--tw-text-opacity));}</style><button type="button" class="css-18ykxoy"><svg version="1.1" viewBox="0 0 32 32"><path d="M31.034 24.9l-5.644-5.66c-0.282-0.273-0.481-0.621-0.573-1.002s-0.076-0.782 0.049-1.154c0.847-2.408 0.954-5.013 0.309-7.483s-2.014-4.689-3.93-6.375-4.293-2.76-6.824-3.085c-2.531-0.325-5.102 0.114-7.382 1.261s-4.165 2.949-5.413 5.175c-1.248 2.226-1.802 4.775-1.591 7.318s1.178 4.966 2.775 6.956c1.598 1.99 3.754 3.457 6.192 4.212 2.682 0.836 5.565 0.762 8.2-0.212 0.373-0.129 0.776-0.149 1.16-0.056s0.734 0.292 1.008 0.576l5.6 5.622c0.307 0.307 0.671 0.55 1.071 0.716s0.83 0.252 1.264 0.252c0.434 0 0.863-0.085 1.264-0.252s0.765-0.41 1.071-0.716l1.4-1.4c0.62-0.621 0.968-1.463 0.968-2.341s-0.348-1.72-0.968-2.341l-0.006-0.012zM2.522 15.698c-0.511-1.829-0.528-3.761-0.047-5.599s1.441-3.514 2.782-4.859c1.341-1.345 3.016-2.309 4.852-2.794s3.769-0.474 5.599 0.033c1.769 0.484 3.381 1.421 4.677 2.719s2.23 2.911 2.711 4.681c0.511 1.829 0.528 3.761 0.047 5.599s-1.441 3.514-2.782 4.859c-1.341 1.345-3.016 2.309-4.852 2.794s-3.769 0.474-5.599-0.033c-1.769-0.484-3.381-1.421-4.677-2.719s-2.23-2.911-2.711-4.681zM29.522 28.068l-1.4 1.4c-0.108 0.109-0.236 0.195-0.378 0.254s-0.294 0.089-0.447 0.089c-0.153 0-0.305-0.030-0.447-0.089s-0.27-0.145-0.378-0.254l-5.548-5.562c-0.084-0.086-0.15-0.189-0.192-0.302s-0.060-0.233-0.052-0.354c0.007-0.12 0.040-0.238 0.096-0.345s0.134-0.201 0.228-0.276c0.613-0.514 1.177-1.084 1.684-1.702 0.074-0.095 0.168-0.174 0.275-0.231s0.224-0.090 0.345-0.098c0.121-0.008 0.242 0.009 0.355 0.051s0.217 0.107 0.303 0.192l5.556 5.568c0.218 0.221 0.34 0.518 0.34 0.828s-0.122 0.608-0.34 0.828v0.002z"></path></svg></button><style data-emotion="css f2j4qe">.css-f2j4qe{height:2.25rem;width:2.25rem;border-radius:0.25rem;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}</style><button title="Main navigation" type="button" class="css-f2j4qe"><svg version="1.1" viewBox="0 0 32 32"><path d="M3.893 10.158c7.821 0 16.072 0 24.211 0 0.076 0.004 0.153-0.007 0.224-0.034s0.137-0.068 0.192-0.121c0.055-0.053 0.1-0.117 0.13-0.188s0.046-0.147 0.046-0.224-0.016-0.154-0.046-0.224c-0.030-0.071-0.074-0.134-0.13-0.188s-0.121-0.094-0.192-0.121c-0.071-0.026-0.148-0.038-0.224-0.034-8.398 0-16.677 0-24.211 0-0.076-0.004-0.153 0.007-0.224 0.034s-0.137 0.068-0.192 0.121c-0.055 0.053-0.1 0.117-0.13 0.188s-0.046 0.147-0.046 0.224 0.016 0.154 0.046 0.224c0.030 0.070 0.074 0.134 0.13 0.188s0.121 0.094 0.192 0.121 0.148 0.038 0.224 0.034zM28.107 15.388c-7.994 0-15.879 0-24.213 0-0.076-0.004-0.153 0.007-0.224 0.034s-0.137 0.068-0.192 0.121c-0.055 0.053-0.1 0.117-0.13 0.188s-0.046 0.147-0.046 0.224 0.016 0.154 0.046 0.224c0.030 0.070 0.074 0.134 0.13 0.188s0.121 0.094 0.192 0.121 0.148 0.038 0.224 0.034c8.353 0 16.318 0 24.213 0 0.076 0.004 0.153-0.007 0.224-0.034s0.137-0.068 0.192-0.121c0.055-0.053 0.1-0.117 0.13-0.188s0.046-0.147 0.046-0.224-0.016-0.154-0.046-0.224c-0.030-0.071-0.074-0.134-0.13-0.188s-0.121-0.094-0.192-0.121-0.148-0.038-0.224-0.034zM28.111 21.841c-8.748-0.057-15.799-0.105-24.215-0.16-0.149 0-0.292 0.060-0.398 0.166s-0.165 0.251-0.165 0.402 0.059 0.295 0.165 0.402c0.105 0.106 0.249 0.166 0.398 0.166 8.563 0.056 15.49 0.102 24.215 0.16 0.149 0 0.292-0.060 0.398-0.166s0.165-0.251 0.165-0.402c0-0.15-0.059-0.295-0.165-0.402s-0.249-0.166-0.398-0.166z"></path></svg></button></div><style data-emotion="css 1jlqkkp">.css-1jlqkkp{--tw-bg-opacity:1;background-color:rgb(2 15 102 / var(--tw-bg-opacity));}</style><style data-emotion="css lx7w0r">.css-lx7w0r{position:fixed;bottom:0px;top:0px;z-index:20;height:100%;max-width:100%;-webkit-flex:none;-ms-flex:none;flex:none;overflow:auto;--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));padding-bottom:3rem;top:var(--nav-container-drawer-offset);height:-nav-container-drawer-height;left:auto;right:0px;--tw-translate-x:100%;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));width:20rem;--tw-bg-opacity:1;background-color:rgb(2 15 102 / var(--tw-bg-opacity));}</style><div class="css-lx7w0r" style="--nav-container-drawer-offset:0px;--nav-container-drawer-height:calc(100vh - 0px);will-change:transform;transform:translateX(100%)"><style data-emotion="css 3xw4st">.css-3xw4st{list-style-type:none;padding-top:0.5rem;padding-bottom:0.5rem;}</style><style data-emotion="css 1ax9ngz">.css-1ax9ngz{list-style-type:none;padding-top:0.5rem;padding-bottom:0.5rem;}</style><ul class="css-1ax9ngz"><style data-emotion="css isgvpc">.css-isgvpc{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;-webkit-align-items:flex-end;-webkit-box-align:flex-end;-ms-flex-align:flex-end;align-items:flex-end;}</style><li class="css-isgvpc" style="will-change:opacity,transform"><style data-emotion="css 6vinbm">.css-6vinbm{margin-left:0.75rem;margin-right:0.75rem;height:2.25rem;width:2.25rem;padding:0.5rem;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}</style><button title="Close main navigation" type="button" class="css-6vinbm"><svg version="1.1" viewBox="0 0 32 32"><path d="M31.769 30.292l-13.642-13.658c-0.187-0.188-0.293-0.442-0.293-0.707s0.105-0.519 0.293-0.707l13.474-13.498c0.182-0.189 0.283-0.441 0.281-0.703s-0.108-0.513-0.293-0.698-0.436-0.291-0.698-0.293c-0.262-0.002-0.515 0.099-0.703 0.281l-13.476 13.492c-0.187 0.187-0.442 0.293-0.707 0.293s-0.519-0.105-0.707-0.293l-13.518-13.506c-0.092-0.096-0.203-0.172-0.325-0.224s-0.253-0.080-0.386-0.081c-0.133-0.001-0.264 0.024-0.387 0.074s-0.235 0.125-0.328 0.218c-0.094 0.094-0.168 0.206-0.218 0.328s-0.076 0.255-0.074 0.387c0.001 0.133 0.029 0.264 0.081 0.386s0.129 0.232 0.224 0.325l13.518 13.512c0.187 0.188 0.293 0.442 0.293 0.707s-0.105 0.519-0.293 0.707l-13.664 13.658c-0.093 0.093-0.166 0.203-0.217 0.325s-0.076 0.252-0.076 0.383c0 0.265 0.106 0.52 0.294 0.707s0.442 0.293 0.708 0.293c0.265-0 0.52-0.106 0.707-0.294l13.662-13.658c0.188-0.187 0.442-0.293 0.707-0.293s0.52 0.105 0.707 0.293l13.644 13.658c0.092 0.096 0.203 0.172 0.325 0.224s0.253 0.080 0.386 0.081 0.265-0.024 0.387-0.074c0.123-0.050 0.235-0.125 0.328-0.218s0.168-0.206 0.218-0.328c0.050-0.123 0.076-0.255 0.075-0.387s-0.029-0.264-0.081-0.386-0.129-0.232-0.224-0.325v0z"></path></svg></button></li><li style="will-change:opacity,transform"><style data-emotion="css z98ri5">.css-z98ri5{display:block;width:100%;padding-left:1.25rem;padding-right:1.25rem;padding-top:0.75rem;padding-bottom:0.75rem;text-align:right;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}</style><a href="https://vault.bitwarden.com/#/login" target="_blank" rel="noreferrer" class="css-z98ri5">Log In</a></li><li style="will-change:opacity,transform"><a class="mntn css-z98ri5" href="/go/start-free/">Get started</a></li><li style="will-change:opacity,transform"><a class="css-z98ri5" href="/contact-sales/">Business sales</a></li></ul></div></nav><style data-emotion="css 1upn4tr">.css-1upn4tr{margin-left:auto;margin-right:auto;display:none;max-width:92rem;-webkit-box-pack:justify;-webkit-justify-content:space-between;justify-content:space-between;gap:1rem;padding-left:1.25rem;padding-right:1.25rem;padding-top:0.5rem;padding-bottom:0.5rem;}@media (min-width: 768px){.css-1upn4tr{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;}}</style><nav class="css-1upn4tr"><style data-emotion="css q1g67a">.css-q1g67a{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex:1 1 0%;-ms-flex:1 1 0%;flex:1 1 0%;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;}</style><div class="css-q1g67a"><a title="Bitwarden homepage" href="/"><style data-emotion="css 1k80f53">.css-1k80f53{width:11rem;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}</style><svg class="css-1k80f53" viewBox="0 0 528 83"><path d="M126.944 19.748c6.047 0 10.751 2.301 14.206 7.095 3.456 4.697 5.184 11.12 5.184 19.268 0 8.437-1.728 14.956-5.279 19.557-3.552 4.698-8.352 6.902-14.399 6.902-6.048 0-10.656-2.108-14.111-6.518h-.96l-1.824 4.505c-.288.671-.96 1.055-1.632 1.055h-7.679a1.72 1.72 0 0 1-1.728-1.726V2.493A1.72 1.72 0 0 1 100.45.767h10.367c.96 0 1.728.767 1.728 1.726v14.763c0 2.109-.192 5.464-.576 10.066h.576c3.167-4.985 8.063-7.574 14.399-7.574Zm-4.416 11.217c-3.36 0-5.952 1.054-7.584 3.163-1.535 2.11-2.399 5.656-2.399 10.45v1.533c0 5.465.768 9.395 2.399 11.696 1.632 2.301 4.224 3.547 7.776 3.547 2.784 0 5.183-1.342 6.815-4.026 1.632-2.589 2.496-6.519 2.496-11.408 0-4.985-.864-8.724-2.496-11.217-1.727-2.492-4.127-3.738-7.007-3.738Zm46.652 40.743h-10.367a1.72 1.72 0 0 1-1.728-1.726V22.53a1.72 1.72 0 0 1 1.728-1.726h10.367c.96 0 1.728.767 1.728 1.726v47.357c.096.863-.768 1.822-1.728 1.822Zm37.918-10.258c2.015 0 4.415-.383 7.295-1.15.768-.192 1.44.383 1.44 1.15v7.957c0 .48-.288.863-.672 1.055-3.264 1.342-7.392 2.013-11.999 2.013-5.568 0-9.599-1.343-12.095-4.218-2.496-2.78-3.84-6.999-3.84-12.559V31.252h-5.472c-.672 0-1.151-.479-1.151-1.15v-4.506c0-.096.096-.192.096-.287l7.583-4.506 3.744-9.97c.192-.48.576-.767 1.056-.767h6.911c.672 0 1.152.48 1.152 1.15V20.9h13.727c.288 0 .576.287.576.575v8.628c0 .671-.48 1.15-1.152 1.15h-13.055v24.35c0 1.918.576 3.451 1.632 4.314.96 1.055 2.496 1.534 4.224 1.534Zm64.603 10.258c-1.344 0-2.4-.863-2.976-2.11L258.55 38.635c-.672-2.205-1.536-5.56-2.688-9.874h-.288l-.96 3.451-2.016 6.519-10.463 30.965c-.384 1.246-1.536 2.013-2.88 2.013-1.344 0-2.496-.863-2.88-2.205l-12.767-44.578c-.384-1.342.672-2.78 2.208-2.78h.288c.96 0 1.824.671 2.112 1.63l7.487 27.13c1.824 7.094 3.072 12.27 3.648 15.722h.288c1.728-7.094 3.072-11.792 3.936-14.188l9.695-28.377c.384-1.15 1.44-1.917 2.784-1.917 1.248 0 2.304.767 2.688 1.917l9.023 28.185c2.208 7.19 3.552 11.791 4.032 14.188h.288c.288-1.917 1.439-7.286 3.647-15.914l7.2-26.746c.288-.959 1.152-1.63 2.112-1.63a2.184 2.184 0 0 1 2.111 2.78L275.06 69.503c-.384 1.342-1.535 2.205-2.975 2.205h-.384Zm57.019 0c-.864 0-1.632-.671-1.728-1.534l-.863-6.327h-.48c-2.496 3.163-4.992 5.464-7.68 6.806-2.592 1.342-5.759 1.917-9.311 1.917-4.896 0-8.639-1.246-11.327-3.738-2.4-2.205-3.744-5.177-3.936-8.916-.384-4.985 1.728-9.778 5.76-12.558 4.127-2.684 9.887-4.314 17.662-4.314l9.408-.288v-3.26c0-4.793-.96-8.244-2.976-10.64-2.016-2.397-4.992-3.547-9.216-3.547-4.031 0-8.063.958-12.287 2.971a2.11 2.11 0 0 1-2.783-1.054c-.48-1.055 0-2.3 1.055-2.684 4.8-1.918 9.504-2.972 14.303-2.972 5.472 0 9.504 1.438 12.287 4.314 2.688 2.78 4.032 7.286 4.032 13.133v31.157c-.096.575-.96 1.534-1.92 1.534Zm-19.87-3.26c5.375 0 9.503-1.534 12.479-4.505 3.072-2.972 4.608-7.286 4.608-12.559v-4.793l-8.64.383c-7.007.288-11.903 1.438-14.975 3.26-2.975 1.821-4.511 4.793-4.511 8.628 0 3.067.96 5.56 2.783 7.285 2.112 1.438 4.8 2.301 8.256 2.301Zm56.828-47.262c1.439 0 2.879.096 4.511.288a2.164 2.164 0 0 1 1.824 2.492c-.192 1.15-1.344 1.822-2.496 1.63-1.44-.192-2.88-.383-4.319-.383-4.224 0-7.68 1.821-10.368 5.368-2.687 3.547-4.031 8.149-4.031 13.517v25.117c0 1.246-.96 2.205-2.208 2.205-1.248 0-2.208-.959-2.208-2.205V24.158c0-1.054.864-1.917 1.92-1.917s1.92.767 1.92 1.821l.384 7.094h.288c2.016-3.642 4.223-6.23 6.527-7.669 2.208-1.534 4.992-2.3 8.256-2.3Zm33.789 0c3.552 0 6.72.671 9.311 1.918 2.688 1.246 4.992 3.547 7.008 6.71h.288c-.192-3.93-.288-7.573-.288-11.216V2.972c0-1.246.96-2.205 2.208-2.205 1.248 0 2.207.959 2.207 2.205v67.01c0 .863-.672 1.534-1.535 1.534-.768 0-1.44-.575-1.536-1.438l-.96-6.231h-.384c-3.744 5.656-9.216 8.436-16.223 8.436-6.911 0-11.999-2.11-15.743-6.423-3.552-4.314-5.471-10.45-5.471-18.598 0-8.532 1.727-15.051 5.375-19.653 3.648-4.122 8.832-6.423 15.743-6.423Zm0 4.123c-5.472 0-9.503 1.917-12.287 5.752-2.688 3.738-4.032 9.203-4.032 16.489 0 13.996 5.472 20.994 16.415 20.994 5.664 0 9.695-1.63 12.287-4.889 2.688-3.26 3.936-8.628 3.936-16.105v-.767c0-7.67-1.248-13.134-3.936-16.393-2.496-3.452-6.623-5.081-12.383-5.081Zm57.5 47.261c-7.2 0-12.767-2.204-16.895-6.71-4.032-4.41-6.048-10.641-6.048-18.598 0-7.957 1.92-14.284 5.856-18.982 3.936-4.793 9.119-7.19 15.743-7.19 5.759 0 10.463 2.014 13.727 6.04 3.456 4.026 5.087 9.587 5.087 16.585v3.643h-35.709c.096 6.806 1.632 11.983 4.8 15.626 3.167 3.643 7.583 5.273 13.439 5.273 2.783 0 5.375-.192 7.487-.576 1.536-.287 3.36-.767 5.568-1.534 1.248-.479 2.591.48 2.591 1.822 0 .767-.479 1.534-1.247 1.821-2.304.96-4.512 1.534-6.528 1.918-2.4.67-4.992.862-7.871.862Zm-1.344-47.357c-4.8 0-8.64 1.534-11.519 4.697-2.88 3.068-4.512 7.67-5.088 13.517h30.718c0-5.656-1.248-10.257-3.744-13.42-2.496-3.165-5.952-4.794-10.367-4.794Zm69.499 46.495c-1.248 0-2.208-.959-2.208-2.205V39.497c0-4.985-1.056-8.628-3.072-10.833-2.208-2.205-5.376-3.451-9.791-3.451-5.952 0-10.272 1.438-12.959 4.505-2.688 2.972-4.224 7.862-4.224 14.476v25.117c0 1.246-.96 2.205-2.208 2.205-1.248 0-2.208-.959-2.208-2.205V24.158c0-1.15.864-2.013 2.016-2.013 1.056 0 1.824.767 2.016 1.726l.576 4.985h.288c3.264-5.177 8.927-7.766 17.183-7.766 11.231 0 16.894 6.04 16.894 18.12V69.31c-.096 1.342-1.152 2.397-2.303 2.397ZM164.093 0c-4.512 0-8.16 3.451-8.16 7.765v.767c0 4.218 3.744 7.765 8.16 7.765 4.415 0 8.159-3.547 8.159-7.765v-.671c0-4.41-3.744-7.861-8.159-7.861ZM58.273 45.248V10.969H34.278v60.898c4.25-2.25 8.052-4.696 11.409-7.338 8.39-6.57 12.586-12.997 12.586-19.281ZM68.557 4.114v41.134c0 3.07-.598 6.114-1.795 9.132-1.196 3.017-2.678 5.695-4.445 8.034-1.767 2.338-3.874 4.615-6.32 6.829-2.446 2.213-4.704 4.052-6.775 5.516a85.29 85.29 0 0 1-6.481 4.151c-2.25 1.303-3.848 2.187-4.794 2.651a60.55 60.55 0 0 1-2.276 1.071 3.07 3.07 0 0 1-1.393.322c-.5 0-.964-.107-1.392-.322a60.55 60.55 0 0 1-2.277-1.07c-.946-.465-2.544-1.349-4.793-2.652a85.29 85.29 0 0 1-6.48-4.15c-2.072-1.465-4.33-3.304-6.776-5.517-2.446-2.214-4.553-4.49-6.32-6.83-1.768-2.338-3.25-5.016-4.446-8.033C.598 51.362 0 48.318 0 45.248V4.114c0-.929.34-1.732 1.018-2.41.678-.679 1.481-1.018 2.41-1.018h61.7c.93 0 1.733.339 2.411 1.017.678.679 1.018 1.482 1.018 2.41Z"></path></svg></a><style data-emotion="css u7ytkp">.css-u7ytkp{margin-right:0.5rem;}</style><div class="css-u7ytkp"><style data-emotion="css pqvesl">.css-pqvesl{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;list-style-type:none;gap:1.25rem;}</style><ul class="css-pqvesl"></ul></div><style data-emotion="css 106ndbl">.css-106ndbl{width:100%;}@media (min-width: 1024px){.css-106ndbl{padding-left:1rem;padding-right:1rem;}}</style><div id="search-portal" class="css-106ndbl"></div></div><style data-emotion="css y1z2x9">.css-y1z2x9{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;gap:1.25rem;}</style><div class="css-y1z2x9"><style data-emotion="css le86e">.css-le86e{display:none;font-size:0.875rem;line-height:1.25rem;}@media (min-width: 768px){.css-le86e{display:block;}}@media (min-width: 1024px){.css-le86e{font-size:1rem;line-height:1.5rem;}}</style><style data-emotion="css 430mab">.css-430mab{transition-property:background-color,color,box-shadow,border-color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;display:inline-block;border-radius:9999px;border-width:2px;border-style:solid;text-align:center;--tw-border-opacity:1;border-color:rgb(255 255 255 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));display:none;font-size:0.875rem;line-height:1.25rem;}.css-430mab:hover{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-430mab:focus{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));outline:2px solid transparent;outline-offset:2px;}.group:hover .css-430mab{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-430mab:where(.dark, .dark *){--tw-border-opacity:1;border-color:rgb(255 255 255 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(28 30 36 / var(--tw-text-opacity));}.css-430mab:where(.dark, .dark *):hover{--tw-border-opacity:1;border-color:rgb(255 255 255 / var(--tw-border-opacity));background-color:transparent;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}@media (min-width: 768px){.css-430mab{display:block;}}@media (min-width: 1024px){.css-430mab{font-size:1rem;line-height:1.5rem;}}</style><a aria-label="go to /contact-sales/" data-testid="cta-link" class="css-430mab" href="/contact-sales/"><style data-emotion="css s5xdrg">.css-s5xdrg{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;}</style><span class="css-s5xdrg">Business sales</span></a><style data-emotion="css ufurj0">.css-ufurj0{transition-property:background-color,color,box-shadow,border-color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;display:inline-block;border-radius:9999px;border-width:2px;border-style:solid;text-align:center;--tw-border-opacity:1;border-color:rgb(255 255 255 / var(--tw-border-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));display:none;font-size:0.875rem;line-height:1.25rem;}.css-ufurj0:hover{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-ufurj0:focus{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));outline:2px solid transparent;outline-offset:2px;}.group:hover .css-ufurj0{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-ufurj0:where(.dark, .dark *){--tw-border-opacity:1;border-color:rgb(255 255 255 / var(--tw-border-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}@media (min-width: 768px){.css-ufurj0{display:block;}}@media (min-width: 1024px){.css-ufurj0{font-size:1rem;line-height:1.5rem;}}</style><a aria-label="go to /go/start-free/" data-testid="cta-link" class="mntn css-ufurj0" href="/go/start-free/"><span class="css-s5xdrg">Get started</span></a><style data-emotion="css 1lkxvaq">.css-1lkxvaq{font-size:0.875rem;line-height:1.25rem;}@media (min-width: 1024px){.css-1lkxvaq{font-size:1rem;line-height:1.5rem;}}</style><style data-emotion="css 141mtg7">.css-141mtg7{transition-property:background-color,color,box-shadow,border-color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;display:inline-block;padding-left:0px;padding-right:0px;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));font-size:0.875rem;line-height:1.25rem;}.css-141mtg7:hover{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-141mtg7:hover{--tw-text-opacity:1;color:rgb(243 246 249 / var(--tw-text-opacity));}@media (min-width: 1024px){.css-141mtg7{font-size:1rem;line-height:1.5rem;}}</style><a href="https://vault.bitwarden.com/#/login" target="_blank" rel="noreferrer" aria-label="go to https://vault.bitwarden.com/#/login" data-testid="cta-link" class="css-141mtg7"><span class="css-s5xdrg">Log In<style data-emotion="css ihq8ma">.css-ihq8ma{margin-left:0.5rem;font-family:bwi-font;font-size:16px!important;}</style><span class="css-ihq8ma"></span></span></a></div></nav></header><style data-emotion="css afq9iq">.css-afq9iq{margin-bottom:4rem;}</style><main class="css-afq9iq"><style data-emotion="css xmoxuc">.css-xmoxuc{position:-webkit-sticky;position:sticky;top:64px;z-index:10;width:100%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;border-bottom-width:1px;background-color:rgb(255 255 255 / 0.8);padding-top:0.5rem;padding-bottom:0.5rem;font-size:0.875rem;line-height:1.25rem;font-weight:700;--tw-backdrop-blur:blur(4px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);-webkit-tap-highlight-color:rgba(0, 0, 0, 0);}@media (min-width: 768px){.css-xmoxuc{display:none;}}</style><button type="button" class="css-xmoxuc">Security</button><style data-emotion="css woq3k4">.css-woq3k4{display:none;}@media (min-width: 768px){.css-woq3k4{display:-webkit-box;display:-webkit-unset;display:-ms-unsetbox;display:unset;}}</style><div class="css-woq3k4"><style data-emotion="css 1rzw0nx">.css-1rzw0nx{--tw-bg-opacity:1;background-color:rgb(2 15 102 / var(--tw-bg-opacity));padding-left:1.25rem;padding-right:1.25rem;}@media (min-width: 768px){.css-1rzw0nx{padding-top:0.75rem;}}@media (min-width: 1024px){.css-1rzw0nx{padding-top:0px;}}</style><nav class="css-1rzw0nx"><style data-emotion="css 1mlqqdt">.css-1mlqqdt{margin-left:395px;padding-top:1.5rem;text-align:left;font-size:1.25rem;line-height:1.75rem;font-weight:400;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}@media (min-width: 1024px){.css-1mlqqdt{font-size:1.875rem;line-height:2.25rem;}}@media (min-width: 1536px){.css-1mlqqdt{margin-left:auto;margin-right:auto;text-align:center;font-size:2.25rem;line-height:2.5rem;}}</style><h1 class="css-1mlqqdt">Welcome to the Help Center</h1><style data-emotion="css 1gizyee">.css-1gizyee{position:relative;height:75px;}</style><div class="css-1gizyee"><style data-emotion="css 10wklop">.css-10wklop{position:absolute;bottom:0px;left:0px;right:0px;top:0px;z-index:1;margin:auto;height:100%;}</style><div class="css-10wklop"><style data-emotion="css 11arxgj">.css-11arxgj{position:relative;max-width:32rem;margin-left:390px;}@media (min-width: 1536px){.css-11arxgj{margin-left:auto;margin-right:auto;}}</style><div class="css-11arxgj"><style data-emotion="css 1uktcht">.css-1uktcht{margin-left:auto;margin-right:auto;width:100%;border-radius:9999px;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;}.css-1uktcht::-webkit-input-placeholder{font-size:0.875rem;line-height:1.25rem;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-1uktcht::-moz-placeholder{font-size:0.875rem;line-height:1.25rem;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-1uktcht:-ms-input-placeholder{font-size:0.875rem;line-height:1.25rem;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-1uktcht::placeholder{font-size:0.875rem;line-height:1.25rem;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}</style><input name="search" type="text" placeholder="What are you looking for?" readonly="" class="css-1uktcht"/><style data-emotion="css 1uffton">.css-1uffton{pointer-events:none;position:absolute;bottom:0px;right:1rem;top:0px;margin:auto;height:1rem;width:1rem;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}@media (min-width: 1024px){.css-1uffton{height:1.25rem;width:1.25rem;}}</style><svg class="css-1uffton" version="1.1" viewBox="0 0 32 32"><path d="M31.034 24.9l-5.644-5.66c-0.282-0.273-0.481-0.621-0.573-1.002s-0.076-0.782 0.049-1.154c0.847-2.408 0.954-5.013 0.309-7.483s-2.014-4.689-3.93-6.375-4.293-2.76-6.824-3.085c-2.531-0.325-5.102 0.114-7.382 1.261s-4.165 2.949-5.413 5.175c-1.248 2.226-1.802 4.775-1.591 7.318s1.178 4.966 2.775 6.956c1.598 1.99 3.754 3.457 6.192 4.212 2.682 0.836 5.565 0.762 8.2-0.212 0.373-0.129 0.776-0.149 1.16-0.056s0.734 0.292 1.008 0.576l5.6 5.622c0.307 0.307 0.671 0.55 1.071 0.716s0.83 0.252 1.264 0.252c0.434 0 0.863-0.085 1.264-0.252s0.765-0.41 1.071-0.716l1.4-1.4c0.62-0.621 0.968-1.463 0.968-2.341s-0.348-1.72-0.968-2.341l-0.006-0.012zM2.522 15.698c-0.511-1.829-0.528-3.761-0.047-5.599s1.441-3.514 2.782-4.859c1.341-1.345 3.016-2.309 4.852-2.794s3.769-0.474 5.599 0.033c1.769 0.484 3.381 1.421 4.677 2.719s2.23 2.911 2.711 4.681c0.511 1.829 0.528 3.761 0.047 5.599s-1.441 3.514-2.782 4.859c-1.341 1.345-3.016 2.309-4.852 2.794s-3.769 0.474-5.599-0.033c-1.769-0.484-3.381-1.421-4.677-2.719s-2.23-2.911-2.711-4.681zM29.522 28.068l-1.4 1.4c-0.108 0.109-0.236 0.195-0.378 0.254s-0.294 0.089-0.447 0.089c-0.153 0-0.305-0.030-0.447-0.089s-0.27-0.145-0.378-0.254l-5.548-5.562c-0.084-0.086-0.15-0.189-0.192-0.302s-0.060-0.233-0.052-0.354c0.007-0.12 0.040-0.238 0.096-0.345s0.134-0.201 0.228-0.276c0.613-0.514 1.177-1.084 1.684-1.702 0.074-0.095 0.168-0.174 0.275-0.231s0.224-0.090 0.345-0.098c0.121-0.008 0.242 0.009 0.355 0.051s0.217 0.107 0.303 0.192l5.556 5.568c0.218 0.221 0.34 0.518 0.34 0.828s-0.122 0.608-0.34 0.828v0.002z"></path></svg></div></div></div></nav></div><style data-emotion="css 11l6wr6">.css-11l6wr6{position:relative;margin-left:auto;margin-right:auto;margin-bottom:1.5rem;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;max-width:1600px;-webkit-flex-direction:column-reverse;-ms-flex-direction:column-reverse;flex-direction:column-reverse;padding-left:1.25rem;padding-right:1.25rem;}@media (min-width: 768px){.css-11l6wr6{-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;}}</style><div class="css-11l6wr6"><div><style data-emotion="css 1u8l59x">@media (min-width: 768px){.css-1u8l59x{position:-webkit-sticky;position:sticky;top:5rem;margin-top:-11rem;border-radius:2.25rem;--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));}}</style><style data-emotion="css 1434wkx">.css-1434wkx{position:fixed;bottom:0px;top:0px;z-index:20;height:100%;max-width:100%;-webkit-flex:none;-ms-flex:none;flex:none;overflow:auto;--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));padding-bottom:3rem;top:var(--nav-container-drawer-offset);height:-nav-container-drawer-height;left:0px;right:auto;--tw-translate-x:-100%;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));width:20rem;}@media (min-width: 768px){.css-1434wkx{top:auto;display:block;height:auto;--tw-translate-x:0px!important;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))!important;-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))!important;-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))!important;transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))!important;padding-top:1rem;padding-bottom:1rem;}}@media (min-width: 768px){.css-1434wkx{position:-webkit-sticky;position:sticky;top:5rem;margin-top:-11rem;border-radius:2.25rem;--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));}}</style><div class="css-1434wkx" style="--nav-container-drawer-offset:0px;--nav-container-drawer-height:calc(100vh - 0px);will-change:transform;transform:translateX(-100%)"><style data-emotion="css sz03v3">.css-sz03v3{height:-webkit-fit-content;height:-moz-fit-content;height:fit-content;max-height:100%;overflow-y:auto;padding-bottom:3rem;padding-top:0.5rem;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}@media (min-width: 1024px){.css-sz03v3{margin-top:1rem;margin-bottom:1rem;max-height:calc(100vh - 10rem);}}</style><nav class="css-sz03v3"><style data-emotion="css 171wbv4">.css-171wbv4{padding-left:0.5rem;padding-right:0.5rem;}</style><div class="css-171wbv4"><style data-emotion="css i2wqpt">.css-i2wqpt{display:block;width:100%;border-radius:9999px;padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;line-height:1.25;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-i2wqpt:hover{--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}</style><a class="css-i2wqpt" href="/help/">Home</a><a class="css-i2wqpt" href="/help/releasenotes/">Release Notes</a><style data-emotion="css 22umew">.css-22umew{margin-top:0.5rem;list-style-type:none;}</style><ul class="css-22umew"><li><style data-emotion="css 1ch2yw2">.css-1ch2yw2{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:100%;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;border-radius:9999px;padding-left:1rem;padding-right:1rem;padding-top:0.25rem;padding-bottom:0.25rem;text-align:left;}.css-1ch2yw2:hover{--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}</style><button type="button" class="css-1ch2yw2"><style data-emotion="css 1gixmn1">.css-1gixmn1{font-size:1.125rem;line-height:1.75rem;font-weight:700;}</style><span class="css-1gixmn1">My Account</span><style data-emotion="css 1hofse1">.css-1hofse1{margin-left:0.25rem;height:1rem;width:1rem;-webkit-flex:none;-ms-flex:none;flex:none;transition-property:transform;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}</style><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><style data-emotion="css 1504nod">.css-1504nod{font-size:0.875rem;line-height:1.25rem;}</style><style data-emotion="css geo4q3">.css-geo4q3{overflow:hidden;font-size:0.875rem;line-height:1.25rem;}</style><div class="css-geo4q3" style="opacity:0;height:0px"><style data-emotion="css ffhm6p">.css-ffhm6p{list-style-type:none;}</style><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/create-bitwarden-account/">Create your Bitwarden Account</a></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><style data-emotion="css 1j389vi">.css-1j389vi{font-weight:700;}</style><span class="css-1j389vi">Log In & Unlock</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><style data-emotion="css 1kcjmbu">.css-1kcjmbu{margin-left:0.5rem;list-style-type:none;}</style><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/master-password/">Your Master Password</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/forgot-master-password/">I Forgot my Master Password</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/using-sso/">Using Login with SSO</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/log-in-with-device/">Log in with Device</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/login-with-passkeys/">Log in with Passkeys beta</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/account-switching/">Account Switching</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/unlock-with-pin/">Unlock with PIN</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/biometrics/">Unlock with Biometrics</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/vault-timeout/">Vault Timeout Options</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Two-step Login</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/bitwarden-field-guide-two-step-login/">Field Guide to Two-Step Login</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/setup-two-step-login/">Two-step Login Methods</a></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Setup Guides</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/setup-two-step-login-authenticator/">Two-step Login via Authenticator</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/setup-two-step-login-email/">Two-step Login via Email</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/setup-two-step-login-duo/">Two-step Login via Duo</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/setup-two-step-login-yubikey/">Two-step Login via YubiKey</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/setup-two-step-login-fido/">Two-step Login via FIDO2 WebAuthn</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/two-step-recovery-code/">Recovery Codes</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/lost-two-step-device/">Lost Secondary Device</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/twostep-faqs/">Two-step Login FAQs</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">More</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/emergency-access/">Emergency Access</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/localization/">Localization</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/unusual-traffic-error/">Unusual Traffic Error</a></li></ul></div></li></ul></div></li></ul><ul class="css-22umew"><li><button type="button" class="css-1ch2yw2"><span class="css-1gixmn1">Password Manager</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/password-manager-overview/">Password Manager Overview</a></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Get Started</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/getting-started-webvault/">Password Manager Web App</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/getting-started-browserext/">Password Manager Browser Extensions</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/getting-started-mobile/">Password Manager Mobile Apps</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/getting-started-desktop/">Password Manager Desktop Apps</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Vault Basics</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/managing-items/">Vault Items</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/generator/">Username & Password Generator</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/custom-fields/">Custom Fields</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/integrated-authenticator/">Integrated Authenticator</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/attachments/">File Attachments</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/sharing/">Sharing</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-collections/">Collections</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/storing-passkeys/">Storing Passkeys</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Vault Administration</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/folders/">Folders</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/favorites/">Favorites</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/vault-sync/">Sync your Vault</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/searching-vault/">Search your Vault</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/reports/">Vault Health Reports</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Import & Export</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-data/">Import Data to your Vault</a></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Import Guides</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-from-lastpass/">Import Data from LastPass</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-from-1password/">Import Data from 1Password</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-from-dashlane/">Import Data from Dashlane</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-from-chrome/">Import Data from Google Chrome</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-from-safari/">Import Data from macOS & Safari</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-from-firefox/">Import Data from Firefox</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-from-passwordsafe/">Import Data from Password Safe</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-data-from-myki/">Import Data from Myki</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/export-your-data/">Export Vault Data</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/encrypted-export/">Encrypted Exports</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/condition-bitwarden-import/">Condition a Bitwarden .csv or .json</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-faqs/">Import & Export FAQs</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Autofill</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Autofill Basics</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/auto-fill-browser/">Autofill Logins in Browser Extensions</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/auto-fill-android/">Autofill Logins on Android</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/auto-fill-ios/">Autofill Logins on iOS</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/auto-fill-card-id/">Autofill Cards & Identities</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/auto-fill-custom-fields/">Autofill Custom Fields</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/uri-match-detection/">Using URIs</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/blocking-uris/">Autofill Blocked URIs</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/basic-auth-autofill/">Basic Auth Prompts</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/keyboard-shortcuts/">Keyboard Shortcuts</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/disable-browser-autofill/">Disable a Browser's Built-in Password Manager</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/auto-fill-android-troubleshooting/">Troubleshooting Android Autofill</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/autofill-faqs/">Autofill FAQs</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Bitwarden Send</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-send/">About Send</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/create-send/">Create a Send</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/receive-send/">Receive a Send</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/send-lifespan/">Send Lifespan</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/send-privacy/">Send Privacy</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/send-cli/">Send from CLI</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/send-encryption/">Send Encryption</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/send-faqs/">Send FAQs</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Developer Tools</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/bitwarden-apis/">Password Manager APIs</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/cli/">Password Manager CLI</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/cli-auth-challenges/">CLI Authentication Challenges</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/personal-api-key/">Personal API Key for CLI Authentication</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">More</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/product-faqs/">Password Manager FAQs</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/change-theme/">Change App Theme</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/duckduckgo-macos-browser-integration/">DuckDuckGo macOS Browser Integration</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/apple-watch-totp/">Bitwarden on Apple Watch </a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/private-mode/">Use Bitwarden in Firefox Private Windows</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/using-bitwarden-offline/">Using Bitwarden Offline</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/exclude-domains/">Exclude Domains</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/install-safari-app-extension/">Safari Web Extension</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/blocker-access-rule/">uMatrix and NoScript access rules</a></li></ul></div></li></ul></div></li></ul><ul class="css-22umew"><li><button type="button" class="css-1ch2yw2"><span class="css-1gixmn1">Bitwarden Authenticator</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/bitwarden-authenticator/">Bitwarden Authenticator</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/authenticator-import-export/">Import and Export</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/authenticator-faqs/">FAQs</a></li></ul></div></li></ul><ul class="css-22umew"><li><button type="button" class="css-1ch2yw2"><span class="css-1gixmn1">Secrets Manager</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/secrets-manager-overview/">Secrets Manager Overview</a></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Get Started</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/secrets-manager-quick-start/">Secrets Manager Quick Start</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/developer-quick-start/">Developer Quick Start</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/log-in-to-secrets-manager/">Log in to Secrets Manager</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/manage-your-secrets-org/">Manage your Organization</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Your Secrets</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/projects/">Projects</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/secrets/">Secrets</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/machine-accounts/">Machine Accounts</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/access-tokens/">Access Tokens</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/secret-decryption/">Secret Decryption</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Import & Export</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-secrets-data/">Import Data</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/export-secrets-data/">Export Data</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Developer Tools</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/secrets-manager-cli/">Secrets Manager CLI</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/secrets-manager-sdk/">Secrets Manager SDK</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Integrations</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/ansible-integration/">Ansible</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/github-actions-integration/">GitHub Actions</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/gitlab-integration/">GitLab CI/CD</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/secrets-manager-kubernetes-operator/">Secrets Manager Kubernetes Operator</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">More</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/secrets-manager-faqs/">Secrets Manager FAQs</a></li></ul></div></li></ul></div></li></ul><ul class="css-22umew"><li><button type="button" class="css-1ch2yw2"><span class="css-1gixmn1">Admin Console</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/getting-started-organizations/">Organizations Quick Start</a></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Organization Basics</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-organizations/">Organizations</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-collections/">Collections</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-groups/">Groups</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/policies/">Enterprise Policies</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/collection-management/">Collection Management</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">User Management</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/onboarding-and-succession/">Onboarding and Succession Overview</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/managing-users/">User Management</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/user-types-access-control/">Member Roles and Permissions</a></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">SCIM</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-scim/">About SCIM</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/jumpcloud-scim-integration/">JumpCloud SCIM Integration</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/microsoft-entra-id-scim-integration/">Microsoft Entra ID SCIM Integration</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/okta-scim-integration/">Okta SCIM Integration</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/onelogin-scim-integration/">OneLogin SCIM Integration</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/ping-identity-scim-integration/">Ping Identity SCIM Integration</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Directory Connector</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/directory-sync/">About Directory Connector</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/directory-sync-desktop/">Directory Connector Desktop App</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/directory-sync-cli/">Directory Connector CLI</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/directory-sync-shared/">Directory Connector File Storage</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/user-group-filters/">Sync Options and Filters</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/clear-sync-cache/">Clear Sync Cache</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/schedule-directory-sync/">Schedule a Sync</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/ldap-directory/">Sync with Active Directory or LDAP</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/microsoft-entra-id/">Sync with Microsoft Entra ID</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/workspace-directory/">Sync with Google Workspace</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/okta-directory/">Sync with Okta</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/onelogin-directory/">Sync with OneLogin</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/account-recovery/">Account Recovery</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Import & Export</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/import-to-org/">Import to an Organization</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/export-your-data/">Export Vault Data</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/condition-bitwarden-import/">Condition a Bitwarden .csv or .json</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Login with SSO</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-sso/">About Login with SSO</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/configure-sso-saml/">SAML 2.0 Configuration</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/configure-sso-oidc/">OIDC Configuration</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/sso-decryption-options/">Member Decryption Options</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/domain-verification/">Domain Verification</a></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Implementation Guides</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-adfs/">ADFS SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-auth0/">Auth0 SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-aws/">AWS SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-duo/">Duo SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-google/">Google SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-jumpcloud/">JumpCloud SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-keycloak/">Keycloak SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-microsoft-entra-id/">Microsoft Entra ID SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-okta/">Okta SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/saml-onelogin/">OneLogin SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/ping-identity-saml-implementation/">Ping Identity SAML Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/adfs-oidc-implementation/">ADFS OIDC Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/oidc-microsoft-entra-id/">Microsoft Entra ID OIDC Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/oidc-okta/">Okta OIDC Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/ping-identity-oidc-implementation/">Ping Identity OIDC Implementation</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/cloudflare-zero-trust-sso-implementation/">Cloudflare Zero Trust SSO Implementation</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Trusted Devices</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-trusted-devices/">About Trusted Devices</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/setup-sso-with-trusted-devices/">Setup SSO with Trusted Devices</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/add-a-trusted-device/">Add a Trusted Device</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/approve-a-trusted-device/">Approve a Trusted Device</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Key Connector</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-key-connector/">About Key Connector</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/deploy-key-connector/">Deploy Key Connector</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/sso-faqs/">Login with SSO FAQs</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Reporting</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/reports/">Vault Health Reports</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/event-logs/">Event Logs</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/elastic-siem/">Elastic SIEM</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/microsoft-sentinel-siem/">Microsoft Sentinel SIEM</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/panther-siem/">Panther SIEM </a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/rapid7-siem/">Rapid7 SIEM</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/splunk-siem/">Splunk SIEM</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">End-User Onboarding</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/about-onboarding-section/">About this Section</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/welcome-email-templates/">Welcome Email Templates</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/admin-team-onboarding-emails/">Admin Team Onboarding Emails</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/end-user-adoption-emails/">End-user Adoption Emails</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/onboarding-workflows/">Onboarding Workflows</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Deploy Client Apps</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Deploy Browser Extensions</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/browserext-deploy/">Deploy Browser Extensions using GPOs, Linux Policies, & .plist Files</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/deploy-browser-extensions-with-intune/">Deploy Browser Extensions with Intune</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Deploy Desktop Apps</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/deploy-desktop-apps-with-intune/">Deploy Desktop Apps with Intune</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/configure-clients-selfhost/">Configure Clients for Your Server</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/deactivate-browser-password-managers/">Deactivate Browser Password Managers Using Device Management</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/public-api/">Bitwarden Public API</a></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">More</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/org-faqs/">Organizations FAQs</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/link-to-an-item/">Link to an Item</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/enterprise-feature-list/">Bitwarden for Enterprise Features Datasheet</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/teams-enterprise-migration-guide/">Teams and Enterprise Migration Guide</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/lastpass-enterprise-migration-guide/">LastPass Enterprise Migration Guide</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/proof-of-concept/">Proof-of-Concept Project Checklist</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/prepare-your-org-for-prod/">Prepare your Trial Organization for Production</a></li></ul></div></li></ul></div></li></ul><ul class="css-22umew"><li><button type="button" class="css-1ch2yw2"><span class="css-1gixmn1">Provider Portal</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/providers/">Provider Portal Overview</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/getting-started-providers/">Provider Portal Quick Start</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/provider-users/">Provider Users</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/client-org-setup/">Start a Client Organization</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/manage-client-orgs/">Ongoing Administration</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/client-org-removal/">Unlink Client Organization</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/provider-events/">Provider Event Logs</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/provider-billing/">Provider Billing</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/providers-faqs/">Providers FAQs</a></li></ul></div></li></ul><ul class="css-22umew"><li><button type="button" class="css-1ch2yw2"><span class="css-1gixmn1">Self-hosting</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Install & Deploy Guides</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Docker</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/install-on-premise-linux/">Linux Standard Deployment</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/install-on-premise-manual/">Linux Manual Deployment</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/install-and-deploy-offline/">Linux Offline Deployment</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/install-on-premise-windows/">Windows Standard Deployment</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/install-and-deploy-offline-windows/">Windows Offline Deployment</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/install-and-deploy-unified-beta/">Unified Deployment beta</a></li></ul></div></li></ul><ul class="css-1kcjmbu"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Helm</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/self-host-with-helm/">Self-host with Helm</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/azure-aks-deployment/">Azure AKS Deployment</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/openshift-deployment/">OpenShift Deployment</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/aws-eks-deployment/">AWS EKS Deployment</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/add-rawmanifest-files/">Add rawManifest Files</a></li></ul></div></li></ul></div></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/self-host-an-organization/">Self-host an Organization</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/migration/">Migration Procedures </a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/certificates/">Certificate Options</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/environment-variables/">Configure Environment Variables</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/database-options/">Database Options</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/external-db/">Connect to an External MSSQL Database</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/updating-on-premise/">Update your Instance</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/backup-on-premise/">Backup your Hosted Data</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/licensing-on-premise/">License Paid Features</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/system-administrator-portal/">System Administrator Portal</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/configure-clients-selfhost/">Configure Clients for Your Server</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/change-client-environment/">Connect Clients to your Instance</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/self-hosting-scim/">Self-hosting SCIM</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/families-for-enterprise-self-hosted/">Self-hosting Families Sponsorships</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/send-hosting/">Self-hosting Send</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/configure-push-relay/">Configure Push Relay</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/hosting-faqs/">Hosting FAQs</a></li></ul></div></li></ul><ul class="css-22umew"><li><button type="button" class="css-1ch2yw2"><span class="css-1gixmn1">Security</span><style data-emotion="css nd1hxo">.css-nd1hxo{margin-left:0.25rem;height:1rem;width:1rem;-webkit-flex:none;-ms-flex:none;flex:none;transition-property:transform;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;--tw-rotate:90deg;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));}</style><svg class="css-nd1hxo" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:1;height:auto"><ul class="css-ffhm6p"><li><style data-emotion="css 9a6nvu">.css-9a6nvu{display:block;width:100%;border-radius:9999px;padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;line-height:1.25;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));--tw-border-opacity:1;border-color:rgb(2 15 102 / var(--tw-border-opacity));--tw-bg-opacity:1!important;background-color:rgb(2 15 102 / var(--tw-bg-opacity))!important;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-9a6nvu:hover{--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}</style><a aria-current="page" class="css-9a6nvu" href="/help/bitwarden-security-white-paper/">Bitwarden Security Whitepaper</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/vault-data/">Vault Data</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/administrative-data/">Administrative Data</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/what-encryption-is-used/">Encryption</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/kdf-algorithms/">KDF Algorithms</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/account-encryption-key/">Account Encryption Key</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/fingerprint-phrase/">Account Fingerprint Phrase</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/data-storage/">Storage</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/is-bitwarden-audited/">Compliance, Audits, and Certifications</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/server-geographies/">Server Geographies</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/versioning/">Versioning</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/website-icons/">Privacy when using Website Icons</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/bitwarden-software-release-support/">Bitwarden Software Release Support</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/subprocessors/">Bitwarden Subprocessors</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/emails-from-bitwarden/">Emails from Bitwarden</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/bitwarden-addresses/">Bitwarden Addresses</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/security-faqs/">Security FAQs</a></li></ul></div></li></ul><ul class="css-22umew"><li><button type="button" class="css-1ch2yw2"><span class="css-1gixmn1">Plans & Pricing</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Password Manager</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/password-manager-plans/">Password Manager Plans</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/upgrade-from-individual-to-org/">Upgrade from Individual to Organization</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/families-for-enterprise/">Redeem Families Sponsorship</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/premium-renewal/">Premium Renewal</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><button type="button" class="css-1ch2yw2"><span class="css-1j389vi">Secrets Manager</span><svg class="css-1hofse1" version="1.1" viewBox="0 0 32 32"><path d="M8.318 0.269c0.404-0.377 1.037-0.355 1.413 0.049l12.090 12.953c1.434 1.537 1.434 3.922 0 5.459l-12.090 12.953c-0.377 0.404-1.010 0.425-1.413 0.049s-0.426-1.010-0.049-1.413l12.089-12.953c0.717-0.768 0.717-1.961 0-2.729l-12.089-12.953c-0.377-0.404-0.355-1.037 0.049-1.413z"></path></svg></button><div class="css-geo4q3" style="opacity:0;height:0px"><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/secrets-manager-plans/">Secrets Manager Plans</a></li></ul><ul class="css-1kcjmbu"><li><a class="css-i2wqpt" href="/help/sign-up-for-secrets-manager/">Sign up for Secrets Manager</a></li></ul></div></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/bitwarden-resellers/">Bitwarden Resellers</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/enterprise-free-trial/">Start an Enterprise Trial</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/organization-renewal/">Organization Renewal</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/update-billing-info/">Update Your Billing Information</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/delete-your-account/">Delete an Account or Organization</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/cancel-a-subscription/">Cancel a Subscription</a></li></ul><ul class="css-ffhm6p"><li><a class="css-i2wqpt" href="/help/billing-faqs/">Billing FAQs</a></li></ul></div></li></ul></div></nav></div></div><div><style data-emotion="css m30tsa">.css-m30tsa{display:grid;grid-template-columns:minmax(0, 1fr);}@media (min-width: 768px){.css-m30tsa{padding-left:1.5rem;}}@media (min-width: 1024px){.css-m30tsa{grid-template-columns:minmax(0, 1fr) 230px;padding-left:0px;}}</style><div class="css-m30tsa"><style data-emotion="css 1pe3az0">.css-1pe3az0{-webkit-order:2;-ms-flex-order:2;order:2;}@media (min-width: 640px){.css-1pe3az0{margin-right:1.25rem;}}@media (min-width: 768px){.css-1pe3az0{margin-left:1.5rem;margin-right:1.5rem;}}@media (min-width: 1024px){.css-1pe3az0{-webkit-order:1;-ms-flex-order:1;order:1;margin-left:2.5rem;margin-right:2.5rem;}}</style><article class="css-1pe3az0"><style data-emotion="css 47wypn">.css-47wypn{margin-top:0.25rem;display:none;padding-top:0.5rem;padding-bottom:0.5rem;font-size:0.875rem;line-height:1.25rem;font-weight:700;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}@media (min-width: 768px){.css-47wypn{display:block;}}@media (min-width: 1024px){.css-47wypn{margin-top:1rem;}}</style><div class="css-47wypn">Security</div><style data-emotion="css akdqam">.css-akdqam{margin-top:1rem;}</style><h1 id="bitwarden-security-whitepaper" class="css-akdqam">Bitwarden Security Whitepaper</h1><style data-emotion="css bjn8wh">.css-bjn8wh{position:relative;}</style><div id="overview" class="group css-bjn8wh"><style data-emotion="css 1oqman9">.css-1oqman9{position:absolute;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));opacity:0;transition-property:opacity;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:500ms;left:-1.75rem;top:0.5rem;height:1.5rem;width:1.5rem;}.css-1oqman9:hover{opacity:1!important;}.group:hover .css-1oqman9{opacity:0.4;}</style><a href="#overview" title="#overview" class="css-1oqman9"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h2>Overview</h2></div><h4>Everyone is more connected than ever</h4><p>Internet-connected devices and services are more critical than ever in today’s society. As more and more companies provide innovative software-as-a-service products that improve users’ lives at home and at work, the number of credentials and machine secrets grow exponentially. As do the threats to their security.</p><h4>Cybersecurity threats are high, but practices are low</h4><p>Threats to user and customer data continue to rise. It’s almost every week that a breach or ransomware attack makes the news, and those are only the incidents large enough to be published. In 2023, <style data-emotion="css 1v5663i">.css-1v5663i{text-decoration-line:underline;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}.css-1v5663i:where(.dark, .dark *){--tw-text-opacity:1;color:rgb(44 221 233 / var(--tw-text-opacity));}.css-1v5663i:where(.dark, .dark *):hover{--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}</style><a href="https://www.ibm.com/reports/data-breach" target="_blank" rel="noreferrer" class="css-1v5663i">IBM reported</a> that the average cost of a US data breach approaches $9.48 Million, taking into account investigation costs, legal fees, opportunity cost, and loss of customer trust.</p><p>Research from <a href="https://www.verizon.com/business/resources/reports/2023-data-breach-investigations-report-dbir.pdf" target="_blank" rel="noreferrer" class="css-1v5663i">Verizon</a> shows that compromised credentials account for 86% of data breaches. This includes the use of passwords that have been guessed, phished, or leaked in other breaches.</p><p>With such threats, one would expect that businesses armed their employees with as much training and tools as possible, but <a class="css-1v5663i" href="/resources/2023-password-decisions-survey-results/">Bitwarden research</a> shows that users aren’t always following best practices, including 90% of respondents saying that they reused passwords.</p><p>Security experts recommend that users have a different, randomly generated password for every account. But how does one manage all those passwords? And how can good password habits be maintained across an organization?</p><h4>Bitwarden helps secure individuals, businesses, and infrastructure secrets</h4><p>Bitwarden offers a portfolio of security products to help secure everyone, prevent breaches, and ensure productivity.</p><p>Bitwarden Password Manager provides users the tools to create, store, and share passwords while maintaining the highest level of security. It is the easiest and safest way to store all of your logins, passwords, and other sensitive information while conveniently keeping them synced between all of your devices.</p><p>Bitwarden Secrets Manager empowers developers, DevOps, and IT teams to store, share, and automate machine secrets like authentication keys, database passwords, and API keys. The end-to-end encrypted secrets management solution supports the secure deployment of infrastructure and application code without the risk of exposing critical machine secrets.</p><p>Bitwarden Passwordless.dev provides APIs and tools needed for developers to implement FIDO2 WebAuthn based passkey authentication, the next generation of secure credential authentication, for websites and applications.</p><h4>Maintaining security and compliance</h4><p>Bitwarden solutions, software, infrastructure, and security processes have been designed from the ground up with a multi-layered, defense-in-depth approach. The Bitwarden Security and Compliance Program is based on the ISO27001 Information Security Management System (ISMS). Policies have been defined that govern security practices and processes and are continually updated to be consistent with applicable legal, industry, and regulatory requirements for services provided under the Terms of Service Agreement.</p><p>Bitwarden complies with industry-standard application security guidelines that include a dedicated security engineering team and include regular reviews of application source code and IT infrastructure to detect, validate, and remediate any security vulnerabilities.</p><p>This white paper provides an overview of Bitwarden security principles as well as links to additional documents that provide more detail in specific areas.</p><div id="bitwarden-security-principles" class="group css-bjn8wh"><a href="#bitwarden-security-principles" title="#bitwarden-security-principles" class="css-1oqman9"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h2>Bitwarden security principles</h2></div><p>Protecting user data with Bitwarden products is a partnership between Bitwarden systems and employees, and users themselves. This section will cover, at a high-level, the key security measures Bitwarden utilizes and the tools Bitwarden makes available to users for protecting data stored in Bitwarden.</p><div id="key-security-measures" class="group css-bjn8wh"><style data-emotion="css 1j5c61x">.css-1j5c61x{position:absolute;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));opacity:0;transition-property:opacity;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:500ms;left:-1.5rem;top:0.5rem;height:1.25rem;width:1.25rem;}.css-1j5c61x:hover{opacity:1!important;}.group:hover .css-1j5c61x{opacity:0.4;}</style><a href="#key-security-measures" title="#key-security-measures" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Key security measures</h3></div><p>Bitwarden utilizes the following key security measures to protect data stored in Bitwarden:</p><p><strong>End-to-end encryption:</strong> Lock your passwords and private information with end-to-end AES-CBC 256 bit encryption with HMAC authentication, salted hashing, and Key Derivation Functions such as <a href="/help/what-encryption-is-used/#pbkdf2" class="css-1v5663i">PBKDF2 SHA-256</a> or <a href="/help/what-encryption-is-used/#argon2id" class="css-1v5663i">Argon2id</a>. All cryptographic keys are generated and managed by the client on your devices, and all encryption is done locally. See more details <a href="#hashing-key-derivation-and-encryption" class="css-1v5663i">here</a>.</p><p><strong>Zero knowledge encryption:</strong> Bitwarden team members cannot see your passwords. Your data remains end-to-end encrypted with your individual email and master password. Bitwarden never stores and cannot access your master password or your cryptographic keys.</p><p><strong>Secure password sharing:</strong> Bitwarden enables secure sharing and management of sensitive data with users across an entire organization. A combination of asymmetric and symmetric encryption protects sensitive information as it is shared.</p><p><strong>Open source and source available code: </strong>The source code for all Bitwarden software products is hosted on <a href="https://github.com/bitwarden/" target="_blank" rel="noreferrer" class="css-1v5663i">GitHub</a> and we welcome everyone to review, audit, and contribute to the Bitwarden codebase. Bitwarden source code is audited by reputable third-party security auditing firms as well as independent security researchers. Additionally, the <a href="https://hackerone.com/bitwarden?type=team&view_policy=true" target="_blank" rel="noreferrer" class="css-1v5663i">Bitwarden Vulnerability Disclosure Program</a> enlists the help of the hacker community at HackerOne to make Bitwarden more secure.</p><p><strong>Privacy by design:</strong> Bitwarden stores all of your logins in an encrypted vault that syncs across all of your devices. Since it’s fully encrypted before it ever leaves your device, only you have access to your data. Not even the team at Bitwarden can read your data (even if we wanted to).</p><p><strong>Security Auditing:</strong> Third-party security reviews and assessments of applications and/or the platform are performed at a minimum of once per year.</p><p><strong>Compliance:</strong> Bitwarden complies with AICPA SOC2 Type 2 / Data Privacy Framework, GDPR, and CCPA regulations.<a class="css-1v5663i" href="/help/is-bitwarden-audited/"> Learn more</a>.</p><div id="security-tools-for-users" class="group css-bjn8wh"><a href="#security-tools-for-users" title="#security-tools-for-users" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Security tools for users</h3></div><p>The following tools are provided by Bitwarden, and must be acted on by individual users and businesses, to optimize account protection and lockout avoidance:</p><h4>Master passwords</h4><p>User data protection in Bitwarden begins the moment a user creates an account and a master password. A master password is the token a user uses to access their vault, where sensitive data is stored. Users should create their accounts with a strong master password and Bitwarden includes a password strength meter as a guide to help users do so:</p><style data-emotion="css 15ut44o">.css-15ut44o{margin-bottom:1.5rem;margin-top:0.5rem;break-inside:avoid;}.css-15ut44o:not(:has(svg)){width:-webkit-fit-content;width:-moz-fit-content;width:fit-content;}</style><figure class="css-15ut44o"><img alt="Password strength meter" id="4bdebe51-db46-520a-80b7-6f202c5383ab" height="209" width="619" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/6Nopwp0Wbr6FmfQBfzhAGb/e80b52613f70186f491e629cc7906c91/Screenshot_2024-04-01_at_9.41.44_AM.png?_a=DAJAUVWIZAA0"/><style data-emotion="css 1uvlm5q">.css-1uvlm5q{margin-left:auto;margin-right:auto;margin-top:0.5rem;width:-webkit-fit-content;width:-moz-fit-content;width:fit-content;max-width:24rem;text-align:center;font-size:0.75rem;line-height:1rem;font-style:italic;--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}</style><figcaption class="css-1uvlm5q"><cite>Password strength meter</cite></figcaption></figure><p>Users are warned when they try to sign up with a weak master password, and are also given the option to check known data breaches for the master password using an integration with <a href="https://haveibeenpwned.com/FAQs" target="_blank" rel="noreferrer" class="css-1v5663i">Have I Been Pwned (HIBP)</a>:</p><figure class="css-15ut44o"><img alt="Weak or exposed master password" id="cbf87790-78ac-56c2-b7da-02ffc0eb7aff" height="321" width="619" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/2fc9uAmERxfK7QEkFzeeO0/0fbe2a9b1d207950a2d30358f904c405/Screenshot_2024-04-01_at_9.50.46_AM.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>Weak or exposed master password</cite></figcaption></figure><p><strong>It is very important that users never forget their master passwords.</strong> Master passwords are:</p><style data-emotion="css 7ayk8z">.css-7ayk8z{margin-bottom:1rem;margin-left:1.25rem;padding-left:0px;}</style><ul class="css-7ayk8z"><style data-emotion="css 7c8h9w">.css-7c8h9w{position:relative;}.css-7c8h9w p{margin-bottom:0.5rem;}.css-7c8h9w.custom-list-icon{list-style-type:none;}</style><li class=" css-7c8h9w"><p>Cleared from memory after usage.</p></li><li class=" css-7c8h9w"><p>Never transmitted over the internet to Bitwarden servers. </p></li><li class=" css-7c8h9w"><p>Unable to be seen, read, or reverse engineered by anyone at Bitwarden.</p></li></ul><p>Because of this, and the fact that your data is fully encrypted and/or hashed before ever leaving your local device, forgetting a master password <strong>will</strong> result in a user being locked out of their account unless they have emergency access or account recovery active, both of which will be covered later in this paper.</p><style data-emotion="css 1nb7w71">.css-1nb7w71{margin-bottom:1rem;break-inside:avoid-page;border-radius:1rem;border-width:1px;border-left-width:4px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;--tw-border-opacity:1;border-left-color:rgb(21 128 61 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}</style><div class="group css-1nb7w71"><style data-emotion="css sqnlmf">.css-sqnlmf{margin-bottom:0.5rem;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;font-size:1.5rem;line-height:2rem;font-weight:500;text-transform:capitalize;--tw-text-opacity:1;color:rgb(21 128 61 / var(--tw-text-opacity));}</style><h5 class="css-sqnlmf"><style data-emotion="css 12khd1j">.css-12khd1j{margin-right:0.25rem;font-family:bwi-font;}</style><span class="css-12khd1j"></span>tip</h5><section id="6JS6juyKL14NAi2JUcri1f"><p>Users can change their master password from the Bitwarden web app. <a href="/help/master-password/#change-master-password" class="css-1v5663i">Learn how</a>.</p></section></div><h4>Alternative log in methods</h4><p>Bitwarden clients offer the following alternative methods of authentication. Some of these methods may also be used for decryption on log in:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p><strong>Log in with device</strong>: Initiate an authentication request from a Bitwarden client and complete authentication by approving the request on a device you're already logged in to. <a class="css-1v5663i" href="/help/log-in-with-device/">Learn how it works</a>.</p></li><li class=" css-7c8h9w"><p><strong>Log in with passkeys</strong>: Use a passkey to log in to a Bitwarden client and, if the passkey is PRF-capable, use it to decrypt your vault data. <a class="css-1v5663i" href="/help/login-with-passkeys/">Learn how it works</a>.</p></li><li class=" css-7c8h9w"><p><strong>SSO with trusted devices</strong>: SSO with trusted devices allows users to authenticate using SSO and decrypt their vault using a device-stored encryption key, eliminating the need to enter a master password. <a class="css-1v5663i" href="/help/about-trusted-devices/">Learn how it works</a>.</p></li></ul><h4>Two-step login</h4><p>Two-step login (also called "two-factor authentication" or "2FA") is an extra layer of security for online accounts, designed to protect access to Bitwarden even if someone has the master password. When two-step login is active, users are required to complete a secondary step while logging into Bitwarden, like using a <a class="css-1v5663i" href="/help/setup-two-step-login-fido/">FIDO2 security key</a> or an <a class="css-1v5663i" href="/help/setup-two-step-login-authenticator/">authenticator app</a> to confirm the login attempt. As a best practice, <strong>Bitwarden recommends all users activate and use two-step login</strong>.</p><p>Bitwarden provides users a <a class="css-1v5663i" href="/help/two-step-recovery-code/">recovery code</a> that they can use to turn off two-step login in the event a secondary device is lost, for example if a YubiKey goes missing. <strong>Users should retrieve and save their recovery code immediately after activating the feature</strong>, as Bitwarden employees and systems have no way of deactivating two-step login on users' behalf.</p><p>Learn more about the <a class="css-1v5663i" href="/help/setup-two-step-login/">available two-step login methods</a>, using <a href="/help/setup-two-step-login/#using-multiple-methods" class="css-1v5663i">multiple methods</a>, and what to do in the event of a <a class="css-1v5663i" href="/help/lost-two-step-device/">lost secondary device</a>.</p><h4>Emergency access</h4><p>Premium users, including members of paid organizations (Families, Teams, or Enterprise) can <a class="css-1v5663i" href="/help/emergency-access/">designate trusted emergency contacts</a> who may request access to their vault in cases of emergency. Trusted emergency contacts can be assigned either view-only or takeover access to users' accounts.</p><p>Emergency access uses asymmetric encryption to allow users to give a trusted emergency contact permission to access vault data in a zero knowledge environment:</p><style data-emotion="css 1n1gv3m">.css-1n1gv3m{margin-bottom:1rem;break-inside:avoid-page;border-radius:1rem;border-width:1px;border-left-width:4px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;--tw-border-opacity:1;border-left-color:rgb(23 93 220 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}</style><div class="group css-1n1gv3m"><style data-emotion="css mreroh">.css-mreroh{margin-bottom:0.5rem;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;font-size:1.5rem;line-height:2rem;font-weight:500;text-transform:capitalize;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}</style><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="6AIDXvqstFQZi3TBw1xldg"><p>The following information references encryption key names and processes that are covered in the <a href="#hashing-key-derivation-and-encryption" class="css-1v5663i">Hashing, key derivation, and encryption</a> section. Consider reading that section first.</p></section></div><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>A Bitwarden user (the grantor) invites another Bitwarden user to become a trusted emergency contact (the grantee). The invitation (valid for only five days) specifies a user access level and includes a request for the grantee's <strong>RSA Public Key</strong>.</p></li><li class=" css-7c8h9w"><p>Grantee is notified of the invitation via email and accepts the invitation to become a trusted emergency contact. On acceptance, the grantee's <strong>RSA Public Key</strong> is stored with the user record.</p></li><li class=" css-7c8h9w"><p>Grantor is notified of the invitation's acceptance via email and confirms the grantee as their trusted emergency contact. On confirmation, the grantor's <strong>User Symmetric Key</strong> is encrypted using the grantee's <strong>RSA Public Key</strong> and stored with the invitation. Grantee is notified of confirmation.</p></li><li class=" css-7c8h9w"><p>An emergency occurs, resulting in grantee requiring access to grantor's vault. Grantee submits a request for emergency access.</p></li><li class=" css-7c8h9w"><p>Grantor is notified of the request via email. The grantor may manually approve the request at any time, otherwise the request is bound by a grantor-specified wait time. When the request is approved or the wait time lapses, the <strong>Public Key-encrypted User Symmetric Key</strong> is delivered to the grantee for decryption with the grantee's <strong>RSA Private Key</strong>.</p></li><li class=" css-7c8h9w"><p>Depending on the specified user access level, the grantee will either:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p>Obtain view/read access to items in the grantor's vault.</p></li><li class=" css-7c8h9w"><p>Be asked to create a new master password for the grantor's vault.</p></li></ul></li></ol><h4>Account recovery</h4><p><a class="css-1v5663i" href="/help/account-recovery/">Account recovery</a> allows designated administrators of Enterprise organizations to recover member accounts and restore access in the event that an employee forgets their master password. Businesses may also wish to use account recovery to reclaim ownership of a member's account when an employment relationship is ended.</p><div class="group css-1n1gv3m"><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="6AIDXvqstFQZi3TBw1xldg"><p>The following information references encryption key names and processes that are covered in the <a href="#hashing-key-derivation-and-encryption" class="css-1v5663i">Hashing, key derivation, and encryption</a> section. Consider reading that section first.</p></section></div><p>When an organization member enrolls in account recovery, that user's account encryption key (a.k.a. <strong>User Symmetric Key</strong>) is encrypted with the organization's RSA Public Key. The result is stored as the <strong>Account Recovery Key</strong>.</p><p>When a recovery action is taken:</p><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>The organization <strong>RSA Private Key</strong> is decrypted with the <strong>Organization Symmetric Key</strong>.</p></li><li class=" css-7c8h9w"><p>The user's <strong>Account Recovery Key</strong> is decrypted with the decrypted <strong>RSA Private Key</strong>, resulting in the <strong>User Symmetric Key</strong> (referred to as "account encryption key" in-product).</p></li><li class=" css-7c8h9w"><p>The <strong>User Symmetric Key</strong> is encrypted with a new <strong>Master Key</strong> and a new <strong>Master Password Hash</strong> is seeded from the new master password, both the <strong>Master Key-encrypted User Symmetric Key</strong> and the <strong>Master Password Hash</strong> replace pre-existing server-side values.</p></li><li class=" css-7c8h9w"><p>The user's <strong>User Symmetric Key</strong> is encrypted with the organization's <strong>RSA Public Key</strong>, replacing the previous <strong>Account Recovery Key</strong> with a new one.</p></li></ol><div id="hashing-key-derivation-and-encryption" class="group css-bjn8wh"><a href="#hashing-key-derivation-and-encryption" title="#hashing-key-derivation-and-encryption" class="css-1oqman9"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h2>Hashing, key derivation, and encryption</h2></div><p>This section will cover the cryptographic processes that are implemented when a user creates a Bitwarden account and subsequently logs in to access their data:</p><div id="account-creation" class="group css-bjn8wh"><a href="#account-creation" title="#account-creation" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Account creation</h3></div><p>When an account is created, Bitwarden uses Password-Based Key Derivation Function 2 (PBKDF2) with 600,000 iteration rounds to stretch the user's master password with a salt of the user's email address.</p><div class="group css-1n1gv3m"><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="1LSw3NFael7w5fDHeQKQcw"><p>Though user accounts are initiated with PBKDF2, users may elect to change their key derivation function to <a href="/help/what-encryption-is-used/#argon2id" class="css-1v5663i">Argon2id</a> after the account has been created. Learn how to <a href="/help/kdf-algorithms/#changing-kdf-algorithm" class="css-1v5663i">change the KDF algorithm</a>.</p></section></div><p>The resulting salted value is the 256-bit <strong>Master Key</strong>. The <strong>Master Key</strong> is then again stretched to 512-bits using HMAC-based Extract-and-Expand Key Derivation Function (HKDF), resulting in the <strong>Stretched Master Key</strong>. The <strong>Master Key</strong> and <strong>Stretched Master Key</strong> are never stored on or transmitted to Bitwarden servers:</p><figure class="css-15ut44o"><img alt="Password-based key derivation" id="b134a8ee-a0ba-5657-be29-88e39f45a200" height="540" width="960" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/6nm36M2VAPwxdwlD8HoR2N/0b39079292cb7c80ac5147ffa5ab36eb/whitepaper-1.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>Password-based key derivation</cite></figcaption></figure><p>Next, a 512-bit <strong>Generated Symmetric Key</strong> and 128-bit <strong>Initialization Vector</strong> are created using a Cryptographically Secure Pseudorandom Number Generator (CSPRNG). The <strong>Generated Symmetric Key</strong> is encrypted with AES-256 bit encryption using the <strong>Stretched Master Key</strong> and <strong>Initialization Vector</strong>. The result is called the <strong>Protected Symmetric Key</strong>, and is the main key associated with the user. The <strong>Protected Symmetric Key</strong> is sent to the Bitwarden server upon account creation and sent back to Bitwarden client applications upon syncing.</p><p>An asymmetric key pair is also created when the user registers their account. This <strong>Generated RSA Key Pair</strong> is used <a href="#when-you-create-an-organization" class="css-1v5663i">when the user creates an organization</a> and in processes like <a class="css-1v5663i" href="/help/emergency-access/">emergency access</a> that can be used to share data between users.</p><p>Finally, a <strong>Master Password Hash</strong> is generated using PBKDF-SHA256 with a payload of the <strong>Master Key</strong> and with a salt of the master password. The <strong>Master Password Hash</strong> is sent to the Bitwarden server upon account creation and login, and used to authenticate the user account. Once reaching the server, the <strong>Master Password Hash</strong> is hashed again using PBKDF2-SHA256 with a random salt and 600,000 iterations:</p><figure class="css-15ut44o"><img alt="Bitwarden password hashing, key derivation, and encryption " id="8c02d028-4fc9-5437-bc69-140414ea9a9d" height="540" width="960" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/1rLMJoZFka4Per5lIyuMv9/33bc3f62358591bfe4cb86d3c3375535/whitepaper-acctcreate.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>Bitwarden password hashing, key derivation, and encryption </cite></figcaption></figure><div id="authentication-and-decryption" class="group css-bjn8wh"><a href="#authentication-and-decryption" title="#authentication-and-decryption" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Authentication and decryption</h3></div><p>Users are required to enter an email address and, typically, a master password in order to <a href="https://vault.bitwarden.com/#/" target="_blank" rel="noreferrer" class="css-1v5663i">log in</a> to a Bitwarden account. </p><p>When they do so, Bitwarden uses Password-Based Key Derivation Function 2 (PBKDF2) with a default of 600,000 iteration rounds to stretch the master password with a salt of the account email address. The resulting salted value is the 256-bit <strong>Master Key</strong>. A <strong>Master Password Hash</strong>, generated using PBKDF-SHA256 with a payload of the <strong>Master Key</strong> and with a salt of the master password, is sent to the server for authentication by comparing the hash to that which is stored server-side.</p><div class="group css-1n1gv3m"><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="1LSw3NFael7w5fDHeQKQcw"><p>Though user accounts are initiated with PBKDF2, users may elect to change their key derivation function to <a href="/help/what-encryption-is-used/#argon2id" class="css-1v5663i">Argon2id</a> after the account has been created. Learn how to <a href="/help/kdf-algorithms/#changing-kdf-algorithm" class="css-1v5663i">change the KDF algorithm</a>.</p></section></div><p>Concurrently, the <strong>Master Key</strong> is stretched to 512-bits in length using HMAC-based Extract-and-Expand Key Derivation Function (HKDF), resulting in the <strong>Stretched Master Key</strong>. The <strong>Protected Symmetric Key</strong>, which is stored server-side and retrieved by the client, is decrypted using this <strong>Stretched Master Key</strong>. The resultant <strong>Symmetric Key</strong> is used by the client to decrypt vault data. This decryption is done entirely on the Bitwarden client. Master passwords and <strong>Stretched Master Keys</strong> are never stored on or transmitted to Bitwarden servers:</p><figure class="css-15ut44o"><img alt="An overview of user login " id="00b14556-81d8-5207-8adb-0db8288c8ba4" height="540" width="960" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/lrLsAOcvBsN1vaYAaZQKt/a73a6f46d55cf705423aa7a6a12b7f8a/whitepaper-login.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>An overview of user login </cite></figcaption></figure><p>Bitwarden does not keep the master password itself stored locally or in-memory on the Bitwarden client. Your account encryption key (<strong>User</strong> <strong>Symmetric Key</strong>) is kept in memory while the app is unlocked in order to decrypt vault data. </p><p>When the Bitwarden client is locked, your encryption keys and vault data are purged from memory. After a certain time frame of inactivity on the lock screen, we reload the application processes to ensure that any leftover managed memory addresses are also purged. We do our best to ensure that any data that may be in memory for the application to function is only held in memory for as long as you need it and that memory is cleaned up appropriately whenever the application is locked. We consider the Bitwarden application to be completely safe while in a locked state.</p><div id="rotating-the-account-encryption-key" class="group css-bjn8wh"><a href="#rotating-the-account-encryption-key" title="#rotating-the-account-encryption-key" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Rotating the account encryption key</h3></div><p>During a password change operation, users have the option to rotate (i.e. change) their <strong>User Symmetric Key</strong> (referred to as "account encryption key" in-product). Rotating this key is a good idea if users believe that their previous master password was compromised or that the data they've stored in Bitwarden was stolen from one of their devices.</p><style data-emotion="css 1radur6">.css-1radur6{margin-bottom:1rem;break-inside:avoid-page;border-radius:1rem;border-width:1px;border-left-width:4px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;--tw-border-opacity:1;border-left-color:rgb(251 146 60 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}</style><div class="group css-1radur6"><style data-emotion="css 1euk51h">.css-1euk51h{margin-bottom:0.5rem;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;font-size:1.5rem;line-height:2rem;font-weight:500;text-transform:capitalize;--tw-text-opacity:1;color:rgb(251 146 60 / var(--tw-text-opacity));}</style><h5 class="css-1euk51h"><span class="css-12khd1j"></span>warning</h5><section id="xFmjl98tnaAItxngVBgVZ"><p>Rotating the account’s encryption key is a sensitive operation, which is why it is not a default option when changing a master password. A key rotation involves generating a new, random encryption key for the account and <strong>re-encrypting all vault data</strong> using this new key. See additional details in <a class="css-1v5663i" href="/help/account-encryption-key/">this article</a>.</p></section></div><div id="variations" class="group css-bjn8wh"><a href="#variations" title="#variations" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Variations</h3></div><p>This section will cover variations to encryption processes when users are using Log in with device, Log in with passkeys, or SSO with trusted devices.</p><h4>Log in with device</h4><p>When logging in with a device is initiated:</p><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>The initiating client sends a request to the Bitwarden server, which includes the account email address, a unique <strong>Auth-request Public Key</strong>ª, and an access code.</p></li><li class=" css-7c8h9w"><p>Registered devices, meaning mobile or desktop apps that are logged in and have a <a class="css-1v5663i" href="/help/administrative-data/">device-specific GUID</a> stored with the Bitwarden server, are provided the request.</p></li><li class=" css-7c8h9w"><p>When the request is approved, the approving client encrypts the account's <strong>Master Key</strong> and <strong>Master Password Hash</strong> using the <strong>Auth-request Public Key</strong> enclosed in the request.</p></li><li class=" css-7c8h9w"><p>The approving client then sends the <strong>Encrypted Master Key</strong> and <strong>Encrypted Master Password Hash</strong> to the Bitwarden server and the request is marked as fulfilled.</p></li><li class=" css-7c8h9w"><p>The initiating client requests the <strong>Encrypted Master Key</strong> and <strong>Encrypted Master Password Hash</strong> from the Bitwarden server.</p></li><li class=" css-7c8h9w"><p>The initiating client then <strong>locally </strong>decrypts the <strong>Master Key</strong> and <strong>Master Password Hash</strong> using the <strong>Auth-request Private Key</strong>.</p></li><li class=" css-7c8h9w"><p>The initiating client then uses the access code and fulfilled authentication request to authenticate the user with the Bitwarden Identity service.</p></li></ol><p>ª - <strong>Auth-request Public and Private Keys</strong> are uniquely generated for each passwordless login request and only exist for as long as the request does. Requests expire and are purged from the Bitwarden server every 15 minutes if they aren't approved or denied.</p><h4>Log in with passkeys</h4><p>The following describes the mechanics of logging in with passkeys when users' passkeys are set up for encryption. Users may opt to not use their passkeys for encryption instead.</p><p>When a passkey is registered for log in to Bitwarden:</p><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>A <strong>Passkey Public and Private Key Pair</strong> is generated by the authenticator via the WebAuthn API. This key pair, by definition, is what constitutes your passkey. Attestation options, such as what encryption algorithm to use, and provided by Bitwarden to the authenticator.</p></li><li class=" css-7c8h9w"><p>A <strong>PRF Symmetric Key</strong> is generated by the authenticator via the WebAuthn API's PRF extension. This key is derived from an <strong>internal secret</strong> unique to your passkey and a <strong>salt</strong> provided by Bitwarden.</p></li><li class=" css-7c8h9w"><p>A <strong>PRF Public and Private Key Pair</strong> is generated by the Bitwarden client. The PRF public key encrypts your <strong>User Symmetric Key</strong> (referred to as "account encryption key" in-product), which your client will have access to by virtue of being logged in and unlocked, and the resulting <strong>PRF-Encrypted User Symmetric Key</strong> is sent to the server.</p></li><li class=" css-7c8h9w"><p>The <strong>PRF Private Key</strong> is encrypted with the <strong>PRF Symmetric Key</strong> (see Step 2) and the resulting <strong>PRF-Encrypted Private Key</strong> is sent to the server.</p></li><li class=" css-7c8h9w"><p>Your client sends data to Bitwarden servers to create a new passkey credential record for your account. If your passkey is registered with support for vault encryption and decryption, this record includes:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p>The passkey name</p></li><li class=" css-7c8h9w"><p>The Passkey Public Key</p></li><li class=" css-7c8h9w"><p>The PRF Public Key</p></li><li class=" css-7c8h9w"><p>The PRF-Encrypted User Symmetric Key</p></li><li class=" css-7c8h9w"><p>The PRF-Encrypted Private Key</p></li></ul></li></ol><p>Your <strong>Passkey Private Key</strong>, which is required to accomplish authentication, only ever leaves the client in an encrypted format.</p><p>When a passkey is used to log in and, specifically, to decrypt your vault data:</p><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>Using WebAuthn API public key cryptography, your authentication request is asserted and affirmed.</p></li><li class=" css-7c8h9w"><p>Your <strong>PRF-Encrypted User Symmetric Key</strong> (referred to as "account encryption key" in-product) and <strong>PRF-Encrypted Private Key</strong> are sent from the server to your client.</p></li><li class=" css-7c8h9w"><p>Using the same <strong>salt</strong> provided by Bitwarden and the <strong>internal secret</strong> unique to your passkey, the <strong>PRF Symmetric Key</strong> is re-created locally.</p></li><li class=" css-7c8h9w"><p>The <strong>PRF Symmetric Key</strong> is used to decrypt your <strong>PRF-Encrypted Private Key</strong>, resulting in your <strong>PRF Private Key</strong>.</p></li><li class=" css-7c8h9w"><p>The <strong>PRF Private Key</strong> is used to decrypt your <strong>PRF-Encrypted User Symmetric Key</strong>, resulting in your <strong>User Symmetric Key</strong>. This is used to decrypt your vault data.</p></li></ol><h4>SSO with trusted devices</h4><p>The following sections describe encryption processes and key exchanges that occur during different trusted devices procedures:</p><div class="css-afq9iq"><style data-emotion="css 1hlh4wl">.css-1hlh4wl{margin-bottom:1px;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;list-style-type:none;-webkit-box-flex-wrap:wrap;-webkit-flex-wrap:wrap;-ms-flex-wrap:wrap;flex-wrap:wrap;border-radius:0.375rem;}@media (min-width: 1024px){.css-1hlh4wl{margin-bottom:-0.125rem;border-radius:0px;}}</style><ul role="tablist" class="css-1hlh4wl"><li><style data-emotion="css fs55wj">.css-fs55wj{margin-bottom:0.125rem;margin-right:3px;margin-top:1px;border-top-left-radius:0.375rem;border-top-right-radius:0.375rem;border-width:2px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));border-bottom-color:rgb(207 212 218 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;font-size:0.875rem;line-height:1.25!important;--tw-text-opacity:1;color:rgb(40 42 49 / var(--tw-text-opacity));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));font-weight:500;}@media (min-width: 1024px){.css-fs55wj{margin-bottom:0px;margin-top:0px;border-bottom-color:transparent;font-size:1rem;line-height:1.5rem;}}</style><button type="button" role="tab" data-id="R1fqjael_tab_0" id="tab-onboarding-2VYGcnxLwmYH4J977Xd38H" aria-selected="true" aria-controls="R1fqjael_tabpanel_0" class="css-fs55wj">Onboarding</button></li><li><style data-emotion="css 167ogfy">.css-167ogfy{margin-bottom:0.125rem;margin-right:3px;margin-top:1px;border-top-left-radius:0.375rem;border-top-right-radius:0.375rem;border-width:2px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));border-bottom-color:rgb(207 212 218 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;font-size:0.875rem;line-height:1.25!important;--tw-text-opacity:1;color:rgb(40 42 49 / var(--tw-text-opacity));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;--tw-bg-opacity:1;background-color:rgb(207 212 218 / var(--tw-bg-opacity));font-weight:400;}@media (min-width: 1024px){.css-167ogfy{margin-bottom:0px;margin-top:0px;border-bottom-color:transparent;font-size:1rem;line-height:1.5rem;}}.css-167ogfy:hover{--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}</style><button type="button" role="tab" data-id="R1fqjael_tab_1" id="tab-logging-in-2VYGcnxLwmYH4J977Xd38H" aria-selected="false" aria-controls="R1fqjael_tabpanel_1" tabindex="-1" class="css-167ogfy">Logging in</button></li><li><button type="button" role="tab" data-id="R1fqjael_tab_2" id="tab-approving-2VYGcnxLwmYH4J977Xd38H" aria-selected="false" aria-controls="R1fqjael_tabpanel_2" tabindex="-1" class="css-167ogfy">Approving</button></li><li><button type="button" role="tab" data-id="R1fqjael_tab_3" id="tab-key-rotation-2VYGcnxLwmYH4J977Xd38H" aria-selected="false" aria-controls="R1fqjael_tabpanel_3" tabindex="-1" class="css-167ogfy">Key rotation</button></li></ul><style data-emotion="css 1rwru36">.css-1rwru36{border-radius:0.25rem;border-width:2px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));padding:1rem;display:block;}</style><div role="tabpanel" id="panel-tab-onboarding-2VYGcnxLwmYH4J977Xd38H" aria-labelledby="R1fqjael_tab_0" class="css-1rwru36"><p>When a new user joins an organization, an <strong>Account Recovery Key</strong> (<a class="css-1v5663i" href="/help/account-recovery/">learn more</a>) is created by encrypting their account encryption key with the <strong>Organization Public Key</strong>. Account recovery is required to enable SSO with trusted devices.</p><p>The user is then asked if they want to remember, or trust, the device. When they opt to do so:</p><div aria-owns="rmiz-modal-" data-rmiz=""><div data-rmiz-content="not-found" style="visibility:visible"><figure class="css-15ut44o"><img alt="Create a trusted device" __typename="ContentfulComponentImage" id="8fe5e8e9-59e8-51b1-b826-fe43eb5be4bd" height="540" width="960" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/2o9o8L0JZMvWZYJvfKGMzj/b7cab59682862c8e782331ed6a2ef9d9/td-create.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>Create a trusted device</cite></figcaption></figure></div></div><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>A new <strong>Device Key </strong>is generated by the client. This key never leaves the client.</p></li><li class=" css-7c8h9w"><p>A new RSA key pair, called the <strong>Device Private Key </strong>and <strong>Device Public Key</strong>, is generated by the client.</p></li><li class=" css-7c8h9w"><p>The user's account encryption key is encrypted with the unencrypted <strong>Device Public Key</strong> and the resultant value is sent to the server as the <strong>Public Key-Encrypted User Key</strong>.</p></li><li class=" css-7c8h9w"><p>The <strong>Device Public Key </strong>is encrypted with the user's account encryption key and the resultant value is sent to the server as the <strong>User Key-Encrypted Public Key</strong>.</p></li><li class=" css-7c8h9w"><p>The <strong>Device Private Key</strong> is encrypted with the first <strong>Device Key</strong> and the resultant value is sent to the server as the <strong>Device Key-Encrypted Private Key</strong>.</p></li></ol><p>The <strong>Public Key-Encrypted User Key</strong> and <strong>Device Key-Encrypted Private Key</strong> will, crucially, be sent from server to client when a login is initiated.</p><p>The <strong>User Key-Encrypted Public Key</strong> will be used should the user need to rotate their account encryption key.</p></div><style data-emotion="css 1t3i3r8">.css-1t3i3r8{border-radius:0.25rem;border-width:2px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));padding:1rem;display:none;}</style><div role="tabpanel" id="panel-tab-logging-in-2VYGcnxLwmYH4J977Xd38H" aria-labelledby="R1fqjael_tab_1" class="css-1t3i3r8"><p>When a user authenticates with SSO on an already-trusted device:</p><div aria-owns="rmiz-modal-" data-rmiz=""><div data-rmiz-content="not-found" style="visibility:visible"><figure class="css-15ut44o"><img alt="Use a trusted device" __typename="ContentfulComponentImage" id="f7811868-2b47-5210-92d7-13a1d2fc6019" height="540" width="960" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/61SSa6ITlRaICIUoCzEiVp/746cf3ba3005b4118d20319e894c47c7/td-use.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>Use a trusted device</cite></figcaption></figure></div></div><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>The user's <strong>Public Key-Encrypted User Key</strong>, which is an encrypted version of the account encryption key used to decrypt vault data, is sent from the server to the client.</p></li><li class=" css-7c8h9w"><p>The user's <strong>Device Key-Encrypted Private Key</strong>, the unencrypted version of which is required to decrypt the <strong>Public Key-Encrypted User Key</strong>, is sent from the server to the client.</p></li><li class=" css-7c8h9w"><p>The client decrypts the <strong>Device Key-Encrypted Private Key </strong>using the <strong>Device Key</strong>, which never leaves the client.</p></li><li class=" css-7c8h9w"><p>The now-unencrypted <strong>Device Private Key </strong>is used to decrypt the <strong>Public Key-Encrypted User Key</strong>, resulting in the user's account encryption key.</p></li><li class=" css-7c8h9w"><p>The user's account encryption key decrypts vault data.</p></li></ol></div><div role="tabpanel" id="panel-tab-approving-2VYGcnxLwmYH4J977Xd38H" aria-labelledby="R1fqjael_tab_2" class="css-1t3i3r8"><p>When a user authenticates with SSO and opts to decrypt their vault with an un-trusted device (i.e. a <strong>Device Symmetric Key </strong>does not exist on that device), they are required to choose a method of approving the device and optionally trusting it for future use without further approval. What happens next depends on the selected option:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p><strong>Approve from another device</strong>: </p><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>The process documented <a href="/help/log-in-with-device/#how-it-works" class="css-1v5663i">here</a> is triggered, resulting in the client having obtained and decrypted the account encryption key.</p></li><li class=" css-7c8h9w"><p>The user can now decrypt their vault data with the decrypted account encryption key. If they have chosen to trust the device, trust is established with the client as described in the <strong>Onboarding </strong>tab.</p></li></ol></li><li class=" css-7c8h9w"><p><strong>Request admin approval</strong>:</p><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>The initiating client POSTs a request, which includes the account email address, a unique <strong>auth-request public key</strong>ª, and an access code, to an Authentication Request table in the Bitwarden database.</p></li><li class=" css-7c8h9w"><p>Administrators can <a class="css-1v5663i" href="/help/approve-a-trusted-device/">approve or deny the request</a> on the Device approvals page.</p></li><li class=" css-7c8h9w"><p>When the request is approved by an administrator, the approving client encrypts the user's account encryption key using the <strong>auth-request public key</strong> enclosed in the request.</p></li><li class=" css-7c8h9w"><p>The approving client then PUTs the encrypted account encryption key to the Authentication Request record and marks the request fulfilled.</p></li><li class=" css-7c8h9w"><p>The initiating client GETs the encrypted account encryption key and <strong>locally </strong>decrypts it using the <strong>auth-request private key</strong>.</p></li><li class=" css-7c8h9w"><p>Using the decrypted account encryption key, trust is established with the client as described in the <strong>Onboarding </strong>tab.</p></li></ol></li></ul><p>ª - <strong>Auth-request public</strong> and <strong>private keys</strong> are uniquely generated for each passwordless login request and only exist for as long as the request does. Unapproved requests will expire after 1 week.</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p><strong>Approve with master password</strong>: </p><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>The users's account encryption key is retrieved and decrypted as documented in the <a href="#authentication-and-decryption" class="css-1v5663i">Authentication and decryption</a> section of the security whitepaper.</p></li><li class=" css-7c8h9w"><p>Using the decrypted account encryption key, trust is established with the client as described in the <strong>Onboarding </strong>tab.</p></li></ol></li></ul></div><div role="tabpanel" id="panel-tab-key-rotation-2VYGcnxLwmYH4J977Xd38H" aria-labelledby="R1fqjael_tab_3" class="css-1t3i3r8"><style data-emotion="css b9ebvj">.css-b9ebvj{margin-bottom:1rem;break-inside:avoid-page;border-radius:1rem;border-width:1px;border-left-width:4px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;--tw-border-opacity:1;border-left-color:rgb(23 93 220 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));}</style><div class="group css-b9ebvj"><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="72qnrOXGbWGx2Qn33BaIsL"><p>Only users who have a master password can rotate their <a class="css-1v5663i" href="/help/account-encryption-key/">account encryption key</a>. <a href="/help/about-trusted-devices/#impact-on-master-passwords" class="css-1v5663i">Learn more</a>.</p></section></div><p>When a user rotates their <a class="css-1v5663i" href="/help/account-encryption-key/">account encryption key</a>, during the normal rotation process:</p><ol class="css-7ayk8z"><li class=" css-7c8h9w"><p>The <strong>User-Key Encrypted Public Key</strong> is sent from the server to the client, and subsequently decrypted with the old account encryption key (a.k.a. <strong>User Key</strong>), resulting in the <strong>Device Public Key</strong>.</p></li><li class=" css-7c8h9w"><p>The user's new account encryption key is encrypted with the unencrypted <strong>Device Public Key</strong> and the resultant value is sent to the server as the new <strong>Public Key-Encrypted User Key</strong>.</p></li><li class=" css-7c8h9w"><p>The <strong>Device Public Key </strong>is encrypted with the user's new account encryption key and the resultant value is sent to the server as the new <strong>User Key-Encrypted Public Key</strong>.</p></li><li class=" css-7c8h9w"><p>Trusted device encryption keys for all other devices that are persisted to server storage are cleared for the user. This leaves only the three required keys (<strong>Public Key-Encrypted User Key</strong>, <strong>User Key-Encrypted Public Key</strong>, and <strong>Device Key-Encrypted Private Key</strong> which was not changed by this process) for that single device persisted to the server.</p></li></ol><p>Any now-untrusted client will be required to re-established trust through one of the methods described in the <strong>Approving </strong>tab.</p><p></p><p></p></div></div><div id="sharing-data-between-users" class="group css-bjn8wh"><a href="#sharing-data-between-users" title="#sharing-data-between-users" class="css-1oqman9"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h2>Sharing data between users</h2></div><p>Collaboration is one of the leading benefits of using a password manager. In order to enable sharing, you need to first create an <a class="css-1v5663i" href="/help/about-organizations/">organization</a>. A Bitwarden organization is an entity that relates users together that want to share items. An organization could be a family, team, company, or any other type of group that desires to share data.</p><p>This section will cover the cryptographic processes that are implemented to ensure a secure, end-to-end, zero knowledge encryption method for sharing data as well as the additional security measures implemented to ensure control of your data:</p><figure class="css-15ut44o"><img alt="Organization key protection and exchange" id="27e50aac-7901-5125-8fe0-4ada9a932078" height="540" width="960" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/1f8B41wwuVVuaJP8NjI8jy/c059ab0fa4a645eb14973571c7669128/whitepaper-orgcloseup.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>Organization key protection and exchange</cite></figcaption></figure><div id="when-you-create-an-organization" class="group css-bjn8wh"><a href="#when-you-create-an-organization" title="#when-you-create-an-organization" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>When you create an organization</h3></div><p>When you create an organization, a Cryptographically Secure Pseudorandom Number Generator (CSPRNG) is used to generate the <strong>Organization Symmetric Key</strong>. This key is what's used to encrypt vault data owned by the organization, therefore sharing data with organization members requires securely providing access to the <strong>Organization Symmetric Key</strong>. The unprotected <strong>Organization Symmetric Key</strong> is never stored on Bitwarden servers.</p><p>As soon as the <strong>Organization Symmetric Key</strong> is created, RSA-OAEP is used to encrypt it with the organization creator's <strong>RSA Public Key</strong>.</p><div class="group css-1n1gv3m"><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="6H7JJXpzgbnJ31cW1RjSwA"><p>A <strong>RSA Key Pair</strong> is generated for every user upon account creation, regardless of whether they are an organization member or not, so this key will already exist prior to organization creation. The <strong>RSA Private Key</strong>, the use for which is described below, is stored encrypted with the user's <strong>User Symmetric Key</strong>, so users must be fully logged in to gain access to it.</p></section></div><p>The resultant value of this operation is referred to as the <strong>Protected Organization Symmetric Key</strong> and is sent to Bitwarden servers.</p><p>When the organization creator, or any organization member, logs in to their account, the client application uses the decrypted <strong>RSA Private Key</strong> to decrypt the <strong>Protected Organization Symmetric Key</strong>, resulting in the <strong>Organization Symmetric Key</strong>. Using this, organization-owned vault data is decrypted locally.</p><div id="when-users-join-an-organization" class="group css-bjn8wh"><a href="#when-users-join-an-organization" title="#when-users-join-an-organization" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>When users join an organization</h3></div><p>The process for subsequent users joining an organization is quite similar, however some differences are worth noting.</p><p>First, an established member of the organization, specifically someone with permission to onboard other users, confirms the user to the organization. This established member, by virtue of having already logged in to their account and gone through the organization data decryption process described in the previous section, has access to the decrypted <strong>Organization Symmetric Key</strong>.</p><p>So, when the new user is confirmed, the established member's client reaches out to Bitwarden servers, retrieves the new user's <strong>RSA Public Key</strong>, which is stored on Bitwarden servers at the time of account creation, and encrypts the decrypted <strong>Organization Symmetric Key</strong> with it. This results in a new <strong>Protected Organization Symmetric Key</strong> that is sent to Bitwarden servers and stored for the new member.</p><div class="group css-1n1gv3m"><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="6Yoxe7AbJXKaNo2t38a5p7"><p>Each <strong>Protected Organization Symmetric Key</strong> is unique to its user, but each will decrypt to the same required <strong>Organization Symmetric Key</strong> when decrypted with its specific user's <strong>RSA Private Key</strong>.</p></section></div><p>When the new user logs in to their account, the client application uses the decrypted <strong>RSA Private Key</strong> to decrypt the new <strong>Protected Organization Symmetric Key</strong>, resulting in the raw <strong>Organization Symmetric Key</strong>. Using this, organization-owned vault data is decrypted locally.</p><div id="additional-security-measures" class="group css-bjn8wh"><a href="#additional-security-measures" title="#additional-security-measures" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Additional security measures</h3></div><h4>Access controls, permissions, and roles</h4><p>Bitwarden organizations use collections, projects, and groups to logically group together vault data and users:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p><strong>Collections & projects</strong>: Logically organize your vault data into discrete units to help ensure members are getting access to all and only the resources they need.</p></li><li class=" css-7c8h9w"><p><strong>Groups</strong>: Logically organize your members into discrete units to help ensure that everyone is getting access to everything and only what they need.</p></li><li class=" css-7c8h9w"><p><strong>Member roles</strong>: Assign roles to members to provide them access to the appropriate level of tools within the context of your organization.</p></li><li class=" css-7c8h9w"><p><strong>Permissions</strong>: Designate what actions your members are allowed to take on the vault data they've been granted access to.</p></li></ul><h4>Event logs</h4><p>Event logs contain time-stamped, detailed information about what actions or changes have occurred within an organization. These logs are helpful with researching changes in credentials or configuration and are very useful for audit trail investigation and troubleshooting purposes. Event logs are available for Teams and Enterprise organizations for both Password Manager and Secrets Manager. Learn more about <a class="css-1v5663i" href="/help/event-logs/">event logs</a>.</p><p>Teams and Enterprise organizations may also use the <a class="css-1v5663i" href="/help/public-api/">Bitwarden public API</a> to gather more data for their event logs. </p><h4>SIEM integrations</h4><p>Several Security Information and Event Management (SIEM) integrations are available for Bitwarden:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p><a class="css-1v5663i" href="/help/splunk-siem/">Splunk</a></p></li><li class=" css-7c8h9w"><p><a class="css-1v5663i" href="/help/panther-siem/">Panther</a></p></li><li class=" css-7c8h9w"><p><a class="css-1v5663i" href="/help/elastic-siem/">Elastic</a></p></li></ul><p>For other SIEM systems, a combination of data from the API and CLI may be used to gather data. This process is outlined <a href="/help/event-logs/#siem-and-external-systems-integrations" class="css-1v5663i">here</a>.</p><div id="data-protection" class="group css-bjn8wh"><a href="#data-protection" title="#data-protection" class="css-1oqman9"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h2>Data protection</h2></div><p>This section will cover the measures taken to ensure that data remains secure:</p><div aria-owns="rmiz-modal-" data-rmiz=""><div data-rmiz-content="not-found" style="visibility:visible"><figure class="css-15ut44o"><img alt="Multifactor encryption" __typename="ContentfulComponentImage" id="54a6e6f3-0294-5d8c-8468-78b6f60d5c37" height="540" width="960" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/5hrNLuFuk9laua0zD0zSL/2f9a008c97f9bf98b969e96a85a0a32a/multifactor_encryption__2_.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>Multifactor encryption</cite></figcaption></figure></div></div><div id="how-vault-data-is-encrypted" class="group css-bjn8wh"><a href="#how-vault-data-is-encrypted" title="#how-vault-data-is-encrypted" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>How vault data is encrypted</h3></div><p>All vault data (logins, cards, identities, notes, and secrets) are protected with end-to-end-encryption. Data that you choose to store in Bitwarden is first stored as an object called a Cipher. Ciphers are encrypted locally when a vault item is created, edited, or imported, using a unique, random, 64-byte <strong>Cipher Key</strong>. Each <strong>Cipher Key</strong> is encrypted with either the <strong>User Symmetric Key</strong> or the <strong>Organization Symmetric Key</strong>, depending on whether the item is individually- or organizationally-owned, before being sent to Bitwarden servers. These encryption operations are performed entirely on the Bitwarden client application.</p><p>When a user logs in to Bitwarden, the client gains access to their <strong>User Symmetric Key</strong> by decrypting their <strong>Protected Symmetric Key</strong> using the <strong>Stretched Master Key</strong>. If they're a member of an organization, the client gains access to the <strong>Organization Symmetric Key</strong> through their <strong>RSA Private Key</strong>. With one of these keys, <strong>Cipher Keys</strong> are locally decrypted and the resultant value is used to decrypt individual or organization vault data.</p><p>When a user rotates their account encryption Key, here referred to as their <strong>User Symmetric Key</strong>, each existing <strong>Cipher Key</strong> is re-encrypted with the new <strong>User Symmetric Key</strong>.</p><div class="group css-1n1gv3m"><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="7IKrvy96RitVwCWQi9ickp"><p>In the case of attachments, the <strong>Cipher Key</strong> is used to encrypt the attachment's metadata, specifically the file name and size. The <strong>Cipher Key</strong> is also used to encrypt the <strong>Attachment Key</strong>, which in turn is used to encrypt the attachment data itself.</p></section></div><div id="vault-health-reports" class="group css-bjn8wh"><a href="#vault-health-reports" title="#vault-health-reports" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Vault health reports</h3></div><p>Vault health reports can be used to evaluate the security of the data stored in Bitwarden Password Manager. Reports, for example the Reused Passwords and Weak Passwords reports, are run locally on the Bitwarden client application. This allows offending items to be identified without Bitwarden ever having access to unencrypted versions of this data. Learn more about <a class="css-1v5663i" href="/help/reports/">the available vault health reports</a>.</p><div id="data-protection-in-transit" class="group css-bjn8wh"><a href="#data-protection-in-transit" title="#data-protection-in-transit" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Data protection in transit</h3></div><p>Bitwarden uses TLS/SSL to secure communications between Bitwarden clients and user devices to the Bitwarden cloud. Bitwarden’s TLS implementation uses X.509 certificates for server authentication and key exchange and a strong cipher suite for bulk encryption. Bitwarden servers are configured to reject weak ciphers and protocols.</p><p>Bitwarden also implements HTTP Security headers such as HTTP Strict Transport Security (HSTS), which will force all connections to use TLS. This additional layer of protection with HSTS mitigates the risks of downgrade attacks and misconfiguration.</p><div id="data-protection-at-rest" class="group css-bjn8wh"><a href="#data-protection-at-rest" title="#data-protection-at-rest" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Data protection at rest</h3></div><p>Bitwarden always encrypts and/or hashes your data on your local device before it is sent to the cloud servers for syncing. Bitwarden servers are only used for storing and synchronizing encrypted vault data. It is not possible to get your unencrypted data from the Bitwarden cloud servers. Specifically, Bitwarden uses AES 256-bit encryption as well as <a href="/help/what-encryption-is-used/#pbkdf2" class="css-1v5663i">PBKDF2 SHA-256</a> or <a href="/help/what-encryption-is-used/#argon2id" class="css-1v5663i">Argon2id</a> to secure your data. Passkeys, when stored in the vault, are generated using the ES256 algorithm.</p><p>AES is a standard in cryptography and used by the U.S. government and other government agencies around the world for protecting top-secret data. With proper implementation and a strong encryption key (i.e your master password), AES is considered unbreakable.</p><p><a href="/help/what-encryption-is-used/#pbkdf2" class="css-1v5663i">PBKDF2 SHA-256</a> or <a href="/help/what-encryption-is-used/#argon2id" class="css-1v5663i">Argon2id</a> are used to derive the encryption key from your master password. Then this key is salted and hashed for authenticating with the Bitwarden servers. The default iteration count used with PBKDF2 is 600,000 iterations on the client (this client-side iteration count is configurable from your account settings).</p><div class="group css-1n1gv3m"><h5 class="css-mreroh"><span class="css-12khd1j"></span>note</h5><section id="1LSw3NFael7w5fDHeQKQcw"><p>Though user accounts are initiated with PBKDF2, users may elect to change their key derivation function to <a href="/help/what-encryption-is-used/#argon2id" class="css-1v5663i">Argon2id</a> after the account has been created. Learn how to <a href="/help/kdf-algorithms/#changing-kdf-algorithm" class="css-1v5663i">change the KDF algorithm</a>.</p></section></div><p>The Bitwarden cloud database stores your encrypted vault and is hosted within the secure Microsoft Azure cloud infrastructure. It is configured with an encryption-at-rest technology provided by Azure called Transparent Data Encryption (TDE). TDE performs real-time encryption and decryption of the entire Bitwarden cloud database, associated backup data, and transaction log files when they’re not in-use. Azure handles the encryption keys for TDE, which only authorized Bitwarden server components are able to access. Read more about Azure’s Transparent Data Encryption <a href="https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview?view=azuresql&tabs=azure-portal" target="_blank" rel="noreferrer" class="css-1v5663i">here</a>.</p><p>Additionally, Bitwarden server applications perform their own encryption of sensitive database columns related to your user account. Master password hashes and protected user keys are encrypted on the fly as they move in and out of the Bitwarden cloud database. These column-level encryption operations are performed with keys that Bitwarden manages in a strictly controlled key management service (KMS).</p><p>Learn more: <a class="css-1v5663i" href="/blog/end-to-end-encryption-and-zero-knowledge/">How end-to-end encryption paves the way for zero knowledge</a> and <a class="css-1v5663i" href="/help/what-encryption-is-used/">What encryption is being used</a></p><div id="data-types-and-data-retention" class="group css-bjn8wh"><a href="#data-types-and-data-retention" title="#data-types-and-data-retention" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Data types and data retention</h3></div><p>Bitwarden processes two kinds of user data to deliver the Bitwarden Service: (i) Vault Data and (ii) Administrative Data.</p><p>(i) Vault Data</p><p>Vault Data includes all information stored within accounts to the Bitwarden Service and may include Personal Information. If we host the Bitwarden Service for you, we will host Vault Data. Vault Data is encrypted using secure cryptographic keys under your control. Bitwarden cannot access Vault Data.</p><p>Data Retention of Vault Data: You may add, modify, and delete Vault Data at any time.</p><p>(ii) Administrative Data</p><p>Bitwarden obtains Personal Information in connection with your account creation, usage of the Bitwarden Service and support, and payments for the Bitwarden Service such as names, emails address, phone and other contact information for users of the Bitwarden Service and the number of items in your Bitwarden Service account ("Administrative Data"). Bitwarden uses Administrative Data to provide the Bitwarden Service to you. We retain Administrative Data for as long as you are a customer of Bitwarden and as required by law. If you terminate your relationship with Bitwarden, we will delete your Personal Information in accordance with our data retention policies.</p><p>When you use the website or communicate with us (e.g., via email) you will provide, and Bitwarden will collect certain Personal Information such as:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p>Name</p></li><li class=" css-7c8h9w"><p>Business name and address</p></li><li class=" css-7c8h9w"><p>Business telephone number</p></li><li class=" css-7c8h9w"><p>Email address</p></li><li class=" css-7c8h9w"><p>IP-address and other online identifiers</p></li><li class=" css-7c8h9w"><p>Any customer testimonial you have given us consent to share.</p></li><li class=" css-7c8h9w"><p>Information you provide to the Site's Interactive Areas, such as fillable forms or text boxes, training, webinars or event registration.</p></li><li class=" css-7c8h9w"><p>Information about the device you are using, comprising the hardware model, operating system and version, unique device identifiers, network information, IP address, and/or Bitwarden Service information when interacting with the Site.</p></li><li class=" css-7c8h9w"><p>If you interact with the Bitwarden Community or training, or registered for an exam or event, we may collect biographical information and the content that you share.</p></li><li class=" css-7c8h9w"><p>Information gathered via cookies, pixel tags, logs, or other similar technologies.</p></li></ul><p>Please refer to the <a class="css-1v5663i" href="/privacy/">Bitwarden Privacy Policy</a> for additional information.</p><div id="cloud-platform-and-web-application-security" class="group css-bjn8wh"><a href="#cloud-platform-and-web-application-security" title="#cloud-platform-and-web-application-security" class="css-1oqman9"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h2>Cloud platform and web application security</h2></div><div id="architecture-overview" class="group css-bjn8wh"><a href="#architecture-overview" title="#architecture-overview" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Architecture overview</h3></div><p>Bitwarden processes and stores all data securely in the Microsoft Azure cloud using services that are managed by the team at Microsoft, including Azure Kubernetes Services (AKS). </p><p>Azure Kubernetes Services is a managed Kubernetes service provided by Microsoft that reduces the complexity of deploying and managing Kubernetes clusters. Microsoft fully manages the control plane. The control plane contains all of the components and services that are used to operate and maintain the Bitwarden Kubernetes clusters. Microsoft and the AKS team deploy, operate, and are responsible for the AKS service availability and functionality. The team at Bitwarden manages:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p>The access management of the AKS service</p></li><li class=" css-7c8h9w"><p>The patching and updating to apply the Node OS security patches, Node image version upgrades, and the Kubernetes version (cluster upgrades)</p></li><li class=" css-7c8h9w"><p>The container security for the docker images and running containers in AKS</p></li><li class=" css-7c8h9w"><p>The network security of the nodes</p></li></ul><figure class="css-15ut44o"><img alt="Bitwarden architectural overview" id="99d5bef1-330a-5719-a2cf-2850fed7676e" height="540" width="960" src="https://res.cloudinary.com/bw-com/image/upload/f_auto/v1/ctf/7rncvj1f8mw7/6PDqnG1zfXQLQ54rm0auc0/8b41d77f1451ae0aed8c259fa85ed5a2/Security_White_Paper_Diagrams_August_2023_-GO_BR-.png?_a=DAJAUVWIZAA0"/><figcaption class="css-1uvlm5q"><cite>Bitwarden architectural overview</cite></figcaption></figure><div id="security-updates-and-patching" class="group css-bjn8wh"><a href="#security-updates-and-patching" title="#security-updates-and-patching" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Security updates and patching</h3></div><h4>Azure Kubernetes Services (AKS)</h4><p>Microsoft provides patches, new node images, and new Kubernetes versions for their AKS service. The team at Bitwarden manages and monitors the AKS environment and follows the upgrade recommendations from Microsoft and vulnerability reports to ensure that Node OS security patches, Node image version upgrades, and the Kubernetes version (cluster upgrades) are applied. In addition, the Bitwarden team applies updates and patches to maintain the container security for the docker imagers and running containers in AKS.</p><div id="control-of-production-systems" class="group css-bjn8wh"><a href="#control-of-production-systems" title="#control-of-production-systems" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Control of production systems</h3></div><p>Bitwarden maintains documented runbooks for all production systems that cover deployment, update, and troubleshooting processes. Extensive alerts are set up to notify and escalate in case of issues.</p><h4>Baseline configurations</h4><p>Bitwarden processes and stores all data securely in the Microsoft Azure cloud using services that are managed by the team at Microsoft, including Azure Kubernetes Service (AKS).</p><h5>Azure Kubernetes Services (AKS)</h5><p>Security baseline configurations are established and monitored using Cloud Security Posture Management and Vulnerability Management services.</p><h4>HTTP security headers</h4><p>Bitwarden leverages HTTP Security headers as an additional level of protection for the Bitwarden web application and communications. For example, HTTP Strict Transport Security (HSTS) will force all connections to use TLS, which mitigates the risks of downgrade attacks and misconfiguration. Content Security Policy headers provide further protection from injection attacks, such as cross-site scripting (XSS). In addition, Bitwarden implements X-Frame-Options: SAMEORIGIN to defend against clickjacking.</p><div id="key-management-procedures" class="group css-bjn8wh"><a href="#key-management-procedures" title="#key-management-procedures" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Key management procedures</h3></div><p>Keys and other secrets utilized by the Bitwarden platform itself, including credentials for Bitwarden cloud provider accounts, are generated, securely stored, and rotated as needed in accordance with industry-standard practices. Bitwarden uses internal Bitwarden vaults for secure storage and backup of sensitive keys or other secrets utilized by the Bitwarden platform. Access to these vaults is carefully managed with access controls, permissions, and roles. </p><div id="logging-monitoring-and-alert-notification" class="group css-bjn8wh"><a href="#logging-monitoring-and-alert-notification" title="#logging-monitoring-and-alert-notification" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Logging, monitoring, and alert notification</h3></div><p>Bitwarden maintains documented runbooks for all production systems that cover deployment, update, and troubleshooting processes. Extensive alerts are set up to notify and escalate in case of issues. A combination of manual and automated monitoring of Bitwarden cloud infrastructure provides a comprehensive and detailed view of system health as well as proactive alerts on areas of concern. Issues are surfaced quickly so that the Bitwarden infrastructure team can effectively respond and mitigate problems with minimal disruption.</p><div id="threat-prevention-and-response" class="group css-bjn8wh"><a href="#threat-prevention-and-response" title="#threat-prevention-and-response" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Threat prevention and response</h3></div><p>Bitwarden performs continuous security monitoring of our networks, assets, data, and services leveraging services and tools including but not limited to Security Information Event Management (SIEM), established Security Operations Center (SOC), Vulnerability Management, Data Loss Prevention (DLP), and Endpoint Detection and Response (EDR). Bitwarden maintains a Security Incident Response policy and plan which is designed to minimize the overall impact of cyber incidents and includes the following as part of the Incident Response Lifecycle:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p>Preparation and Planning</p></li><li class=" css-7c8h9w"><p>Detection and Analysis</p></li><li class=" css-7c8h9w"><p>Containment</p></li><li class=" css-7c8h9w"><p>Eradication</p></li><li class=" css-7c8h9w"><p>Recovery</p></li><li class=" css-7c8h9w"><p>Post-Incident Activities</p></li></ul><p>Bitwarden uses Content Delivery Network (CDN) services in order to provide Web Application Firewalls (WAF) at the edge, better DDoS protection, distributed availability, and caching. Bitwarden also uses proxies within the CDN provider for better network security and performance of its services and sites.</p><h4>Code assessments</h4><p>Bitwarden is open source software. All of our source code is hosted on GitHub and is free for anyone to review. Bitwarden source code is audited by reputable third-party security auditing firms as well as independent security researchers. In addition, the Bitwarden Vulnerability Disclosure Program enlists the help of the hacker community at HackerOne to make Bitwarden more secure.</p><div id="business-continuity-and-disaster-recovery" class="group css-bjn8wh"><a href="#business-continuity-and-disaster-recovery" title="#business-continuity-and-disaster-recovery" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Business continuity and disaster recovery</h3></div><p>Bitwarden employs a full range of disaster recovery and business continuity practices from Microsoft Azure that are built into the Bitwarden cloud. This includes high availability and backup services for our application and database tiers.</p><div id="software-lifecycle-and-change-management" class="group css-bjn8wh"><a href="#software-lifecycle-and-change-management" title="#software-lifecycle-and-change-management" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Software lifecycle and change management</h3></div><p>Bitwarden evaluates changes to platform, applications, and production infrastructure to minimize risk and such changes are implemented following the standard operating procedures at Bitwarden.</p><p>Change request items are planned based on the roadmap and submitted to engineering. Engineering will review and evaluate their capacity and assess the level of effort for each change request item. After review and evaluation, the product and engineering teams will formulate what they are going to work on for a specific release. The CTO provides details of the release through communication channels and management meetings when the development life cycle begins for that release.</p><p>At a high-level, the development, release, testing, and approval process includes:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p>Develop, build, and iterate using pull requests in GitHub.</p></li><li class=" css-7c8h9w"><p>Get features to a point where they are testable.</p></li><li class=" css-7c8h9w"><p>Engineering performs functional testing of the feature and/ or product as they are developing and building.</p></li><li class=" css-7c8h9w"><p>Unit testing build and static application security testing (SAST) are automated as part of Bitwarden Continuous Integration (CI) pipelines.</p></li><li class=" css-7c8h9w"><p>Some testing is also performed by the Customer Success team.</p></li><li class=" css-7c8h9w"><p>Engineering management assists with review and helps to formalize the process, including documentation updates.</p></li><li class=" css-7c8h9w"><p>CTO Provides Final Go / No-Go Approval</p></li></ul><p><strong>Meeting Attendance</strong>: To ensure successful review, approval implementation and closure of change requests, each core Operation and IT service staff should be represented during the meeting to review and discuss the change request.</p><p>Emergency deployment and hotfixes get escalated priority, and review and approval of the change is received from a manager or director prior to the change being made and is subsequently reviewed, communicated and closed during the next scheduled change meeting. This is normally in a service outage, system down or in an urgent outage prevention situation.</p><div id="auditability-and-compliance" class="group css-bjn8wh"><a href="#auditability-and-compliance" title="#auditability-and-compliance" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Auditability and compliance</h3></div><p>The Bitwarden Security and Compliance Program is based on the ISO-27001 Information Security Management System (ISMS). Bitwarden staff have defined policies that govern security and processes, and continually update the security program to be consistent with applicable legal, industry, and regulatory requirements for services that are provided to you under our <a class="css-1v5663i" href="/terms/">Terms of Service Agreement</a>.</p><p>Bitwarden complies with industry-standard application security guidelines that include a dedicated security engineering team and include regular reviews of application source code and IT infrastructure to detect, validate, and remediate any security vulnerabilities.</p><h4>External security reviews</h4><p>Third-party security reviews and assessments of applications and/or the platform are performed at a minimum of once per year.</p><h4>Certifications</h4><p>Bitwarden certifications include:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p>SOC2 Type II (renewed annually)</p></li><li class=" css-7c8h9w"><p>SOC3 (renewed annually)</p></li></ul><p>According to the AICPA, the use of the Systems and Organization Controls (SOC), SOC 2 Type II report is restricted. For SOC 2 report inquiries, please <a class="css-1v5663i" href="/contact/">contact us</a>.</p><p>Read More: <a class="css-1v5663i" href="/blog/bitwarden-achieves-soc-2-certification/">Bitwarden achieves SOC2 certification</a></p><p>The SOC 3 report provides a summary of the SOC 2 report and is distributed publicly. According to the AICPA, SOC 3 is the SOC for service organizations to report on trust services criteria for general use. Bitwarden makes a copy of the SOC 3 report <a href="https://cdn.bitwarden.com/misc/Bitwarden%202020%20SOC%203%20Report.pdf" target="_blank" rel="noreferrer" class="css-1v5663i">available here</a> and the summary demonstrates our commitment to security and privacy standards.</p><p>These SOC certifications represent one facet of Bitwarden's commitment to safeguarding the security and privacy of customers, and compliance with rigorous standards. Bitwarden also performs a regular cadence of audits on our network security and code integrity.</p><p>Read more: <a class="css-1v5663i" href="/blog/bitwarden-network-security-assessment-2020/">Bitwarden 2020 security audit is complete</a> and <a class="css-1v5663i" href="/blog/third-party-security-audit/">Bitwarden completes third-party security audit</a></p><div id="employee-access-controls" class="group css-bjn8wh"><a href="#employee-access-controls" title="#employee-access-controls" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Employee access controls</h3></div><p>Bitwarden employees have significant training and expertise for the type of data, systems, and information assets that they design, architect, implement, manage, support, and interact with.</p><p>Bitwarden follows an established on-boarding process to ensure that the appropriate level of access is assigned and maintained. Bitwarden has established levels of access that are appropriate for each role. All requests, including any access change requests, need to be reviewed and approved by the manager. Bitwarden follows a least-privilege policy that grants employees the minimum level of access required to complete their duties. Bitwarden follows an established off-boarding process through Bitwarden Human Resources that revokes all access rights upon an employee's termination.</p><div id="threat-model-and-attack-surface-analysis-overview" class="group css-bjn8wh"><a href="#threat-model-and-attack-surface-analysis-overview" title="#threat-model-and-attack-surface-analysis-overview" class="css-1oqman9"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h2>Threat model and attack surface analysis overview</h2></div><p>Bitwarden follows a risk-based approach to designing secure services and systems which include threat modeling and attack surface analysis to identify threats and develop mitigation for them. The risk and threat modeling analysis extends to all areas of the Bitwarden platform including the core Bitwarden cloud server application and the Bitwarden clients such as mobile, desktop, web application, browser and/or command line interfaces.</p><h4>Bitwarden clients</h4><p>Users primarily interact with Bitwarden through client applications such as mobile, desktop, web application, browser and/or command line interfaces. The security of these devices, workstations, and web browsers is critical because if one or more of these devices are compromised an attacker may be able to install malware such as a keylogger which would capture all information entered on these devices including any of your passwords and secrets. You, as the end-user and/or device owner, are responsible for ensuring that your devices are secured and protected from non-authorized access.</p><h4>HTTPS TLS and web browser crypto end-to-end encryption</h4><p>The Bitwarden web client runs in your web browser. The authenticity and integrity of the Bitwarden web client depend on the integrity of the HTTPS TLS connection by which it is delivered. An attacker capable of tampering with the traffic that delivers the web client could deliver a malicious client to the user.</p><p>Web browser attacks are one of the most popular ways for attackers and cybercriminals to inject malware or inflict damage. Attack vectors on the web browser might include:</p><ul class="css-7ayk8z"><li class=" css-7c8h9w"><p>An element of <strong>social engineering, such as phishing,</strong> to trick and persuade the victim to take any action that compromises the security of their user secrets and account.</p></li><li class=" css-7c8h9w"><p><strong>Web browser attacks and browser extension / add-on exploits:</strong> A malicious extension designed to be able to capture user secrets as they are typed on the keyboard.</p></li><li class=" css-7c8h9w"><p><strong>Attacks on web applications through the browser:</strong> Clickjacking, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF).</p></li></ul><p>Bitwarden leverages <a href="#http-security-headers" class="css-1v5663i">HTTP Security headers</a> as an additional level of protection for the Bitwarden web application and communications.</p><div id="conclusion" class="group css-bjn8wh"><a href="#conclusion" title="#conclusion" class="css-1oqman9"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h2>Conclusion</h2></div><p>This overview of the Bitwarden Security and Compliance program is offered for your review. Bitwarden’s solution, software, infrastructure, and security processes have been designed from the ground up with a multi-layered, defense-in-depth approach.</p><p>The Bitwarden Security and Compliance Program is based on the ISO-27001 Information Security Management System (ISMS). Bitwarden staff have defined policies that govern security and processes, and continually update the security program to be consistent with applicable legal, industry, and regulatory requirements for services that are provided to you under our <a class="css-1v5663i" href="/terms/">Terms of Service Agreement</a>.</p><p>If you have any questions, please <a class="css-1v5663i" href="/contact/">contact us</a>.</p><div id="document-changelog" class="group css-bjn8wh"><a href="#document-changelog" title="#document-changelog" class="css-1j5c61x"><svg version="1.1" viewBox="0 0 32 32"><path d="M30.939 9.669l-7.372-0.014 1.332-8.422c0.022-0.138 0.016-0.279-0.016-0.415s-0.092-0.264-0.174-0.377c-0.082-0.113-0.186-0.209-0.305-0.282s-0.251-0.122-0.389-0.144-0.279-0.016-0.415 0.016c-0.136 0.033-0.264 0.092-0.377 0.174-0.229 0.166-0.382 0.415-0.426 0.694l-1.388 8.75-8.728-0.018 1.316-8.31c0.028-0.141 0.027-0.286-0.002-0.426s-0.087-0.274-0.169-0.391c-0.082-0.118-0.187-0.218-0.309-0.294s-0.257-0.127-0.399-0.15c-0.142-0.022-0.287-0.016-0.426 0.019s-0.27 0.097-0.384 0.184c-0.114 0.087-0.21 0.195-0.282 0.32s-0.117 0.262-0.134 0.405l-1.366 8.64-7.776-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.442 0.014-1.4 8.876-7.718-0.016c-0.283 0-0.554 0.112-0.754 0.312s-0.312 0.471-0.312 0.754c0 0.283 0.112 0.554 0.312 0.754s0.471 0.312 0.754 0.312l7.384 0.016-1.266 8c-0.044 0.279 0.024 0.564 0.19 0.793s0.416 0.382 0.694 0.427c0.052 0.009 0.104 0.013 0.156 0.014 0.254 0 0.499-0.091 0.692-0.256s0.32-0.394 0.358-0.644l1.32-8.33 8.73 0.018-1.248 7.89c-0.044 0.279 0.024 0.564 0.19 0.793s0.415 0.382 0.694 0.427c0.056 0.009 0.112 0.013 0.168 0.014 0.253-0.001 0.498-0.092 0.691-0.257s0.32-0.393 0.359-0.643l1.3-8.218 7.762 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754c0-0.283-0.112-0.554-0.312-0.754s-0.471-0.312-0.754-0.312l-7.428-0.016 1.4-8.876 7.704 0.016c0.283 0 0.554-0.112 0.754-0.312s0.312-0.471 0.312-0.754-0.112-0.554-0.312-0.754c-0.2-0.2-0.471-0.312-0.754-0.312h0.014zM19.671 20.657l-8.732-0.018 1.4-8.876 8.73 0.018-1.398 8.876z"></path></svg></a><h3>Document changelog</h3></div><div class="table-container css-0"><style data-emotion="css d9risx">.css-d9risx{margin-bottom:1.25rem;overflow-x:auto;}@media (min-width: 1024px){.css-d9risx{margin-bottom:2.5rem;}}.css-d9risx *>p{margin-bottom:0px;}</style><style data-emotion="css 9rrbvo">.css-9rrbvo{position:relative;overflow:hidden;border-top-left-radius:1.5rem;border-top-right-radius:1.5rem;border-bottom-left-radius:1.5rem;border-bottom-right-radius:1.5rem;margin-bottom:1.25rem;overflow-x:auto;}@media (min-width: 1024px){.css-9rrbvo{margin-bottom:2.5rem;}}.css-9rrbvo *>p{margin-bottom:0px;}</style><div class="css-9rrbvo"><style data-emotion="css 1ohmyur">.css-1ohmyur{height:100%;width:100%;overflow-x:auto;overflow-y:clip;}</style><div data-testid="overflow-indicator-scroll-container" class="css-1ohmyur"><style data-emotion="css 1cz0kdc">.css-1cz0kdc{pointer-events:none;position:absolute;z-index:10;opacity:0;transition-property:opacity;transition-timing-function:cubic-bezier(0, 0, 0.2, 1);transition-duration:200ms;left:0px;top:0px;height:100%;width:2rem;background-image:linear-gradient(to right, var(--tw-gradient-stops));border-top-left-radius:1.6rem;border-bottom-left-radius:1.6rem;--tw-gradient-from:#939da7 var(--tw-gradient-from-position);--tw-gradient-to:rgb(147 157 167 / 0) var(--tw-gradient-to-position);--tw-gradient-stops:var(--tw-gradient-from),var(--tw-gradient-to);}</style><div data-testid="overflow-indicator-left" class="css-1cz0kdc"></div><style data-emotion="css qkcdtj">.css-qkcdtj{pointer-events:none;position:absolute;z-index:10;opacity:0;transition-property:opacity;transition-timing-function:cubic-bezier(0, 0, 0.2, 1);transition-duration:200ms;right:0px;top:0px;z-index:11;height:100%;width:2rem;background-image:linear-gradient(to left, var(--tw-gradient-stops));border-top-right-radius:1.6rem;border-bottom-right-radius:1.6rem;--tw-gradient-from:#939da7 var(--tw-gradient-from-position);--tw-gradient-to:rgb(147 157 167 / 0) var(--tw-gradient-to-position);--tw-gradient-stops:var(--tw-gradient-from),var(--tw-gradient-to);}</style><div data-testid="overflow-indicator-right" class="css-qkcdtj"></div><style data-emotion="css 4na8wq">.css-4na8wq{--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));position:relative;width:100%;border-collapse:collapse;overflow-wrap:normal;word-break:normal;border-radius:1.5rem;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-4na8wq td:after{--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}.css-4na8wq td{--tw-border-opacity:1;border-color:rgb(230 235 239 / var(--tw-border-opacity));}.css-4na8wq th{--tw-border-opacity:1;border-color:rgb(230 235 239 / var(--tw-border-opacity));}.css-4na8wq td:after{left:0.75rem;right:0.75rem;}.css-4na8wq td{padding-left:1rem;padding-right:1rem;}.css-4na8wq th{padding-left:1rem;padding-right:1rem;}.css-4na8wq p{overflow-wrap:normal;word-break:normal;}.css-4na8wq td:after{position:absolute;bottom:0px;z-index:0;display:block;height:1px;content:var(--tw-content);}.css-4na8wq td:last-of-type{border-right-width:0px;}.css-4na8wq td{border-right-width:1px;padding-top:1rem;padding-bottom:1rem;text-align:left;line-height:1.25;}.css-4na8wq tfoot td:after{display:none;}.css-4na8wq tfoot td{padding-bottom:2.5rem;font-weight:700;}@media (min-width: 768px){.css-4na8wq th:first-of-type{width:33.333333%;}.css-4na8wq th{padding-top:2.75rem!important;font-size:1.125rem;line-height:1.75rem;}.css-4na8wq th>p{font-size:1.125rem;line-height:1.75rem;}}.css-4na8wq th:last-of-type{border-right-width:0px;}.css-4na8wq th{border-right-width:1px;padding-top:1rem;padding-bottom:1rem;text-align:left;font-weight:700;line-height:1.25;}.css-4na8wq tr{break-inside:avoid;}.css-4na8wq tr:last-child td:after{display:none;}.css-4na8wq tr:last-child td{padding-bottom:2.5rem;}</style><table class="css-4na8wq"><thead><tr><th><p>Date published</p></th><th><p>Summary of changes</p></th></tr></thead><tbody><tr><td class="css-bjn8wh"><p>August 2, 2024</p></td><td class="css-bjn8wh"><p>Restructured the document for easier navigation, improved information architecture, and more consistent style</p></td></tr><tr><td class="css-bjn8wh"><p>July 25, 2024</p></td><td class="css-bjn8wh"><p>Added information related to Cipher Keys for vault item encryption</p></td></tr><tr><td class="css-bjn8wh"><p>March 23, 2024</p></td><td class="css-bjn8wh"><p>Added new descriptions and diagrams to <strong>Sharing data between users</strong> section</p></td></tr><tr><td class="css-bjn8wh"><p>Jan 12, 2024</p></td><td class="css-bjn8wh"><p>Added information related to Log in with Passkeys</p></td></tr></tbody></table></div></div></div><p></p><style data-emotion="css 1j2gk6h">.css-1j2gk6h{margin-top:6rem;}</style><div class="css-1j2gk6h"><style data-emotion="css bsdyho">.css-bsdyho{border-radius:2.25rem;--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));padding:1rem;}</style><div class="css-bsdyho"><style data-emotion="css 7whenc">.css-7whenc{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:100%;}</style><div class="css-7whenc"><style data-emotion="css 1e3ba5r">.css-1e3ba5r{margin-left:auto;height:auto;-webkit-align-self:flex-end;-ms-flex-item-align:flex-end;align-self:flex-end;white-space:normal;border-radius:0.25rem;--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));padding-top:0.5rem;padding-bottom:0.5rem;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;width:100%;}.css-1e3ba5r:hover{--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));}</style><button type="button" class="css-1e3ba5r">Suggest changes to this page</button></div><style data-emotion="css td0oco">.css-td0oco form>button{display:none;}</style><div id="help-page-suggestions" class="css-td0oco"><style data-emotion="css 1tv8zk1">.css-1tv8zk1{overflow:hidden;padding-left:0.25rem;padding-right:0.25rem;font-size:0.875rem;line-height:1.25rem;}</style><div class="css-1tv8zk1" style="will-change:opacity"><style data-emotion="css 16wz0wf">.css-16wz0wf{min-height:10rem;}@media print{.css-16wz0wf{display:none;}}</style><div class="bw-hubspot-form css-16wz0wf"><span class="bw-hubspot-form-copy"><h3 class="bw-hubspot-form-headline">Suggest changes to this page</h3><p>How can we improve this page for you? <br/>For technical, billing, and product questions, please <a class="css-1v5663i" href="/contact/">contact support</a></p></span><style data-emotion="css 1tpazsy">.css-1tpazsy{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:100%;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;padding:2rem;}</style><div class="bw-hubspot-form-loader css-1tpazsy"><style data-emotion="css 922w1y">.css-922w1y{height:4rem;width:4rem;-webkit-animation:spin 1s linear infinite;animation:spin 1s linear infinite;--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}@-webkit-keyframes spin{to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);-ms-transform:rotate(360deg);transform:rotate(360deg);}}@keyframes spin{to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);-ms-transform:rotate(360deg);transform:rotate(360deg);}}</style><svg class="css-922w1y" version="1.1" viewBox="0 0 32 32"><path d="M9.739 30.026c0.649 0 1.176-0.526 1.176-1.176s-0.527-1.176-1.176-1.176-1.176 0.527-1.176 1.176c0 0.65 0.527 1.176 1.176 1.176zM16.505 31.996c0.649 0 1.176-0.526 1.176-1.176s-0.527-1.176-1.176-1.176-1.176 0.527-1.176 1.176c0 0.65 0.527 1.176 1.176 1.176zM23.869 30.174c0.649 0 1.176-0.527 1.176-1.176s-0.527-1.176-1.176-1.176c-0.65 0-1.176 0.527-1.176 1.176s0.526 1.176 1.176 1.176zM4.863 25.762c0.765 0 1.386-0.621 1.386-1.386s-0.621-1.386-1.386-1.386c-0.765 0-1.386 0.621-1.386 1.386s0.621 1.386 1.386 1.386zM2.639 19.476c0.906 0 1.64-0.734 1.64-1.64s-0.734-1.64-1.64-1.64c-0.906 0-1.64 0.734-1.64 1.64s0.734 1.64 1.64 1.64zM4.021 12.32c1.069 0 1.936-0.867 1.936-1.936s-0.867-1.936-1.936-1.936c-1.069 0-1.936 0.867-1.936 1.936s0.867 1.936 1.936 1.936zM9.621 6.676c1.298 0 2.35-1.052 2.35-2.35s-1.052-2.35-2.35-2.35c-1.298 0-2.35 1.052-2.35 2.35s1.052 2.35 2.35 2.35zM18.813 5.324c1.469 0 2.66-1.191 2.66-2.66s-1.191-2.66-2.66-2.66c-1.469 0-2.66 1.191-2.66 2.66s1.191 2.66 2.66 2.66zM27.897 11.232c1.714 0 3.104-1.39 3.104-3.104s-1.39-3.104-3.104-3.104c-1.714 0-3.104 1.39-3.104 3.104s1.39 3.104 3.104 3.104z"></path></svg></div><div class="bw-hs-form-container" id="hsf-7ebd12d3-6229-5c1a-873e-8b1074e109fb"><style data-emotion="css-global bq4vmd">.hs-form label{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.hs-form fieldset{max-width:100%!important;}.hs-form br{margin-bottom:0.5rem;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;--tw-content:" ";content:var(--tw-content);}.hs-form .actions .hs-button{margin-top:0px;margin-bottom:0px;}.hs-form .inputs-list{list-style-type:none;}.hs-form .inputs-list .hs-form-booleancheckbox-display{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:flex-start;-webkit-box-align:flex-start;-ms-flex-align:flex-start;align-items:flex-start;gap:0.5rem;}.hs-form .inputs-list .hs-form-booleancheckbox-display .hs-input{margin-top:0.25rem;}@media (min-width: 1024px){.hs-form .inputs-list .hs-form-booleancheckbox-display .hs-input{margin-top:0.5rem;}}.hs-form .hs-form-required{margin-left:0.25rem;font-size:0.75rem;line-height:1.1;--tw-text-opacity:1;color:rgb(239 68 68 / var(--tw-text-opacity));}.hs-form .hs-form-field{margin-bottom:1rem;}.hs-form .hs-input:not([type='radio']):not([type='checkbox']){height:50px;width:100%;border-radius:0.25rem;border-width:1px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));padding:0.75rem;transition-property:border-color,box-shadow;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}.hs-form .hs-input:not([type='radio']):not([type='checkbox'])::-webkit-input-placeholder{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox'])::-moz-placeholder{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox']):-ms-input-placeholder{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox'])::placeholder{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox']):hover{--tw-border-opacity:1;border-color:rgb(171 180 189 / var(--tw-border-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox']):focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow, 0 0 #0000);--tw-ring-opacity:1;--tw-ring-color:rgb(23 93 220 / var(--tw-ring-opacity));}@media (min-width: 1024px){.hs-form .hs-input:not([type='radio']):not([type='checkbox']){height:54px;}}.hs-form .hs-input.is-placeholder{--tw-text-opacity:1!important;color:rgb(110 120 129 / var(--tw-text-opacity))!important;}.hs-form .hs-input[type='radio']{margin-right:0.5rem;}.hs-form select.hs-input{width:100%;-webkit-appearance:none;-moz-appearance:none;-ms-appearance:none;appearance:none;border-radius:0.25rem;border-right-width:8px;border-color:transparent;--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));background-image:url('data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iaXNvLTg4NTktMSI/Pgo8IS0tIEdlbmVyYXRvcjogQWRvYmUgSWxsdXN0cmF0b3IgMTkuMC4wLCBTVkcgRXhwb3J0IFBsdWctSW4gLiBTVkcgVmVyc2lvbjogNi4wMCBCdWlsZCAwKSAgLS0+CjwhLS0gTGljZW5zZTogQ0MwLiBNYWRlIGJ5IFNWRyBSZXBvOiBodHRwczovL3d3dy5zdmdyZXBvLmNvbS9zdmcvMTgzNTUyL2NoZXZyb24gLS0+CjxzdmcgdmVyc2lvbj0iMS4xIiBpZD0iTGF5ZXJfMSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB4bWxuczp4bGluaz0iaHR0cDovL3d3dy53My5vcmcvMTk5OS94bGluayIgeD0iMHB4IiB5PSIwcHgiCgkgdmlld0JveD0iMCAwIDUxMiA1MTIiIHN0eWxlPSJlbmFibGUtYmFja2dyb3VuZDpuZXcgMCAwIDUxMiA1MTI7IiB4bWw6c3BhY2U9InByZXNlcnZlIj4KPHBhdGggc3R5bGU9ImZpbGw6IzZFNzg4MTsiIGQ9Ik01MDUuMTgzLDEyMy4xNzljLTkuMDg3LTkuMDg3LTIzLjgyNC05LjA4OS0zMi45MTIsMC4wMDJsLTIxNi4yNjYsMjE2LjI3TDM5LjcyOSwxMjMuMTc5CgljLTkuMDg3LTkuMDg3LTIzLjgyNC05LjA4OS0zMi45MTIsMC4wMDJjLTkuMDg5LDkuMDg5LTkuMDg5LDIzLjgyNCwwLDMyLjkxMkwyMzkuNTUsMzg4LjgyYzQuMzY0LDQuMzY0LDEwLjI4Myw2LjgxNiwxNi40NTUsNi44MTYKCWM2LjE3MiwwLDEyLjA5Mi0yLjQ1MywxNi40NTUtNi44MTdsMjMyLjcyMS0yMzIuNzI3QzUxNC4yNzIsMTQ3LjAwNCw1MTQuMjcyLDEzMi4yNjgsNTA1LjE4MywxMjMuMTc5eiIvPgo8L3N2Zz4K');-webkit-background-size:40px 15px;background-size:40px 15px;-webkit-background-position:right 52%;background-position:right 52%;background-repeat:no-repeat;padding-left:0.75rem;padding-right:1.75rem;font-size:1.125rem;line-height:1.25;--tw-text-opacity:1;color:rgb(40 42 49 / var(--tw-text-opacity));outline-style:solid;outline-width:0px;}.hs-form select.hs-input:required:invalid{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-fieldtype-textarea{min-height:10rem!important;width:100%!important;}.hs-form .hs-error-msgs{list-style-type:none;}.hs-form .hs-error-msgs li{line-height:1.1;}.hs-form .hs-error-msgs li label{margin-left:0.25rem;font-size:0.75rem;line-height:1rem;--tw-text-opacity:1;color:rgb(239 68 68 / var(--tw-text-opacity));}.hs-form .hs-button{margin-top:1rem;margin-bottom:1rem;cursor:pointer;border-radius:9999px;border-style:none;--tw-bg-opacity:1;background-color:rgb(23 93 220 / var(--tw-bg-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;text-align:center;font-size:1rem;line-height:1.5rem;font-weight:400;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));transition-property:background-color,color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;}.hs-form .hs-button:hover{--tw-bg-opacity:1;background-color:rgb(2 15 102 / var(--tw-bg-opacity));}.hs-form .hs-button:focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow, 0 0 #0000);--tw-ring-opacity:1;--tw-ring-color:rgb(23 93 220 / var(--tw-ring-opacity));}.hs-form .hs-button.large{padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;}.hs-form .hs-richtext p{font-size:0.875rem;line-height:1.25;--tw-text-opacity:1;color:rgb(110 120 129 / var(--tw-text-opacity));}.hs-form .legal-consent-container p{font-size:0.75rem;line-height:1.1;--tw-text-opacity:1;color:rgb(110 120 129 / var(--tw-text-opacity));}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list{margin-top:1.5rem;margin-bottom:1.5rem;list-style-type:none;}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list li.hs-form-booleancheckbox label.hs-form-booleancheckbox-display{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list li.hs-form-booleancheckbox label.hs-form-booleancheckbox-display input.hs-input{width:0.75rem;-webkit-flex:none;-ms-flex:none;flex:none;border-radius:0.25rem;}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list li.hs-form-booleancheckbox label.hs-form-booleancheckbox-display span{margin-left:0.5rem;-webkit-flex:1 1 0%;-ms-flex:1 1 0%;flex:1 1 0%;line-height:1.1;--tw-text-opacity:1;color:rgb(110 120 129 / var(--tw-text-opacity));}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list li.hs-form-booleancheckbox label.hs-form-booleancheckbox-display span p{line-height:1.1;}.hs-form .hs_trial_initiation_server_selected{position:relative;margin-bottom:2rem;}.hs-form .hs_trial_initiation_server_selected .inputs-list{margin-top:0.75rem;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-flex-wrap:wrap;-webkit-flex-wrap:wrap;-ms-flex-wrap:wrap;flex-wrap:wrap;gap:1rem;}.hs-form .hs_trial_initiation_server_selected .inputs-list li{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;}.hs-form .hs_trial_initiation_server_selected .hs-form-radio-display{cursor:pointer;border-radius:0.5rem;border-width:2px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;transition-property:opacity;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}.hs-form .hs_trial_initiation_server_selected .hs-form-radio-display:hover{opacity:0.6;}.hs-form .hs_trial_initiation_server_selected .hs-form-radio-display:has(.hs-input:checked){--tw-border-opacity:1;border-color:rgb(23 93 220 / var(--tw-border-opacity));--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));opacity:1;}.hs-form .hs_trial_initiation_server_selected .hs-input[type='radio']{display:none;}.hs-form .hs_trial_initiation_server_selected >label{float:left;margin-bottom:0.5rem;vertical-align:middle;}.hs-form .hs_trial_initiation_server_selected .input{clear:both;}.hs-form .hs_trial_initiation_server_selected .hs-field-desc{position:relative;float:left;margin-left:0.5rem;display:inline-block!important;width:auto;}.hs-form .hs_trial_initiation_server_selected .hs-field-desc p{margin-bottom:0px;font-size:0.875rem;line-height:1.25rem;}.hs-form .hs_trial_initiation_server_selected .bw-hs-toolip-content{pointer-events:none;position:absolute;left:50%;top:0px;z-index:0;--tw-translate-x:-50%;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));width:300px;border-radius:0.5rem;border-width:1px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));padding:1rem;font-size:0.875rem;line-height:1.25rem;--tw-text-opacity:1;color:rgb(110 120 129 / var(--tw-text-opacity));--tw-shadow:0 4px 6px -1px rgb(0 0 0 / 0.1),0 2px 4px -2px rgb(0 0 0 / 0.1);--tw-shadow-colored:0 4px 6px -1px var(--tw-shadow-color),0 2px 4px -2px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow);--tw-translate-y:-0.5rem;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));opacity:0;transition-property:opacity,transform;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}.hs-form .hs_trial_initiation_server_selected .bw-hs-toolip-content:before{position:absolute;left:50%;top:-22px;box-sizing:border-box;--tw-translate-x:-50%;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));--tw-content:'';content:var(--tw-content);border-width:11px;border-style:solid;border-color:transparent;--tw-border-opacity:1;border-bottom-color:rgb(171 180 189 / var(--tw-border-opacity));}.hs-form .hs_trial_initiation_server_selected .bw-hs-toolip-content:after{position:absolute;top:-1.25rem;left:50%;box-sizing:border-box;--tw-translate-x:-50%;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));--tw-content:'';content:var(--tw-content);border-width:10px;border-style:solid;border-color:transparent;--tw-border-opacity:1;border-bottom-color:rgb(255 255 255 / var(--tw-border-opacity));}.hs-form .hs_trial_initiation_server_selected .bw-mit-info-icon{position:relative;z-index:10;vertical-align:sub;--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs_trial_initiation_server_selected .bw-mit-info-icon:after{display:inline-block;height:1rem;width:1rem;content:url(data:image/svg+xml;base64,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);}.hs-form .hs_trial_initiation_server_selected .bw-mit-info-icon:hover+.bw-hs-toolip-content,.hs-form .hs_trial_initiation_server_selected .bw-hs-toolip-content:hover{pointer-events:auto;--tw-translate-y:2.25rem;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));opacity:1;}</style></div></div></div></div></div></div></article><style data-emotion="css 16bqfpf">.css-16bqfpf{-webkit-order:1;-ms-flex-order:1;order:1;}@media (min-width: 1024px){.css-16bqfpf{-webkit-order:2;-ms-flex-order:2;order:2;}}</style><div class="css-16bqfpf"><style data-emotion="css g37sru">.css-g37sru{margin-top:0.75rem;margin-bottom:0.75rem;list-style-type:none;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}</style><ul color="primaryBlue" class="css-g37sru"><li><style data-emotion="css 1enfjws">.css-1enfjws{margin-right:0.25rem;cursor:pointer;font-family:bwi-font;font-size:0.875rem;line-height:1.25rem;}</style><span class="css-1enfjws"></span><a href="/download/">Download Bitwarden</a></li><li><span class="css-1enfjws"></span><a href="https://community.bitwarden.com/t/about-the-feature-requests-category" target="_blank" rel="noreferrer">Feature Request</a></li><li><span class="css-1enfjws"></span><a href="https://community.bitwarden.com/c/support/" target="_blank" rel="noreferrer">Ask the Community</a></li><li><span class="css-1enfjws"></span><a href="/learning/">Learning Center</a></li><li><span class="css-1enfjws"></span><a href="https://contributing.bitwarden.com/" target="_blank" rel="noreferrer">Contributor Guidelines</a></li></ul><style data-emotion="css 1k5hwgu">.css-1k5hwgu{margin-top:2rem;margin-bottom:2rem;display:block;width:210px;white-space:nowrap;border-radius:9999px;border-width:2px;--tw-bg-opacity:1;background-color:rgb(23 93 220 / var(--tw-bg-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;text-align:left;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}.css-1k5hwgu:hover{--tw-bg-opacity:1;background-color:rgb(2 15 102 / var(--tw-bg-opacity));}.css-1k5hwgu:disabled{--tw-bg-opacity:1;background-color:rgb(110 120 129 / var(--tw-bg-opacity));}</style><button type="button" class="css-1k5hwgu"><style data-emotion="css obpszl">.css-obpszl{margin-right:0.5rem;font-family:bwi-font;}</style><span class="css-obpszl"></span>Download as PDF</button><style data-emotion="css ocut2q">.css-ocut2q{margin-top:2rem;margin-bottom:2rem;display:block;width:210px;border-radius:9999px;border-width:2px;--tw-border-opacity:1;border-color:rgb(23 93 220 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;text-align:left;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}.css-ocut2q:hover{--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));}</style><button type="button" class="css-ocut2q"><span class="css-obpszl"></span>Contact support</button><style data-emotion="css oswy">.css-oswy{border-radius:1rem;padding:1.5rem;}.css-oswy h3{font-size:1.125rem;line-height:1.75rem;}.css-oswy *>div{z-index:10;width:auto!important;}</style><style data-emotion="css 1vb9paj">.css-1vb9paj{margin-bottom:2rem;border-radius:2.25rem;--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));padding:2rem;border-radius:1rem;padding:1.5rem;}.css-1vb9paj h2{margin:0px;}.css-1vb9paj h3{font-size:1.125rem;line-height:1.75rem;}.css-1vb9paj *>div{z-index:10;width:auto!important;}</style><div class="css-1vb9paj"><style data-emotion="css 103zpp0">.css-103zpp0{margin-bottom:0px;font-size:1.5rem;line-height:2rem;}</style><h3 class="css-103zpp0">Cloud Status</h3><div><style data-emotion="css 10jmcs7">.css-10jmcs7{margin-top:1.25rem;height:2rem;width:2rem;-webkit-animation:spin 1s linear infinite;animation:spin 1s linear infinite;}@-webkit-keyframes spin{to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);-ms-transform:rotate(360deg);transform:rotate(360deg);}}@keyframes spin{to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);-ms-transform:rotate(360deg);transform:rotate(360deg);}}</style><svg class="css-10jmcs7" version="1.1" viewBox="0 0 32 32"><path d="M9.739 30.026c0.649 0 1.176-0.526 1.176-1.176s-0.527-1.176-1.176-1.176-1.176 0.527-1.176 1.176c0 0.65 0.527 1.176 1.176 1.176zM16.505 31.996c0.649 0 1.176-0.526 1.176-1.176s-0.527-1.176-1.176-1.176-1.176 0.527-1.176 1.176c0 0.65 0.527 1.176 1.176 1.176zM23.869 30.174c0.649 0 1.176-0.527 1.176-1.176s-0.527-1.176-1.176-1.176c-0.65 0-1.176 0.527-1.176 1.176s0.526 1.176 1.176 1.176zM4.863 25.762c0.765 0 1.386-0.621 1.386-1.386s-0.621-1.386-1.386-1.386c-0.765 0-1.386 0.621-1.386 1.386s0.621 1.386 1.386 1.386zM2.639 19.476c0.906 0 1.64-0.734 1.64-1.64s-0.734-1.64-1.64-1.64c-0.906 0-1.64 0.734-1.64 1.64s0.734 1.64 1.64 1.64zM4.021 12.32c1.069 0 1.936-0.867 1.936-1.936s-0.867-1.936-1.936-1.936c-1.069 0-1.936 0.867-1.936 1.936s0.867 1.936 1.936 1.936zM9.621 6.676c1.298 0 2.35-1.052 2.35-2.35s-1.052-2.35-2.35-2.35c-1.298 0-2.35 1.052-2.35 2.35s1.052 2.35 2.35 2.35zM18.813 5.324c1.469 0 2.66-1.191 2.66-2.66s-1.191-2.66-2.66-2.66c-1.469 0-2.66 1.191-2.66 2.66s1.191 2.66 2.66 2.66zM27.897 11.232c1.714 0 3.104-1.39 3.104-3.104s-1.39-3.104-3.104-3.104c-1.714 0-3.104 1.39-3.104 3.104s1.39 3.104 3.104 3.104z"></path></svg><div id="hundStatus"></div></div><style data-emotion="css lr36n9">.css-lr36n9{transition-property:background-color,color,box-shadow,border-color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;display:inline-block;padding-left:0px;padding-right:0px;}.css-lr36n9:hover{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}</style><a href="https://status.bitwarden.com/" target="_blank" rel="noreferrer" aria-label="go to https://status.bitwarden.com/" data-testid="cta-link" class=" css-lr36n9"><style data-emotion="css s5xdrg">.css-s5xdrg{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;}</style><span class="css-s5xdrg">Check status<style data-emotion="css ihq8ma">.css-ihq8ma{margin-left:0.5rem;font-family:bwi-font;font-size:16px!important;}</style><span class="css-ihq8ma"></span></span></a></div><style data-emotion="css vz1xo8">.css-vz1xo8{position:-webkit-sticky;position:sticky;top:5rem;max-height:calc(100vh - 8rem);overflow-y:auto;}</style><div class="css-vz1xo8"><nav id="toc-nav"><style data-emotion="css 118vv05">.css-118vv05{margin-top:1.5rem;margin-bottom:1.5rem;list-style-type:none;}</style><ul class="css-118vv05"><li><style data-emotion="css ksamu5">.css-ksamu5{font-weight:700;text-transform:uppercase;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}</style><a href="#bitwarden-security-whitepaper" class="css-ksamu5">On this page</a></li><style data-emotion="css kv9ztv">.css-kv9ztv{padding-bottom:0.5rem;padding-top:0.75rem;line-height:1.25;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}</style><li class="css-kv9ztv"><style data-emotion="css exknhq">.css-exknhq.active{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-exknhq:hover{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}</style><a href="#overview" class="css-exknhq">Overview</a></li><li class="css-kv9ztv"><a href="#bitwarden-security-principles" class="css-exknhq">Bitwarden security principles</a></li><style data-emotion="css r2ksu3">.css-r2ksu3{margin-left:0.5rem;padding-bottom:0.5rem;font-size:1rem;line-height:1.25;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}</style><li class="css-r2ksu3"><style data-emotion="css 3z6uy4">.css-3z6uy4:hover{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-3z6uy4.active{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}</style><a href="#key-security-measures" class="css-3z6uy4">Key security measures</a></li><li class="css-r2ksu3"><a href="#security-tools-for-users" class="css-3z6uy4">Security tools for users</a></li><li class="css-kv9ztv"><a href="#hashing-key-derivation-and-encryption" class="css-exknhq">Hashing, key derivation, and encryption</a></li><li class="css-r2ksu3"><a href="#account-creation" class="css-3z6uy4">Account creation</a></li><li class="css-r2ksu3"><a href="#authentication-and-decryption" class="css-3z6uy4">Authentication and decryption</a></li><li class="css-r2ksu3"><a href="#rotating-the-account-encryption-key" class="css-3z6uy4">Rotating the account encryption key</a></li><li class="css-r2ksu3"><a href="#variations" class="css-3z6uy4">Variations</a></li><li class="css-kv9ztv"><a href="#sharing-data-between-users" class="css-exknhq">Sharing data between users</a></li><li class="css-r2ksu3"><a href="#when-you-create-an-organization" class="css-3z6uy4">When you create an organization</a></li><li class="css-r2ksu3"><a href="#when-users-join-an-organization" class="css-3z6uy4">When users join an organization</a></li><li class="css-r2ksu3"><a href="#additional-security-measures" class="css-3z6uy4">Additional security measures</a></li><li class="css-kv9ztv"><a href="#data-protection" class="css-exknhq">Data protection</a></li><li class="css-r2ksu3"><a href="#how-vault-data-is-encrypted" class="css-3z6uy4">How vault data is encrypted</a></li><li class="css-r2ksu3"><a href="#vault-health-reports" class="css-3z6uy4">Vault health reports</a></li><li class="css-r2ksu3"><a href="#data-protection-in-transit" class="css-3z6uy4">Data protection in transit</a></li><li class="css-r2ksu3"><a href="#data-protection-at-rest" class="css-3z6uy4">Data protection at rest</a></li><li class="css-r2ksu3"><a href="#data-types-and-data-retention" class="css-3z6uy4">Data types and data retention</a></li><li class="css-kv9ztv"><a href="#cloud-platform-and-web-application-security" class="css-exknhq">Cloud platform and web application security</a></li><li class="css-r2ksu3"><a href="#architecture-overview" class="css-3z6uy4">Architecture overview</a></li><li class="css-r2ksu3"><a href="#security-updates-and-patching" class="css-3z6uy4">Security updates and patching</a></li><li class="css-r2ksu3"><a href="#control-of-production-systems" class="css-3z6uy4">Control of production systems</a></li><li class="css-r2ksu3"><a href="#key-management-procedures" class="css-3z6uy4">Key management procedures</a></li><li class="css-r2ksu3"><a href="#logging-monitoring-and-alert-notification" class="css-3z6uy4">Logging, monitoring, and alert notification</a></li><li class="css-r2ksu3"><a href="#threat-prevention-and-response" class="css-3z6uy4">Threat prevention and response</a></li><li class="css-r2ksu3"><a href="#business-continuity-and-disaster-recovery" class="css-3z6uy4">Business continuity and disaster recovery</a></li><li class="css-r2ksu3"><a href="#software-lifecycle-and-change-management" class="css-3z6uy4">Software lifecycle and change management</a></li><li class="css-r2ksu3"><a href="#auditability-and-compliance" class="css-3z6uy4">Auditability and compliance</a></li><li class="css-r2ksu3"><a href="#employee-access-controls" class="css-3z6uy4">Employee access controls</a></li><li class="css-kv9ztv"><a href="#threat-model-and-attack-surface-analysis-overview" class="css-exknhq">Threat model and attack surface analysis overview</a></li><li class="css-kv9ztv"><a href="#conclusion" class="css-exknhq">Conclusion</a></li><li class="css-r2ksu3"><a href="#document-changelog" class="css-3z6uy4">Document changelog</a></li></ul></nav></div></div></div></div></div></main><style data-emotion="css 1diyjrv">.css-1diyjrv{border-top-width:1px;--tw-border-opacity:1;border-color:rgb(230 235 239 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));padding-top:2.5rem;padding-bottom:2.5rem;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-1diyjrv:where(.dark, .dark *){--tw-border-opacity:1;border-color:rgb(28 30 36 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(28 30 36 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-1diyjrv *>a{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-1diyjrv:where(.dark, .dark *) *>a{--tw-text-opacity:1;color:rgb(147 157 167 / var(--tw-text-opacity));}</style><footer class="css-1diyjrv"><style data-emotion="css 1vgwj7w">.css-1vgwj7w{margin-left:auto;margin-right:auto;max-width:92rem;padding-left:1.25rem;padding-right:1.25rem;}@media (min-width: 1024px){.css-1vgwj7w{padding-left:2.25rem;padding-right:2.25rem;}}</style><div class="css-1vgwj7w"><style data-emotion="css zed147">.css-zed147{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;gap:2.5rem;}</style><div class="css-zed147"><style data-emotion="css 1g1p7jq">.css-1g1p7jq{display:grid;gap:2rem;}@media (min-width: 640px){.css-1g1p7jq{grid-template-columns:repeat(2, minmax(0, 1fr));}}@media (min-width: 768px){.css-1g1p7jq{grid-template-columns:repeat(4, minmax(0, 1fr));}}</style><nav class="css-1g1p7jq"><div><style data-emotion="css syvv29">.css-syvv29{margin-bottom:1rem;font-size:1.5rem;line-height:2rem;}</style><h4 class="css-syvv29">Products</h4><style data-emotion="css 15idi1d">.css-15idi1d{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;gap:0.75rem;}</style><div class="css-15idi1d"><style data-emotion="css yztkno">.css-yztkno{font-size:1rem;line-height:1.5rem;text-decoration-line:none;}.css-yztkno:hover{--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}.css-yztkno:where(.dark, .dark *):hover{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}</style><style data-emotion="css jb0zmd">.css-jb0zmd{transition-property:background-color,color,box-shadow,border-color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;display:table;padding-left:0px;padding-right:0px;padding-top:0px;padding-bottom:0px;text-decoration-line:underline;font-size:1rem;line-height:1.5rem;text-decoration-line:none;}.css-jb0zmd:hover{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-jb0zmd:hover{--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}.css-jb0zmd:where(.dark, .dark *):hover{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}</style><a aria-label="go to https://bitwarden.com/products/" data-testid="cta-link" class="css-jb0zmd" id="d662225a-a7dd-58b7-98aa-4e77da014be0" contentful_id="1TeIznXh4HlHYv3jJG8LhK" __typename="ContentfulComponentCtaLink" label="How Bitwarden Works" link="[object Object]" href="/products/"><style data-emotion="css s5xdrg">.css-s5xdrg{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;}</style><span class="css-s5xdrg">How Bitwarden Works</span></a><style data-emotion="css 1g51eys">.css-1g51eys{transition-property:background-color,color,box-shadow,border-color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;display:inline-block;padding-left:0px;padding-right:0px;padding-top:0px;padding-bottom:0px;text-decoration-line:underline;font-size:1rem;line-height:1.5rem;text-decoration-line:none;}.css-1g51eys:hover{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-1g51eys:hover{--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}.css-1g51eys:where(.dark, .dark *):hover{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}</style><a aria-label="go to https://bitwarden.com/download/" data-testid="cta-link" class="css-1g51eys" id="43e43c29-f6f8-5633-b8c5-f9b376398ed7" contentful_id="10NVVeI4X0MOauskvQrF4e" __typename="ContentfulComponentCtaLink" label="Download Options" link="[object Object]" href="/download/"><span class="css-s5xdrg">Download Options</span></a><a aria-label="go to https://bitwarden.com/integrations/" data-testid="cta-link" class="plausible-event-name=navigation+drop+menu+click plausible-event-button=products+integrations css-1g51eys" id="f85d6b48-2b0f-5812-979a-cdd5b87c2773" contentful_id="5eFZh7ZpZAR7Zf5S4GzbVd" __typename="ContentfulComponentCtaLink" label="Integrations" link="[object Object]" href="/integrations/"><span class="css-s5xdrg">Integrations</span></a><a aria-label="go to https://bitwarden.com/passwordless-passkeys/" data-testid="cta-link" class="css-1g51eys" id="3f94e63c-d5af-5781-9fe2-a8180ac68ea0" contentful_id="5gDAU3njpZMHqPwQpjCVqN" __typename="ContentfulComponentCtaLink" label="Passkeys and Passwordless" link="[object Object]" href="/passwordless-passkeys/"><span class="css-s5xdrg">Passkeys and Passwordless</span></a><a aria-label="go to https://bitwarden.com/products/authenticator/" data-testid="cta-link" class="css-1g51eys" id="768e2b95-b63e-58f3-9637-6df8e067a040" contentful_id="7CGSJJJgAe7rpWude3M0DB" __typename="ContentfulComponentCtaLink" label="Bitwarden Authenticator" link="[object Object]" href="/products/authenticator/"><span class="css-s5xdrg">Bitwarden Authenticator</span></a><a aria-label="go to https://bitwarden.com/products/send/" data-testid="cta-link" class="css-1g51eys" id="0c2b5ecf-34c0-5b1b-a3ee-c605a1a0f62c" contentful_id="5nkWzkNOZ0MGe7lKkMEZkO" __typename="ContentfulComponentCtaLink" label="Bitwarden Send" link="[object Object]" href="/products/send/"><span class="css-s5xdrg">Bitwarden Send</span></a><a aria-label="go to https://bitwarden.com/pricing/business/" data-testid="cta-link" class="plausible-event-name=button+click plausible-event-button=plans+pricing css-1g51eys" id="6809a631-72b4-50c0-8185-049e5977f010" contentful_id="23mPH1cjEErDVndQnc0zGu" __typename="ContentfulComponentCtaLink" label="Plans and Pricing" link="[object Object]" href="/pricing/business/"><span class="css-s5xdrg">Plans and Pricing</span></a><a aria-label="go to https://bitwarden.com/msp/" data-testid="cta-link" class="css-1g51eys" id="1454eab7-3438-59d4-9134-b5cccb23063c" contentful_id="1CVWAhO0OxWE1h51ZmMQUN" __typename="ContentfulComponentCtaLink" label="Managed Service Providers" link="[object Object]" href="/msp/"><span class="css-s5xdrg">Managed Service Providers</span></a><a aria-label="go to https://bitwarden.com/self-hosted-password-manager-on-premises/" data-testid="cta-link" class="css-1g51eys" id="b71334d0-53ef-5191-846e-ac96a374deb8" contentful_id="1Sn49uCrtNu9FvM6nC6cyy" __typename="ContentfulComponentCtaLink" label="Self-Hosting Bitwarden" link="[object Object]" href="/self-hosted-password-manager-on-premises/"><span class="css-s5xdrg">Self-Hosting Bitwarden</span></a></div></div><div><h4 class="css-syvv29">Company</h4><div class="css-15idi1d"><a aria-label="go to https://bitwarden.com/about/" data-testid="cta-link" class="css-1g51eys" id="66a7fb0b-8238-5da4-abba-9966410745ef" contentful_id="39kglbRgTTuggeZcVzI0pi" __typename="ContentfulComponentCtaLink" label="About" link="[object Object]" href="/about/"><span class="css-s5xdrg">About</span></a><a aria-label="go to https://bitwarden.com/open-source/" data-testid="cta-link" class="css-1g51eys" id="c3b6ca6c-88c7-5f31-87b6-bfca5fa58077" contentful_id="76o5wyzdQwMXJ6aIMiPzqB" __typename="ContentfulComponentCtaLink" label="Open Source" link="[object Object]" href="/open-source/"><span class="css-s5xdrg">Open Source</span></a><a aria-label="go to https://bitwarden.com/careers/" data-testid="cta-link" class="css-1g51eys" id="b9c1d6be-0841-57d6-a765-88d90bef6e58" contentful_id="7N3xBMqCWTKdTBamlg6Rcf" __typename="ContentfulComponentCtaLink" label="Careers" link="[object Object]" href="/careers/"><span class="css-s5xdrg">Careers</span></a><a aria-label="go to https://bitwarden.com/events/" data-testid="cta-link" class="css-1g51eys" id="facf9a1c-5786-51c7-9550-ff1afaaf9e6d" contentful_id="5Z9OJcpDdPnTEMnKHIefd3" __typename="ContentfulComponentCtaLink" label="Events" link="[object Object]" href="/events/"><span class="css-s5xdrg">Events</span></a><a aria-label="go to https://bitwarden.com/open-source-security-summit/" data-testid="cta-link" class="css-1g51eys" id="501d4d2a-84fb-5c9b-8b64-367f835bb315" contentful_id="6p7vmdKkdarzlu7CwBgNWH" __typename="ContentfulComponentCtaLink" label="Open Source Security Summit" link="[object Object]" href="/open-source-security-summit/"><span class="css-s5xdrg">Open Source Security Summit</span></a><a aria-label="go to https://bitwarden.com/press-room/" data-testid="cta-link" class="css-1g51eys" id="871115e0-eb9c-5313-bdd6-e53cb752795c" contentful_id="wrPSmNJEb0shJRfKQwEJ7" __typename="ContentfulComponentCtaLink" label="Press Room" link="[object Object]" href="/press-room/"><span class="css-s5xdrg">Press Room</span></a><a aria-label="go to https://bitwarden.com/blog/" data-testid="cta-link" class="css-1g51eys" id="ec058258-4145-57a0-ba7e-38855e3f130c" contentful_id="4JAtkWbj9FQnmbJA6S9YRZ" __typename="ContentfulComponentCtaLink" label="Blog" link="[object Object]" href="/blog/"><span class="css-s5xdrg">Blog</span></a><a aria-label="go to https://bitwarden.com/partners/" data-testid="cta-link" class="css-1g51eys" id="fb1841a1-cf9e-5140-a4b1-825cc21b4405" contentful_id="3veiKFRMgGAhMNXu4y11dw" __typename="ContentfulComponentCtaLink" label="Partners" link="[object Object]" href="/partners/"><span class="css-s5xdrg">Partners</span></a></div></div><div><h4 class="css-syvv29">Resources</h4><div class="css-15idi1d"><a aria-label="go to https://bitwarden.com/resources/" data-testid="cta-link" class="css-1g51eys" id="0ebfc50f-c38a-5aab-9df1-a5735ee1f73f" contentful_id="wjANne83SzZ1LOfTis1kv" __typename="ContentfulComponentCtaLink" label="Resource Center" link="[object Object]" href="/resources/"><span class="css-s5xdrg">Resource Center</span></a><a href="https://community.bitwarden.com/" target="_blank" rel="noreferrer" aria-label="go to https://community.bitwarden.com/" data-testid="cta-link" class="css-1g51eys" id="3e482cd7-6025-5a92-89c9-66310ac9fbe1" contentful_id="60ITdQWQoH7yGUHvZbTMYh" __typename="ContentfulComponentCtaLink" label="Community Forums" link="[object Object]"><span class="css-s5xdrg">Community Forums</span></a><a aria-label="go to https://bitwarden.com/compliance/" data-testid="cta-link" class="css-1g51eys" id="7c32770c-d54c-536b-9cca-dee3da19f44e" contentful_id="1ZHe21KzYPOtQPyot6BtJv" __typename="ContentfulComponentCtaLink" label="Security Compliance" link="[object Object]" href="/compliance/"><span class="css-s5xdrg">Security Compliance</span></a><a aria-label="go to https://bitwarden.com/case-studies/" data-testid="cta-link" class="css-1g51eys" id="1c492841-19fd-55a6-864a-90bbf0a18ecb" contentful_id="39jInN2tX5V7ODivwqYqYY" __typename="ContentfulComponentCtaLink" label="Case Studies" link="[object Object]" href="/case-studies/"><span class="css-s5xdrg">Case Studies</span></a><a aria-label="go to https://bitwarden.com/newsfeed/" data-testid="cta-link" class="css-1g51eys" id="86290cad-2e62-503d-b2dd-6e4f0a3f5341" contentful_id="EkmGGvwMq1Frj30XOod8t" __typename="ContentfulComponentCtaLink" label="Newsfeed" link="[object Object]" href="/newsfeed/"><span class="css-s5xdrg">Newsfeed</span></a><a aria-label="go to https://bitwarden.com/resources/the-survey-room/" data-testid="cta-link" class="css-1g51eys" id="9af480a9-0fb0-50d1-afce-fedc768bf407" contentful_id="7mfQSCXKcLmQvmCYs6TB0A" __typename="ContentfulComponentCtaLink" label="Survey Room" link="[object Object]" href="/resources/the-survey-room/"><span class="css-s5xdrg">Survey Room</span></a><a aria-label="go to https://bitwarden.com/newsletter-subscribe/" data-testid="cta-link" class="css-1g51eys" id="ae95998b-96c5-5ac1-8600-58eb1fa6ce7e" contentful_id="7fiZwG5Eql0cvZBzgT8zcc" __typename="ContentfulComponentCtaLink" label="Subscribe to Updates" link="[object Object]" href="/newsletter-subscribe/"><span class="css-s5xdrg">Subscribe to Updates</span></a></div></div><div><h4 class="css-syvv29">Tools & Help</h4><div class="css-15idi1d"><a href="/password-generator/" aria-label="go to https://bitwarden.com/password-generator/" data-testid="cta-link" class="css-1g51eys" id="6e9f3022-31d5-5299-8e3a-6ddfcf29eade" contentful_id="7woATSCYRFMuMXdVgIyb0r" __typename="ContentfulComponentCtaLink" label="Password Generator" link="[object Object]"><span class="css-s5xdrg">Password Generator</span></a><a href="/password-strength/" aria-label="go to https://bitwarden.com/password-strength/" data-testid="cta-link" class="css-1g51eys" id="6835eec9-8b65-5733-80fa-02e29d7c838f" contentful_id="5VrwOpEjk24ReofiPtBGGv" __typename="ContentfulComponentCtaLink" label="Password Strength Tester" link="[object Object]"><span class="css-s5xdrg">Password Strength Tester</span></a><a aria-label="go to https://bitwarden.com/help/" data-testid="cta-link" class="css-1g51eys" id="1dea1ecb-e67c-5458-ba32-dfd12b2f71f3" contentful_id="3zVRNqdxAAcE0U2WCR6wua" __typename="ContentfulComponentCtaLink" label="Help and Documentation" link="[object Object]" href="/help/"><span class="css-s5xdrg">Help and Documentation</span></a><a aria-label="go to https://bitwarden.com/learning/" data-testid="cta-link" class="css-1g51eys" id="00413c63-7c3d-5f2f-bf5c-013db6c44907" contentful_id="3q87lTxow7jI4Gysi2P57O" __typename="ContentfulComponentCtaLink" label="Learning Center" link="[object Object]" href="/learning/"><span class="css-s5xdrg">Learning Center</span></a><a aria-label="go to https://bitwarden.com/contact-sales/" data-testid="cta-link" class="plausible-event-name=button+click plausible-event-button=contact+sales css-1g51eys" id="f380fcec-59dc-58f4-a729-d56cbfbbe80b" contentful_id="46JdQwXRlpAnlsNMYa3RCj" __typename="ContentfulComponentCtaLink" label="Talk to Sales" link="[object Object]" href="/contact-sales/"><span class="css-s5xdrg">Talk to Sales</span></a><a aria-label="go to https://bitwarden.com/contact/" data-testid="cta-link" class="css-1g51eys" id="a50c75ea-74af-5717-96a4-84cc4b9df0fd" contentful_id="6a6eltJMy4U3h270Ltc3yH" __typename="ContentfulComponentCtaLink" label="Contact Support" link="[object Object]" href="/contact/"><span class="css-s5xdrg">Contact Support</span></a></div></div></nav><style data-emotion="css 11xy1ze">.css-11xy1ze{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:100%;gap:1rem;text-wrap:balance;border-radius:1rem;--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;}.css-11xy1ze:where(.dark, .dark *){--tw-bg-opacity:1;background-color:rgb(40 42 49 / var(--tw-bg-opacity));}.css-11xy1ze .bw-hubspot-form-loader{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:auto;-webkit-flex:1 1 50%;-ms-flex:1 1 50%;flex:1 1 50%;-webkit-box-pack:end;-ms-flex-pack:end;-webkit-justify-content:flex-end;justify-content:flex-end;padding:1rem!important;}.css-11xy1ze .bw-hubspot-form-loader svg{height:2rem;width:2rem;}.css-11xy1ze .bw-hubspot-form{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;min-height:0px;width:100%;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;gap:1rem;}@media (min-width: 1024px){.css-11xy1ze .bw-hubspot-form{-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;}}.css-11xy1ze .bw-hubspot-form-copy *{margin-bottom:0px;display:inline-block;font-size:1.125rem;line-height:1.75rem;}.css-11xy1ze .bw-hubspot-form-headline{margin-right:0.5rem;font-weight:700;}.css-11xy1ze .bw-hs-form-container{width:100%;}@media (min-width: 640px){.css-11xy1ze .bw-hs-form-container{width:auto;}}@media (min-width: 768px){.css-11xy1ze .bw-hs-form-container{-webkit-flex:1 0 auto;-ms-flex:1 0 auto;flex:1 0 auto;}}@media (min-width: 1024px){.css-11xy1ze .bw-hs-form-container{-webkit-align-self:flex-end;-ms-flex-item-align:flex-end;align-self:flex-end;}}.css-11xy1ze .hs-form .hs-input:not([type='radio']):not([type='checkbox']){height:3rem;}.css-11xy1ze form{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:auto;-webkit-align-items:flex-start;-webkit-box-align:flex-start;-ms-flex-align:flex-start;align-items:flex-start;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;}@media (min-width: 768px){.css-11xy1ze form{-webkit-box-pack:end;-ms-flex-pack:end;-webkit-justify-content:flex-end;justify-content:flex-end;}}.css-11xy1ze form h2,.css-11xy1ze form .hs-field-desc{display:none!important;}.css-11xy1ze form .hs-input{border-radius:9999px!important;padding-left:1.25rem!important;}.css-11xy1ze .hs-form-field{position:relative;margin-bottom:0px;width:400px;-webkit-flex:1 1 0%;-ms-flex:1 1 0%;flex:1 1 0%;}@media (min-width: 768px){.css-11xy1ze .hs-form-field{-webkit-flex:0 1 auto;-ms-flex:0 1 auto;flex:0 1 auto;}}.css-11xy1ze .hs-form-field >label{position:absolute;left:1.25rem;top:0.625rem;transform-origin:left;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));padding-left:0.25rem;padding-right:0.25rem;--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));transition-property:color transform;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));}.css-11xy1ze .hs-form-field >label:where(.dark, .dark *){--tw-bg-opacity:1;background-color:rgb(40 42 49 / var(--tw-bg-opacity));}.css-11xy1ze .hs-form-field >label .hs-form-required{display:none;}.css-11xy1ze .hs-form-field .input input::-webkit-input-placeholder{color:transparent!important;}.css-11xy1ze .hs-form-field .input input::-moz-placeholder{color:transparent!important;}.css-11xy1ze .hs-form-field .input input:-ms-input-placeholder{color:transparent!important;}.css-11xy1ze .hs-form-field .input input::placeholder{color:transparent!important;}.css-11xy1ze .hs-form-field .input input:where(.dark, .dark *){--tw-bg-opacity:1!important;background-color:rgb(40 42 49 / var(--tw-bg-opacity))!important;}.css-11xy1ze .hs-form-field:has(input:focus)>label,.css-11xy1ze .hs-form-field:has(input:not(:placeholder-shown))>label{--tw-translate-y:-1.4rem;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))!important;-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))!important;-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))!important;transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))!important;--tw-scale-x:.75!important;--tw-scale-y:.75!important;--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.css-11xy1ze .hs-form-field:has(input:focus)>label:where(.dark, .dark *),.css-11xy1ze .hs-form-field:has(input:not(:placeholder-shown))>label:where(.dark, .dark *){--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-11xy1ze input.hs-button{margin-top:0px;margin-bottom:0px;margin-left:0.5rem;height:3rem;border-width:2px;border-style:solid;--tw-border-opacity:1;border-color:rgb(23 93 220 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));font-size:1.125rem!important;line-height:1.25rem!important;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}.css-11xy1ze input.hs-button:where(.dark, .dark *){--tw-border-opacity:1;border-color:rgb(255 255 255 / var(--tw-border-opacity));--tw-text-opacity:1;color:rgb(28 30 36 / var(--tw-text-opacity));}.css-11xy1ze input.hs-button:hover{--tw-bg-opacity:1!important;background-color:rgb(23 93 220 / var(--tw-bg-opacity))!important;--tw-text-opacity:1!important;color:rgb(255 255 255 / var(--tw-text-opacity))!important;}.css-11xy1ze input.hs-button:where(.dark, .dark *):hover{--tw-bg-opacity:1!important;background-color:rgb(40 42 49 / var(--tw-bg-opacity))!important;}.css-11xy1ze .hs-error-msgs{width:100%;list-style-type:none;white-space:pre;padding-left:1rem;padding-top:0.5rem;}@media (min-width: 768px){.css-11xy1ze .hs-error-msgs{margin-top:0px;}}.css-11xy1ze .submitted-message{text-align:right;font-size:1.125rem;line-height:1.75rem;font-weight:700;}</style><div class="css-11xy1ze"><style data-emotion="css 16wz0wf">.css-16wz0wf{min-height:10rem;}@media print{.css-16wz0wf{display:none;}}</style><div class="bw-hubspot-form css-16wz0wf"><span class="bw-hubspot-form-copy"><h3 class="bw-hubspot-form-headline">Level up your cybersecurity knowledge.</h3><p>Subscribe to the newsletter.</p></span><style data-emotion="css 1tpazsy">.css-1tpazsy{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;width:100%;-webkit-box-pack:center;-ms-flex-pack:center;-webkit-justify-content:center;justify-content:center;padding:2rem;}</style><div class="bw-hubspot-form-loader css-1tpazsy"><style data-emotion="css 922w1y">.css-922w1y{height:4rem;width:4rem;-webkit-animation:spin 1s linear infinite;animation:spin 1s linear infinite;--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}@-webkit-keyframes spin{to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);-ms-transform:rotate(360deg);transform:rotate(360deg);}}@keyframes spin{to{-webkit-transform:rotate(360deg);-moz-transform:rotate(360deg);-ms-transform:rotate(360deg);transform:rotate(360deg);}}</style><svg class="css-922w1y" version="1.1" viewBox="0 0 32 32"><path d="M9.739 30.026c0.649 0 1.176-0.526 1.176-1.176s-0.527-1.176-1.176-1.176-1.176 0.527-1.176 1.176c0 0.65 0.527 1.176 1.176 1.176zM16.505 31.996c0.649 0 1.176-0.526 1.176-1.176s-0.527-1.176-1.176-1.176-1.176 0.527-1.176 1.176c0 0.65 0.527 1.176 1.176 1.176zM23.869 30.174c0.649 0 1.176-0.527 1.176-1.176s-0.527-1.176-1.176-1.176c-0.65 0-1.176 0.527-1.176 1.176s0.526 1.176 1.176 1.176zM4.863 25.762c0.765 0 1.386-0.621 1.386-1.386s-0.621-1.386-1.386-1.386c-0.765 0-1.386 0.621-1.386 1.386s0.621 1.386 1.386 1.386zM2.639 19.476c0.906 0 1.64-0.734 1.64-1.64s-0.734-1.64-1.64-1.64c-0.906 0-1.64 0.734-1.64 1.64s0.734 1.64 1.64 1.64zM4.021 12.32c1.069 0 1.936-0.867 1.936-1.936s-0.867-1.936-1.936-1.936c-1.069 0-1.936 0.867-1.936 1.936s0.867 1.936 1.936 1.936zM9.621 6.676c1.298 0 2.35-1.052 2.35-2.35s-1.052-2.35-2.35-2.35c-1.298 0-2.35 1.052-2.35 2.35s1.052 2.35 2.35 2.35zM18.813 5.324c1.469 0 2.66-1.191 2.66-2.66s-1.191-2.66-2.66-2.66c-1.469 0-2.66 1.191-2.66 2.66s1.191 2.66 2.66 2.66zM27.897 11.232c1.714 0 3.104-1.39 3.104-3.104s-1.39-3.104-3.104-3.104c-1.714 0-3.104 1.39-3.104 3.104s1.39 3.104 3.104 3.104z"></path></svg></div><div class="bw-hs-form-container" id="hsf-75d5b913-8a35-581e-a202-e3bbef35f0ba"><style data-emotion="css-global bq4vmd">.hs-form label{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}.hs-form fieldset{max-width:100%!important;}.hs-form br{margin-bottom:0.5rem;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;--tw-content:" ";content:var(--tw-content);}.hs-form .actions .hs-button{margin-top:0px;margin-bottom:0px;}.hs-form .inputs-list{list-style-type:none;}.hs-form .inputs-list .hs-form-booleancheckbox-display{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-align-items:flex-start;-webkit-box-align:flex-start;-ms-flex-align:flex-start;align-items:flex-start;gap:0.5rem;}.hs-form .inputs-list .hs-form-booleancheckbox-display .hs-input{margin-top:0.25rem;}@media (min-width: 1024px){.hs-form .inputs-list .hs-form-booleancheckbox-display .hs-input{margin-top:0.5rem;}}.hs-form .hs-form-required{margin-left:0.25rem;font-size:0.75rem;line-height:1.1;--tw-text-opacity:1;color:rgb(239 68 68 / var(--tw-text-opacity));}.hs-form .hs-form-field{margin-bottom:1rem;}.hs-form .hs-input:not([type='radio']):not([type='checkbox']){height:50px;width:100%;border-radius:0.25rem;border-width:1px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));padding:0.75rem;transition-property:border-color,box-shadow;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}.hs-form .hs-input:not([type='radio']):not([type='checkbox'])::-webkit-input-placeholder{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox'])::-moz-placeholder{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox']):-ms-input-placeholder{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox'])::placeholder{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox']):hover{--tw-border-opacity:1;border-color:rgb(171 180 189 / var(--tw-border-opacity));}.hs-form .hs-input:not([type='radio']):not([type='checkbox']):focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow, 0 0 #0000);--tw-ring-opacity:1;--tw-ring-color:rgb(23 93 220 / var(--tw-ring-opacity));}@media (min-width: 1024px){.hs-form .hs-input:not([type='radio']):not([type='checkbox']){height:54px;}}.hs-form .hs-input.is-placeholder{--tw-text-opacity:1!important;color:rgb(110 120 129 / var(--tw-text-opacity))!important;}.hs-form .hs-input[type='radio']{margin-right:0.5rem;}.hs-form select.hs-input{width:100%;-webkit-appearance:none;-moz-appearance:none;-ms-appearance:none;appearance:none;border-radius:0.25rem;border-right-width:8px;border-color:transparent;--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));background-image:url('data:image/svg+xml;base64,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');-webkit-background-size:40px 15px;background-size:40px 15px;-webkit-background-position:right 52%;background-position:right 52%;background-repeat:no-repeat;padding-left:0.75rem;padding-right:1.75rem;font-size:1.125rem;line-height:1.25;--tw-text-opacity:1;color:rgb(40 42 49 / var(--tw-text-opacity));outline-style:solid;outline-width:0px;}.hs-form select.hs-input:required:invalid{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs-fieldtype-textarea{min-height:10rem!important;width:100%!important;}.hs-form .hs-error-msgs{list-style-type:none;}.hs-form .hs-error-msgs li{line-height:1.1;}.hs-form .hs-error-msgs li label{margin-left:0.25rem;font-size:0.75rem;line-height:1rem;--tw-text-opacity:1;color:rgb(239 68 68 / var(--tw-text-opacity));}.hs-form .hs-button{margin-top:1rem;margin-bottom:1rem;cursor:pointer;border-radius:9999px;border-style:none;--tw-bg-opacity:1;background-color:rgb(23 93 220 / var(--tw-bg-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;text-align:center;font-size:1rem;line-height:1.5rem;font-weight:400;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));transition-property:background-color,color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;}.hs-form .hs-button:hover{--tw-bg-opacity:1;background-color:rgb(2 15 102 / var(--tw-bg-opacity));}.hs-form .hs-button:focus{outline:2px solid transparent;outline-offset:2px;--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(2px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow, 0 0 #0000);--tw-ring-opacity:1;--tw-ring-color:rgb(23 93 220 / var(--tw-ring-opacity));}.hs-form .hs-button.large{padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;}.hs-form .hs-richtext p{font-size:0.875rem;line-height:1.25;--tw-text-opacity:1;color:rgb(110 120 129 / var(--tw-text-opacity));}.hs-form .legal-consent-container p{font-size:0.75rem;line-height:1.1;--tw-text-opacity:1;color:rgb(110 120 129 / var(--tw-text-opacity));}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list{margin-top:1.5rem;margin-bottom:1.5rem;list-style-type:none;}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list li.hs-form-booleancheckbox label.hs-form-booleancheckbox-display{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list li.hs-form-booleancheckbox label.hs-form-booleancheckbox-display input.hs-input{width:0.75rem;-webkit-flex:none;-ms-flex:none;flex:none;border-radius:0.25rem;}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list li.hs-form-booleancheckbox label.hs-form-booleancheckbox-display span{margin-left:0.5rem;-webkit-flex:1 1 0%;-ms-flex:1 1 0%;flex:1 1 0%;line-height:1.1;--tw-text-opacity:1;color:rgb(110 120 129 / var(--tw-text-opacity));}.hs-form .legal-consent-container div.hs-fieldtype-booleancheckbox ul.inputs-list li.hs-form-booleancheckbox label.hs-form-booleancheckbox-display span p{line-height:1.1;}.hs-form .hs_trial_initiation_server_selected{position:relative;margin-bottom:2rem;}.hs-form .hs_trial_initiation_server_selected .inputs-list{margin-top:0.75rem;display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-flex-wrap:wrap;-webkit-flex-wrap:wrap;-ms-flex-wrap:wrap;flex-wrap:wrap;gap:1rem;}.hs-form .hs_trial_initiation_server_selected .inputs-list li{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;}.hs-form .hs_trial_initiation_server_selected .hs-form-radio-display{cursor:pointer;border-radius:0.5rem;border-width:2px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));padding-left:1rem;padding-right:1rem;padding-top:0.5rem;padding-bottom:0.5rem;transition-property:opacity;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}.hs-form .hs_trial_initiation_server_selected .hs-form-radio-display:hover{opacity:0.6;}.hs-form .hs_trial_initiation_server_selected .hs-form-radio-display:has(.hs-input:checked){--tw-border-opacity:1;border-color:rgb(23 93 220 / var(--tw-border-opacity));--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));opacity:1;}.hs-form .hs_trial_initiation_server_selected .hs-input[type='radio']{display:none;}.hs-form .hs_trial_initiation_server_selected >label{float:left;margin-bottom:0.5rem;vertical-align:middle;}.hs-form .hs_trial_initiation_server_selected .input{clear:both;}.hs-form .hs_trial_initiation_server_selected .hs-field-desc{position:relative;float:left;margin-left:0.5rem;display:inline-block!important;width:auto;}.hs-form .hs_trial_initiation_server_selected .hs-field-desc p{margin-bottom:0px;font-size:0.875rem;line-height:1.25rem;}.hs-form .hs_trial_initiation_server_selected .bw-hs-toolip-content{pointer-events:none;position:absolute;left:50%;top:0px;z-index:0;--tw-translate-x:-50%;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));width:300px;border-radius:0.5rem;border-width:1px;--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));padding:1rem;font-size:0.875rem;line-height:1.25rem;--tw-text-opacity:1;color:rgb(110 120 129 / var(--tw-text-opacity));--tw-shadow:0 4px 6px -1px rgb(0 0 0 / 0.1),0 2px 4px -2px rgb(0 0 0 / 0.1);--tw-shadow-colored:0 4px 6px -1px var(--tw-shadow-color),0 2px 4px -2px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow);--tw-translate-y:-0.5rem;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));opacity:0;transition-property:opacity,transform;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;}.hs-form .hs_trial_initiation_server_selected .bw-hs-toolip-content:before{position:absolute;left:50%;top:-22px;box-sizing:border-box;--tw-translate-x:-50%;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));--tw-content:'';content:var(--tw-content);border-width:11px;border-style:solid;border-color:transparent;--tw-border-opacity:1;border-bottom-color:rgb(171 180 189 / var(--tw-border-opacity));}.hs-form .hs_trial_initiation_server_selected .bw-hs-toolip-content:after{position:absolute;top:-1.25rem;left:50%;box-sizing:border-box;--tw-translate-x:-50%;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));--tw-content:'';content:var(--tw-content);border-width:10px;border-style:solid;border-color:transparent;--tw-border-opacity:1;border-bottom-color:rgb(255 255 255 / var(--tw-border-opacity));}.hs-form .hs_trial_initiation_server_selected .bw-mit-info-icon{position:relative;z-index:10;vertical-align:sub;--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.hs-form .hs_trial_initiation_server_selected .bw-mit-info-icon:after{display:inline-block;height:1rem;width:1rem;content:url(data:image/svg+xml;base64,PHN2ZyB2ZXJzaW9uPSIxLjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgdmlld0JveD0iMCAwIDMyIDMyIj4KPHBhdGggZmlsbD0iI0FCQjRCRCIgZD0iTTE2IDI2LjM2Yy0wLjI2NSAwLTAuNTItMC4xMDUtMC43MDctMC4yOTNzLTAuMjkzLTAuNDQyLTAuMjkzLTAuNzA3di0xMmMwLTAuMjY1IDAuMTA1LTAuNTIgMC4yOTMtMC43MDdzMC40NDItMC4yOTMgMC43MDctMC4yOTNjMC4yNjUgMCAwLjUyIDAuMTA1IDAuNzA3IDAuMjkzczAuMjkzIDAuNDQyIDAuMjkzIDAuNzA3djEyYzAgMC4yNjUtMC4xMDUgMC41MTktMC4yOTMgMC43MDdzLTAuNDQyIDAuMjkzLTAuNzA3IDAuMjkzek0xNiA4Ljg3OGMwLjY1NSAwIDEuMTg2LTAuNTMxIDEuMTg2LTEuMTg2cy0wLjUzMS0xLjE4Ni0xLjE4Ni0xLjE4NmMtMC42NTUgMC0xLjE4NiAwLjUzMS0xLjE4NiAxLjE4NnMwLjUzMSAxLjE4NiAxLjE4NiAxLjE4NnpNMTYgMzJjLTMuMTY1IDAtNi4yNTgtMC45MzgtOC44ODktMi42OTZzLTQuNjgyLTQuMjU3LTUuODkzLTcuMTgxYy0xLjIxMS0yLjkyNC0xLjUyOC02LjE0MS0wLjkxLTkuMjQ0czIuMTQxLTUuOTU1IDQuMzc5LTguMTkyYzIuMjM4LTIuMjM4IDUuMDg5LTMuNzYxIDguMTkyLTQuMzc5czYuMzIxLTAuMyA5LjI0NCAwLjkxYzIuOTI0IDEuMjExIDUuNDIyIDMuMjYyIDcuMTgxIDUuODkzczIuNjk2IDUuNzI1IDIuNjk2IDguODg5Yy0wLjAwNSA0LjI0Mi0xLjY5MiA4LjMwOS00LjY5MiAxMS4zMDhzLTcuMDY2IDQuNjg3LTExLjMwOCA0LjY5MnpNMTYgMmMtMi43NjkgMC01LjQ3NiAwLjgyMS03Ljc3OCAyLjM1OXMtNC4wOTcgMy43MjUtNS4xNTYgNi4yODNjLTEuMDYwIDIuNTU4LTEuMzM3IDUuMzczLTAuNzk3IDguMDg5czEuODc0IDUuMjEgMy44MzIgNy4xNjhjMS45NTggMS45NTggNC40NTIgMy4yOTEgNy4xNjggMy44MzFzNS41MzEgMC4yNjMgOC4wODktMC43OTdjMi41NTgtMS4wNjAgNC43NDUtMi44NTQgNi4yODMtNS4xNTZzMi4zNTktNS4wMDkgMi4zNTktNy43NzhjLTAuMDA0LTMuNzEyLTEuNDgxLTcuMjctNC4xMDUtOS44OTVzLTYuMTgzLTQuMTAxLTkuODk1LTQuMTA1djB6Ij48L3BhdGg+Cjwvc3ZnPg==);}.hs-form .hs_trial_initiation_server_selected .bw-mit-info-icon:hover+.bw-hs-toolip-content,.hs-form .hs_trial_initiation_server_selected .bw-hs-toolip-content:hover{pointer-events:auto;--tw-translate-y:2.25rem;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));opacity:1;}</style></div></div></div><style data-emotion="css 5of1bp">.css-5of1bp:where(.dark, .dark *){--tw-border-opacity:1;border-color:rgb(110 120 129 / var(--tw-border-opacity));}</style><hr class="css-5of1bp"/><style data-emotion="css 1ezhu16">.css-1ezhu16{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-flex-direction:column;-ms-flex-direction:column;flex-direction:column;-webkit-align-items:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;-webkit-box-pack:justify;-webkit-justify-content:space-between;justify-content:space-between;gap:1rem;}@media not all and (min-width: 1024px){.css-1ezhu16{gap:1.5rem;}}@media (min-width: 1024px){.css-1ezhu16{-webkit-flex-direction:row;-ms-flex-direction:row;flex-direction:row;}}@media (min-width: 1280px){.css-1ezhu16{gap:1.5rem;}}.css-1ezhu16 >p{font-size:1rem;line-height:1.5rem;}</style><div class="css-1ezhu16"><style data-emotion="css 1p714mp">.css-1p714mp{text-align:center;}@media (min-width: 1024px){.css-1p714mp{text-align:left;}}.css-1p714mp >p>a:hover{--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}.css-1p714mp:where(.dark, .dark *)>p>a:hover{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.css-1p714mp >p>a{margin-left:0.25rem;text-decoration-line:none;}.css-1p714mp >p{margin-bottom:0px;font-size:1rem;line-height:1.5rem;}</style><div class="css-1p714mp"><p>© 2024 Bitwarden, Inc. <style data-emotion="css 1v5663i">.css-1v5663i{text-decoration-line:underline;--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}.css-1v5663i:where(.dark, .dark *){--tw-text-opacity:1;color:rgb(44 221 233 / var(--tw-text-opacity));}.css-1v5663i:where(.dark, .dark *):hover{--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}</style><a class="css-1v5663i" href="/terms/">Terms</a> <a class="css-1v5663i" href="/privacy/">Privacy</a> <a href="/#osano" class="css-1v5663i">Cookie Settings</a> <a class="css-1v5663i" href="/sitemap/">Sitemap</a></p></div><style data-emotion="css k7rn5i">.css-k7rn5i{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-box-flex-wrap:wrap;-webkit-flex-wrap:wrap;-ms-flex-wrap:wrap;flex-wrap:wrap;gap:0.75rem;}@media (min-width: 1280px){.css-k7rn5i{gap:1rem;}}</style><div class="css-k7rn5i"><style data-emotion="css 1w2605s">.css-1w2605s{font-size:1rem;line-height:1.5rem;}.css-1w2605s:hover{--tw-text-opacity:1;color:rgb(23 93 220 / var(--tw-text-opacity));}.css-1w2605s:where(.dark, .dark *):hover{--tw-text-opacity:1;color:rgb(171 180 189 / var(--tw-text-opacity));}.css-1w2605s span{font-size:1.2rem;}@media (min-width: 1280px){.css-1w2605s span{font-size:1.4rem;}}</style><a href="https://twitter.com/bitwarden" target="_blank" rel="noreferrer" class="css-1w2605s"><style data-emotion="css 5v69cf">.css-5v69cf{font-family:bwi-font;}</style><span data-name="bwi-twitter" class="css-5v69cf"></span></a><a href="https://reddit.com/r/bitwarden" target="_blank" rel="noreferrer" class="css-1w2605s"><span data-name="bwi-reddit" class="css-5v69cf"></span></a><a href="https://community.bitwarden.com/" target="_blank" rel="noreferrer" class="css-1w2605s"><span data-name="bwi-community" class="css-5v69cf"></span></a><a href="https://github.com/bitwarden" target="_blank" rel="noreferrer" class="css-1w2605s"><span data-name="bwi-github" class="css-5v69cf"></span></a><a href="https://www.youtube.com/channel/UCId9a_jQqvJre0_dE2lE_Rw" target="_blank" rel="noreferrer" class="css-1w2605s"><span data-name="bwi-youtube" class="css-5v69cf"></span></a><a href="https://www.linkedin.com/company/bitwarden1" target="_blank" rel="noreferrer" class="css-1w2605s"><span data-name="bwi-linkedin" class="css-5v69cf"></span></a><a href="https://www.facebook.com/bitwarden/" target="_blank" rel="noreferrer" class="css-1w2605s"><span data-name="bwi-facebook" class="css-5v69cf"></span></a><a href="https://www.instagram.com/bitwarden/" target="_blank" rel="noreferrer" class="css-1w2605s"><span data-name="bwi-instagram" class="css-5v69cf"></span></a><a href="https://fosstodon.org/@bitwarden" target="_blank" rel="me" class="css-1w2605s"><span data-name="bwi-mastodon" class="css-5v69cf"></span></a><a href="https://www.twitch.tv/bitwardenlive" target="_blank" rel="noreferrer" class="css-1w2605s"><span data-name="bwi-twitch" class="css-5v69cf"></span></a></div><div><div><style data-emotion="css iuriuk">.css-iuriuk{position:fixed;bottom:2rem;right:2rem;border-radius:2.25rem;--tw-bg-opacity:1;background-color:rgb(230 235 239 / var(--tw-bg-opacity));padding:1.5rem;font-size:1.25rem;line-height:1.75rem;--tw-shadow:0 25px 50px -12px rgb(0 0 0 / 0.25);--tw-shadow-colored:0 25px 50px -12px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow);transition-property:all;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:150ms;--tw-scale-x:0;--tw-scale-y:0;-webkit-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-moz-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));-ms-transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));transform:translate(var(--tw-translate-x), var(--tw-translate-y)) rotate(var(--tw-rotate)) skewX(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y));opacity:0;}</style><div class="css-iuriuk">This site is available in English. <style data-emotion="css x7f5a7">.css-x7f5a7{padding-top:0.5rem;}</style><div class="css-x7f5a7"><style data-emotion="css 1p80nth">.css-1p80nth{margin-right:0.5rem;--tw-text-opacity:1!important;color:rgb(255 255 255 / var(--tw-text-opacity))!important;}</style><style data-emotion="css 1f0tyn8">.css-1f0tyn8{transition-property:background-color,color,box-shadow,border-color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;display:inline-block;border-radius:9999px;border-width:2px;border-style:solid;text-align:center;--tw-border-opacity:1;border-color:rgb(23 93 220 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(23 93 220 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));margin-right:0.5rem;--tw-text-opacity:1!important;color:rgb(255 255 255 / var(--tw-text-opacity))!important;}.css-1f0tyn8:hover{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-1f0tyn8:focus{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));outline:2px solid transparent;outline-offset:2px;}.group:hover .css-1f0tyn8{--tw-border-opacity:1;border-color:rgb(26 65 172 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(26 65 172 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}.css-1f0tyn8:where(.dark, .dark *){--tw-border-opacity:1;border-color:rgb(255 255 255 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(255 255 255 / var(--tw-bg-opacity));--tw-text-opacity:1;color:rgb(28 30 36 / var(--tw-text-opacity));}.css-1f0tyn8:where(.dark, .dark *):hover{--tw-border-opacity:1;border-color:rgb(255 255 255 / var(--tw-border-opacity));background-color:transparent;--tw-text-opacity:1;color:rgb(255 255 255 / var(--tw-text-opacity));}</style><a aria-current="page" aria-label="go to /help/bitwarden-security-white-paper/" data-testid="cta-link" class="css-1f0tyn8" href="/help/bitwarden-security-white-paper/"><span class="css-s5xdrg">Go to English</span></a><style data-emotion="css lr36n9">.css-lr36n9{transition-property:background-color,color,box-shadow,border-color;transition-timing-function:cubic-bezier(0.4, 0, 0.2, 1);transition-duration:300ms;padding-left:1.5rem;padding-right:1.5rem;padding-top:0.75rem;padding-bottom:0.75rem;font-size:1.125rem;line-height:1.75rem;display:inline-block;padding-left:0px;padding-right:0px;}.css-lr36n9:hover{--tw-text-opacity:1;color:rgb(2 15 102 / var(--tw-text-opacity));}</style><a href="#" aria-label="go to #" data-testid="cta-link" class=" css-lr36n9"><span class="css-s5xdrg">Stay Here<style data-emotion="css ihq8ma">.css-ihq8ma{margin-left:0.5rem;font-family:bwi-font;font-size:16px!important;}</style><span class="css-ihq8ma"></span></span></a></div></div><style data-emotion="css bjn8wh">.css-bjn8wh{position:relative;}</style><div class="css-bjn8wh"><style data-emotion="css 10nfz87">.css-10nfz87{height:2.5rem;width:auto;cursor:pointer;-webkit-appearance:none;-moz-appearance:none;-ms-appearance:none;appearance:none;border-radius:2.25rem;border-width:1px;--tw-border-opacity:1;border-color:rgb(230 235 239 / var(--tw-border-opacity));background-color:transparent;padding-left:1rem;padding-right:2rem;outline-color:transparent;}.css-10nfz87:hover{--tw-border-opacity:1;border-color:rgb(207 212 218 / var(--tw-border-opacity));--tw-bg-opacity:1;background-color:rgb(243 246 249 / var(--tw-bg-opacity));}.css-10nfz87:focus-visible{border-width:1px;--tw-border-opacity:1;border-color:rgb(23 93 220 / var(--tw-border-opacity));--tw-shadow:var(--tw-shadow-colored);--tw-shadow-colored:0 0 0 1px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow);--tw-shadow-color:#175ddc;outline:2px solid transparent;outline-offset:2px;}.css-10nfz87:where(.dark, .dark *):hover{background-color:transparent;}</style><select id="footer-language" class="css-10nfz87"><option value="en-us" style="background-color:indigoBlue" selected="">English</option><option value="de-de" style="background-color:indigoBlue">Deutsch</option><option value="es-la" style="background-color:indigoBlue">Español</option><option value="fr-fr" style="background-color:indigoBlue">Français</option><option value="ja-jp" style="background-color:indigoBlue">日本語</option><option value="nl-nl" style="background-color:indigoBlue">Nederlands</option></select><style data-emotion="css jf24xy">.css-jf24xy{pointer-events:none;position:absolute;right:1rem;top:0px;display:block;font-family:bwi-font;font-size:0.625rem;line-height:2.5rem;}</style><span class="css-jf24xy"></span></div></div></div></div></div></div></footer></div><div id="gatsby-announcer" style="position:absolute;top:0;width:1px;height:1px;padding:0;overflow:hidden;clip:rect(0, 0, 0, 0);white-space:nowrap;border:0" aria-live="assertive" aria-atomic="true"></div></div><script id="gatsby-script-loader">/*<![CDATA[*/window.pagePath="/help/bitwarden-security-white-paper/";/*]]>*/</script> <script id="gatsby-chunk-mapping" > window.___chunkMapping="{\"polyfill\":[\"/polyfill-e8af0db43841b98310c5.js\"],\"app\":[\"/app-833bf136021c48fb0759.js\"],\"component---src-pages-404-tsx\":[\"/component---src-pages-404-tsx-2c717ba9618b187617d3.js\"],\"component---src-pages-blog-tsx\":[\"/component---src-pages-blog-tsx-30edb1e7178a92c351fe.js\"],\"component---src-pages-bw-tools-blog-og-tsx\":[\"/component---src-pages-bw-tools-blog-og-tsx-7ea16473a5a5c351c26b.js\"],\"component---src-pages-bw-tools-help-og-tsx\":[\"/component---src-pages-bw-tools-help-og-tsx-ed67f9591155125697a5.js\"],\"component---src-pages-bw-tools-sales-quote-tsx\":[\"/component---src-pages-bw-tools-sales-quote-tsx-357eb8dc1f4144f3f285.js\"],\"component---src-pages-contact-tsx\":[\"/component---src-pages-contact-tsx-a19c300e1e84d6077140.js\"],\"component---src-pages-data-security-in-age-of-ai-index-tsx\":[\"/component---src-pages-data-security-in-age-of-ai-index-tsx-8bbf2957e7364cc39857.js\"],\"component---src-pages-events-tsx\":[\"/component---src-pages-events-tsx-2e5260eeaf1f19503203.js\"],\"component---src-pages-help-index-tsx\":[\"/component---src-pages-help-index-tsx-f84829457b88bd616f82.js\"],\"component---src-pages-learning-tsx\":[\"/component---src-pages-learning-tsx-44950b3cc5de26949ff9.js\"],\"component---src-pages-newsfeed-tsx\":[\"/component---src-pages-newsfeed-tsx-43af87853c9870fa4d24.js\"],\"component---src-pages-passphrase-strength-game-tsx\":[\"/component---src-pages-passphrase-strength-game-tsx-faea48066fdc1b9327ce.js\"],\"component---src-pages-preview-tsx\":[\"/component---src-pages-preview-tsx-d7e9c27a7e6d2115c12d.js\"],\"component---src-pages-search-tsx\":[\"/component---src-pages-search-tsx-5bbe77285c5947a6e138.js\"],\"component---src-pages-sitemap-tsx\":[\"/component---src-pages-sitemap-tsx-76bccb13857ed03a5392.js\"],\"component---src-pages-tips-tsx\":[\"/component---src-pages-tips-tsx-f5bec29223cbb6dad139.js\"],\"component---src-templates-blog-page-tsx\":[\"/component---src-templates-blog-page-tsx-314379adad4bcffeb86d.js\"],\"component---src-templates-careers-post-tsx\":[\"/component---src-templates-careers-post-tsx-b353b8eadbf3b94e381a.js\"],\"component---src-templates-event-page-tsx\":[\"/component---src-templates-event-page-tsx-91efe2f8c0560422dbee.js\"],\"component---src-templates-help-article-tsx\":[\"/component---src-templates-help-article-tsx-b9a38c343faa9704d518.js\"],\"component---src-templates-landing-page-tsx\":[\"/component---src-templates-landing-page-tsx-4b5a177ebd4e0ffe9baa.js\"],\"component---src-templates-learning-page-tsx\":[\"/component---src-templates-learning-page-tsx-d3969ac0f2128b64ee6b.js\"],\"component---src-templates-presentation-post-tsx\":[\"/component---src-templates-presentation-post-tsx-42d5ce3ecfdb1a444b6a.js\"],\"component---src-templates-redirect-tsx\":[\"/component---src-templates-redirect-tsx-d056147f762525a15278.js\"],\"component---src-templates-resources-gated-tsx\":[\"/component---src-templates-resources-gated-tsx-b85d68997a23ef1af5f2.js\"],\"component---src-templates-resources-list-tsx\":[\"/component---src-templates-resources-list-tsx-32781ed7691b69dcdc88.js\"],\"component---src-templates-resources-new-tsx\":[\"/component---src-templates-resources-new-tsx-42bc6ed4fad4b0395a6a.js\"],\"component---src-templates-resources-video-page-tsx\":[\"/component---src-templates-resources-video-page-tsx-da1c3bf8946e56dbedc4.js\"],\"component---src-templates-swagger-api-tsx\":[\"/component---src-templates-swagger-api-tsx-0c6d875f85ef0e405ff7.js\"]}"; </script> <script>window.___webpackCompilationHash="612c690c75cdc278e79a";</script><script src="/webpack-runtime-f9a9fa0a08a9a903f209.js" nomodule></script><script src="/polyfill-e8af0db43841b98310c5.js" nomodule></script><script src="/webpack-runtime-f9a9fa0a08a9a903f209.js" async></script><script src="/framework-4d871544ffbb6d39e2ac.js" async></script><script src="/78c2515a-ccb1d28ccbbbdba9369d.js" async></script><script src="/c9cbcf99-2eb52476332934b01858.js" async></script><script src="/app-833bf136021c48fb0759.js" async></script></body></html>