How to Use Bitwarden: The Beginner's Guide (First Vault, Autofill, Passkeys, and the Master Password Rule)

CodexFuse Team · 2026-10-28T20:27:16.533Z · 14 min read

Bitwarden is a free, open-source password manager. This beginner's guide shows you how to set up your first vault, choose a master password, turn on autofill, import passwords, and use passkeys safely.

Learning how to use Bitwarden takes about half an hour, and most of that is moving your existing passwords in — not learning the app itself. Bitwarden is a free, open-source password manager: one encrypted vault that stores your logins, cards, identities, and secure notes, and syncs them across your browser, phone, and computer.

You remember one master password, and Bitwarden remembers the rest. This beginner's guide walks you through the whole first setup in order — creating your account, choosing a master password you will not lose, installing the extension, turning on autofill, importing your old passwords, and using passkeys and Send — so you can stop reusing the same few passwords everywhere.

If you are still deciding whether a password manager is right for you at all, start with our guide to what is a password manager — it explains the idea before the setup. If you already know you want Bitwarden, the only password you need to invent yourself is the master password, and a password generator can help you test what a long, random one looks like before you settle on a memorable version of your own.

How do you use Bitwarden?

To use Bitwarden, create a free account at bitwarden.com, choose a unique master password, install the browser extension and the mobile app, turn on autofill, and import your saved passwords from your browser or your old manager. After that, Bitwarden offers to save every new login you create and fills it in for you on your next visit. That is the whole system at its simplest — everything else is organizing the vault and switching on the safety features around it.

1. Create your account. Sign up at bitwarden.com with your email address and a master password you use nowhere else.
2. Install it everywhere. Add the browser extension on your computer and the app on your phone, and sign in to the same account on both.
3. Turn on two-step login. Add an authenticator app in Settings, and save the recovery code somewhere outside the vault.
4. Import your old passwords. Use Bitwarden's import guides for your browser or your previous manager, then delete the exported file.
5. Turn on autofill. Make Bitwarden your autofill provider on your phone and in your browser, so saved logins fill themselves in.
6. Change your riskiest passwords. Start with email, banking, and cloud storage, and let Bitwarden's generator make each replacement unique.
7. Set up Emergency Access. Name a trusted contact in advance, so a forgotten master password does not mean a lost vault forever.

What is Bitwarden, and why start with it?

Bitwarden is an open-source password manager, which means its code is available for public review rather than hidden inside a closed product. That openness is a large part of why security-minded users trust it with their logins, and it is also why the core product is free rather than a trial. Bitwarden's own pricing page describes the free plan as basic password management that is always free, with unlimited devices and unlimited passwords, passkey management, a username and password generator, and Bitwarden Send included.

The practical difference from saving passwords in your browser is sync and control. A browser's saved passwords stay tied to that browser, while a Bitwarden vault follows you across browsers, phones, and computers, and lets you organize logins into folders and favorites. If you are choosing between managers rather than starting from scratch, our best password manager comparison puts Bitwarden beside the other leading options, so you can see where its free plan sits before you commit to the setup below.

How do you choose a master password Bitwarden cannot reset?

Your master password is the one password Bitwarden cannot reset for you, because its zero-knowledge encryption means even Bitwarden cannot read it. Bitwarden's own help pages state this plainly: your master password cannot be reset or recovered, and the company recommends storing it securely and turning on two-factor authentication. That single rule shapes everything else in this guide, so treat the master password differently from every password you are about to store.

Pick something long, unique, and memorable — a phrase you can type reliably, not a short word with a number on the end. Never reuse a password you already use elsewhere, and never store the master password itself inside the vault, where it does you no good if you are locked out.

For the length question in detail, see our guide to how long should a password be, which explains why length beats clever substitutions. Write the master password on paper and keep that paper somewhere safe, or store it with a trusted person — a paper copy cannot be phished, and it is the simplest recovery plan that actually works.

How do you set up your first vault?

Your first vault starts in the Bitwarden web app, which Bitwarden describes as the richest experience for personal users, because settings such as two-step login are managed there. When you first sign in, you land on the All vaults view, which lists every item you save, including logins, cards, identities, and secure notes. From there, the Filters column lets you organize items into favorites and folders, so a growing vault stays findable.

To add your first login, choose New, then Login, and fill in an item name you will recognize, the username, the password, and the website address. Bitwarden's own getting-started guide uses a Gmail account as its example, and the same pattern works for any site: the website address is what lets Bitwarden match the login to the right page later. Save one login this way before you import anything, so you understand what an item looks like and how to edit it.

Next, set up two-step login before you fill the vault any further. In the web app, go to Settings, then Security, then Two-step login, and choose the authenticator app option, which Bitwarden recommends for a free account.

Scan the QR code with an authenticator app, enter the six-digit code it shows, and then view and save your recovery code. Save that recovery code on the same paper as your master password, not inside the vault — a recovery code locked inside the thing it is meant to unlock is no help at all.

How do you import passwords into Bitwarden?

Importing moves your existing passwords in bulk, so you do not have to retype dozens of logins by hand. Bitwarden publishes specialized import guides for LastPass, 1Password, Dashlane, macOS and Safari, Google Chrome, and Firefox, which means the steps match the place your passwords currently live. In general, you export from the old home, import that file into Bitwarden's web vault, and then check that the count of imported items looks right before you go any further.

The step beginners skip is deleting the exported file afterwards. An exported password file is usually plain text, which means anyone who finds it can read every password in it, so delete it from your downloads folder and your trash once the import is confirmed.

After importing, open a few important logins and check that the usernames, passwords, and website addresses landed correctly. A bad import is easy to spot — a login with the wrong address will not autofill — and much easier to fix on day one than after you have deleted the old manager.

What if your passwords are only in your browser?

Browser-only passwords import the same way, through the browser's own export and Bitwarden's import guide for that browser. Export from the browser's password settings, import into Bitwarden, and then turn off the browser's own password saving so you do not end up with two managers fighting over every login form. Keep the browser's saved passwords until you have tested Bitwarden's autofill on a few sites, then clear them from the browser so there is only one place your passwords live.

How do you turn on autofill in Bitwarden?

Autofill is what makes a password manager feel effortless, and it only works once Bitwarden is the app your device actually asks to fill passwords. On your phone, open your settings and make Bitwarden the password autofill provider, then turn on Face ID, fingerprint, or PIN unlock so you are not typing your master password twenty times a day. In your browser, install the Bitwarden extension and sign in, so saved logins are offered on the pages they belong to.

Test autofill on a site you already saved before you trust it everywhere. Open the site's login page, tap or click the username or password field, and Bitwarden should offer the matching login.

If nothing appears, check two things first: that you are signed in and the vault is unlocked, and that the saved item's website address matches the page you are on. A login saved without an address, or with the wrong one, is the most common reason autofill stays silent.

When you create a new account anywhere, let Bitwarden save it at the moment you sign up. The extension usually offers to save the new login automatically, and saying yes is what keeps the vault current without any extra work. If it does not offer, add the login by hand right away — a password you meant to save later is a password you will be resetting later.

How do you use Bitwarden passkeys?

A passkey is a login method that replaces a password with a cryptographic key pair, so there is nothing to type, reuse, or phish. Bitwarden's core features include passkey management and usage on the free plan, which means you can store passkeys in the same vault as your passwords and use them across your devices. When a site or app offers to create a passkey, Bitwarden can save it, and on your next visit it offers the passkey instead of asking for a password.

Passkeys do not replace your master password, and they do not work everywhere yet. Use them where they are offered — especially on your email and cloud accounts, where a stolen password does the most damage — and keep the password login saved alongside them until you are sure the passkey works on all your devices. If a site offers a passkey but Bitwarden does not offer to save it, save the password login first and try the passkey again from a different browser or device before assuming the site is at fault.

How do you share safely with Bitwarden Send?

Bitwarden Send lets you share a piece of text or a file through an encrypted link, even with someone who does not have a Bitwarden account. Bitwarden's pricing page lists Send among the core features included in every account, and describes it as transmitting data securely to anyone, with end-to-end encryption. That makes it the right tool for the awkward cases: a Wi-Fi password for a guest, a document a colleague needs once, or a login a family member needs in an emergency.

Share as little as possible, and only with the person who needs it. Send the login, not your whole vault, and never send your master password through Send or any other channel — the master password is the key to everything, and sharing it gives away the vault itself. For ongoing sharing with a partner or a team, an organization vault with shared collections is the better structure, because access can be changed or removed later without resending anything.

What does Bitwarden cost? Free versus Premium

Bitwarden's free plan already covers the essentials most people need: unlimited devices and passwords, passkey management, the password generator, and Send. Premium adds the advanced features, and Bitwarden's own getting-started page prices it at $1.65 per month, with the advanced capabilities listed below. Some older guides still quote an earlier annual price; the figure in this table is the one on Bitwarden's own pages on October 28, 2026, so check the pricing page again before you pay, because plan prices change.

The honest paid line is narrower than the marketing suggests. If you only need storage, autofill, passkeys, and Send, the free plan is enough, and paying adds nothing you will notice day to day. Premium earns its price when you want a hardware security key, the built-in authenticator for timed codes, file attachments in the vault, or Emergency Access — and that last one, covered next, is the feature that matters most to beginners.

Should you switch from 1Password to Bitwarden?

Switching makes sense when the free core is what you actually need, or when you prefer an open-source manager whose code can be reviewed publicly. Bitwarden publishes a dedicated import guide for 1Password, so the move is an export, an import, and a check that the item count matches — the same process as any other switch in this guide. Test autofill on your five most-used sites before you cancel anything, and keep the old manager until the new vault has proved itself for a week.

Switching does not make sense as a reflex. If your current manager already holds passkeys, shared family vaults, and hardware-key login exactly the way you like them, moving only to save money can cost you a weekend of cleanup for no real gain. The question to ask is not which manager wins a comparison table, but which one you will actually keep using — the best vault is the one that stays current, and that depends on the setup in this guide more than on the brand on it.

What should go in your vault first?

Not every password matters equally, so change them in order of damage, not alphabetically. The table below is the order this guide recommends for your first week, because these accounts can reset or unlock almost everything else you own. Work through it one row at a time, and let Bitwarden generate each replacement so no two rows share a password.

What is Emergency Access, and should you set it up on day one?

Emergency Access lets you name other Bitwarden users as trusted contacts who can request access to your vault if you are unreachable or you forget your master password. Bitwarden's help pages explain that a contact can be granted view access, which lets them review your vault items, or takeover access, which lets them set a new master password for your account. As the account holder, you can approve or deny a request before the wait time you configured expires, or remove the contact entirely.

Set it up on day one, because it is the only safety net that works after a forgotten master password. Pick someone you trust completely — a partner, a parent, or a close friend who also uses Bitwarden — and tell them they are your contact and what the wait time means.

Emergency Access is a Premium feature, so if you are on the free plan, your day-one substitute is the paper copy of your master password and recovery code from the setup section above. Either way, the rule is the same: a vault with no recovery plan is a vault you can lose in one forgotten phrase.

What are the mistakes beginners make with Bitwarden?

The most common mistakes are not technical, and they all come from treating the vault like just another app. Avoid these five, and the rest of the setup mostly takes care of itself.

1. Reusing the master password somewhere else. If that other site leaks, your vault is open. The master password must exist in exactly one place: your memory and your paper copy.
2. Storing the master password inside the vault. It feels tidy and it is useless — you cannot open the vault to read the password that opens the vault.
3. Skipping two-step login. A vault protected by a password alone is one leaked password away from being opened. An authenticator app costs two minutes and closes that gap.
4. Skipping the recovery code. Losing your phone without a saved recovery code turns a small problem into a lockout. Save the code outside the vault on setup day.
5. Leaving the exported password file on your computer. Delete the import file and empty the trash once the import is confirmed, so a plain-text copy of your passwords is not sitting in your downloads folder.
6. Never checking vault health. Premium's health reports flag weak, reused, and exposed passwords, but even on the free plan you can sort by age and change the oldest logins first. A vault full of ten-year-old reused passwords is barely better than no vault at all.

Sources

• Bitwarden — Pricing page — https://bitwarden.com/pricing/ (core features included in every account: unlimited devices and passwords, passkey management, Send; prices checked October 28, 2026)
• Bitwarden Help — Getting Started / Password Manager Web App — https://bitwarden.com/help/getting-started/ (vault item types, adding a login, two-step login with an authenticator app and recovery code, import guides, Premium at $1.65 per month and its advanced features)
• Bitwarden Help — Request and Grant Emergency Access — https://bitwarden.com/help/request-and-grant-emergency-access/ (view and takeover access, approve or deny before the wait time expires)
• Bitwarden — Zero-knowledge encryption note on the master password — https://bitwarden.com/tips/ (master password cannot be reset or recovered)
• eHelperTeam — "Bitwarden Review: Why This Free Password Manager Beats Paid Competitors" (updated May 24, 2026) — https://ehelperteam.com/12692/bitwarden-review-why-this-free-password-manager (open-source model, account, vault, extension, and Send beginner steps)
• InsiderBits — "Password manager app: never forget your passwords again" (October 27, 2026) — https://insiderbits.com/how-to/password-manager-app-2/ (mobile setup: account, first login, autofill, test on a login page)
• Fahimai — "How to Use Bitwarden: Step-by-Step Guideline in 2025" — https://www.fahimai.com/ko/how-to-use-bitwarden (account, extension and app, import, new passwords, generator)

Frequently Asked Questions

Is Bitwarden free?

Yes, for the core product. Bitwarden's pricing page describes basic password management as always free, with unlimited devices and unlimited passwords, passkey management, a password generator, and Send included. Premium, at $1.65 per month on Bitwarden's own pages on October 28, 2026, adds advanced two-step login, encrypted file attachments, an integrated authenticator, Emergency Access, and vault health reports.

What happens if I forget my Bitwarden master password?

Bitwarden cannot reset or recover it, because zero-knowledge encryption means the company cannot read it either. That is why this guide puts a paper copy and Emergency Access on day one: a trusted contact with Emergency Access can request view or takeover access, or your paper copy lets you log in and change nothing else. Without either, a forgotten master password means starting a new vault from scratch.

Does Bitwarden work on all my devices?

Yes. The free plan includes unlimited devices, with browser extensions, desktop apps, mobile apps, and the web vault all signing in to the same account. Save a login on your computer and it appears on your phone once the vault syncs, which is the point of the manager: one vault, everywhere you log in.

Can Bitwarden store passkeys as well as passwords?

Yes. Passkey management and usage are included in Bitwarden's core features, so passkeys live in the same vault as your passwords. Where a site offers a passkey, Bitwarden can save it and offer it on your next visit, while the password login stays saved alongside it until you are sure the passkey works on all your devices.

Does the person I share with through Bitwarden Send need an account?

No. Bitwarden describes Send as transmitting data securely to anyone, even non-users, with end-to-end encryption, so the recipient opens an encrypted link rather than signing up first. Share only the single item they need, and never send your master password through Send or any other channel.