Bitwarden

Bitwarden is the easiest password manager to recommend to almost anyone. It's fully open source and end-to-end encrypted, with regular independent audits, including app audits by Cure53 and others. A 2026 ETH Zurich study tested it against a hypothetically malicious server and found 12 attacks, the most of any manager it tested; Bitwarden says it has fixed or is fixing most of them and kept the rest as deliberate design choices. Its free tier is unusually complete, covering unlimited passwords on unlimited devices and you can even self-host the server if you want full control. In January 2026 Bitwarden raised its paid prices for the first time in a decade but Premium is still cheap and the free plan remains enough for most people. In April 2026 a malicious version of its command-line tool was briefly published to npm in the wider Checkmarx supply-chain attack. Bitwarden fixed it in 2026.4.1 and says it found no evidence that vault data was accessed. It's a US-based company, which some privacy-minded users weigh against its otherwise strong transparency record.