Bitwarden is the world's most popular open-source password manager and the best free option available in 2025. But setting it up correctly — importing your existing passwords, enabling autofill, using it across devices, and getting the most from its features — takes a bit of guidance if you're starting from scratch. This complete tutorial covers everything: from creating your first account to using advanced features like the security health report, Bitwarden Send, and the built-in 2FA authenticator. By the end, you'll have a fully configured password manager that saves you time every single day.
Bitwarden is free (unlimited passwords, unlimited devices, forever), open source (independently audited), and has never been breached. See our full Bitwarden review for a detailed breakdown of why we recommend it.
📋 In This Tutorial
- Step 1: Create Your Bitwarden Account
- Step 2: Create Your Master Password
- Step 3: Install the Browser Extension
- Step 4: Import Your Existing Passwords
- Step 5: Master Autofill
- Step 6: Set Up the Mobile App
- Step 7: Saving New Passwords
- Step 8: Using the Password Generator
- Step 9: Enable 2FA on Your Bitwarden Account
- Step 10: Run the Vault Health Report
- Bonus: Secure Notes, Send, and Other Features
- When to Upgrade to Premium ($10/yr)
Step 1: Create Your Bitwarden Account
- Go to bitwarden.com and click "Get Started" or "Create Account"
- Enter your email address (use your personal email — not a work email you might lose access to)
- Enter a display name (optional)
- Create your master password (see Step 2 below)
- Re-enter the master password to confirm
- Click "Create Account" and verify your email via the confirmation link Bitwarden sends
That's it — your Bitwarden account is created. You're now looking at the Bitwarden web vault at vault.bitwarden.com, which is your control center for managing your passwords from any browser.
Step 2: Create a Master Password You Won't Forget
Your master password is the only password Bitwarden cannot recover for you. Choose wisely. The best approach: a random passphrase of 4-5 unrelated words, separated by hyphens or spaces.
Examples (generate your own — don't use these): carpet-thunder-invoice-moon or purple-staple-ocean-lamp-seven
A 4-word passphrase is both more secure than a typical complex password AND easier to remember. See our full guide on how to remember your master password for techniques and backup strategies.
Write your master password on paper and store it somewhere physically secure (a home safe, a trusted family member's care, a safety deposit box). Not on your computer. Not in your email. Physical paper in a secure location. This is your emergency backup if you ever forget it.
Step 3: Install the Browser Extension
The browser extension is how you interact with Bitwarden on desktop — it's what fills in passwords when you visit websites.
Chrome
- Search "Bitwarden" in the Chrome Web Store, or go directly to the Bitwarden extension page
- Click "Add to Chrome" → "Add extension"
- Click the puzzle piece icon (🧩) in Chrome's toolbar → click the pin icon next to Bitwarden to keep it visible
- Click the Bitwarden icon → log in with your email and master password
Firefox
Search "Bitwarden" in Firefox Add-ons (addons.mozilla.org) and install. Same process.
Safari (Mac)
Download Bitwarden from the Mac App Store → open the app → enable the Safari extension in Safari → Settings → Extensions → Bitwarden.
After installing: test it on a site you know — go to a login page you have credentials for, click the Bitwarden extension icon, and confirm you see matching credentials. If Bitwarden is empty at this point, proceed to Step 4 (import).
Step 4: Import Your Existing Passwords
You don't need to manually enter all your passwords. Import them from your browser in minutes.
Export from Chrome:
- Go to passwords.google.com → click the gear icon ⚙️ → "Export passwords"
- Confirm with your Google password → save the .csv file to your Desktop
Import to Bitwarden:
- Go to vault.bitwarden.com → click Tools → Import Data
- Select "Chrome (csv)" from the format dropdown
- Click "Choose File" → select your exported CSV
- Click "Import Data"
- Delete the CSV file immediately from your Desktop and empty the Recycle Bin/Trash — it contains all your passwords in plaintext
See our complete password import guide for Safari, Firefox, Edge, and LastPass-specific steps.
Step 5: Master Autofill
There are three ways to use Bitwarden autofill:
Method 1: Keyboard Shortcut (Fastest)
When you're on a login page, press Ctrl+Shift+L (Windows/Linux) or ⌘+Shift+L (Mac). Bitwarden automatically fills matching credentials. If multiple accounts match the site, the shortcut cycles through them.
Method 2: Extension Popup
Click the Bitwarden extension icon → your matching credentials appear → click the credential to fill it. Works for all sites and lets you choose among multiple accounts.
Method 3: Inline Autofill Suggestion
When you click on a username or password field, Bitwarden shows an inline fill suggestion. Click the suggestion to fill. This method requires no popup or shortcut — just click the field.
You can configure autofill behavior in the extension Settings → Auto-fill. Options include: auto-fill on page load (automatically fill on recognized sites), auto-fill on copy (fill when you copy credentials), and default URI match detection settings.
Step 6: Set Up the Mobile App
iOS (iPhone/iPad)
- Download "Bitwarden Password Manager" from the App Store
- Log in with your email and master password
- Enable Face ID/Touch ID: tap the menu icon → Settings → Account Security → Unlock with Face ID (or Touch ID)
- Enable iOS AutoFill: go to iPhone Settings → Passwords → Password Options → enable Bitwarden
Android
- Download "Bitwarden" from Google Play Store
- Log in with your email and master password
- Enable fingerprint: Settings → Account Security → Unlock with Biometrics
- Enable Android Autofill: Android Settings → System → Languages & Input → Autofill Service → select Bitwarden
Step 7: Saving New Passwords as You Create Them
When you create a new account on any website, Bitwarden detects the registration form and offers to save the new credentials. After you submit the registration form, a popup appears asking "Do you want to save this login?" — click Save and the credentials are stored instantly.
If the popup doesn't appear (some sites block extension detection), you can manually save a login: click the Bitwarden extension icon → click the + button → enter the site name, URL, username, and use the built-in generator to create a new password.
Step 8: Using the Password Generator
Every new password you create should be generated by Bitwarden — never typed manually. To use the generator:
- In the browser extension: Click the Bitwarden icon → click the Generator tab. Configure length (recommended: 16-20 characters), character types (uppercase, lowercase, numbers, symbols). Click the refresh button to generate a new password. Click Copy to use it.
- In a registration form: Click on the new password field → the Bitwarden inline suggestion includes a "Generate" option. Click it to fill the field with a generated password and save it simultaneously.
- Passphrase generator: Under Generator, switch from "Password" to "Passphrase" to generate a memorable 3-5 word passphrase — useful for accounts you might occasionally type manually.
Step 9: Enable 2FA on Your Bitwarden Account
Protecting your Bitwarden account with 2FA is critical — this is the master key to all your other credentials. Set it up now:
- Go to vault.bitwarden.com → click your account name → Account Settings → Security → Two-step Login
- Click "Manage" next to "Authenticator App"
- Enter your master password to confirm
- Open Google Authenticator, Authy, or any TOTP app on your phone → scan the QR code shown by Bitwarden
- Enter the 6-digit code from your authenticator app to verify it works
- Download and save your recovery codes — store them in your password manager's secure notes or print and store physically. These are your backup if you lose your phone.
See our complete 2FA guide for full setup instructions on authenticator apps.
Step 10: Run the Vault Health Report
Now that your passwords are imported, let Bitwarden show you the problems. Go to vault.bitwarden.com → Tools → Reports:
- Exposed Passwords Report: Passwords that match known breach databases (checked via Have I Been Pwned's k-anonymity API). Change every flagged password immediately.
- Reused Passwords Report: Shows passwords used on more than one site. Change each reused password to a unique generated one — start with the highest-risk accounts (email, banking, social media).
- Weak Passwords Report: Short, simple passwords. Change these to generated ones.
- Inactive 2FA Report: Sites that support 2FA but where you haven't enabled it. Enable 2FA on these sites using the guide above.
Note: Vault Reports require Bitwarden Premium ($10/year). The Exposed Passwords report is the most valuable — it's worth upgrading just for this if you have any reason to believe your credentials may have appeared in breaches.
Bonus Features: Secure Notes, Bitwarden Send, and Identities
Secure Notes
Store sensitive non-password information in encrypted secure notes: SSN, passport numbers, bank account numbers, software license keys, Wi-Fi passwords, insurance policy numbers. In the vault, click + New Item → Secure Note → enter text → Save. Accessible from all devices, encrypted like passwords.
Bitwarden Send
Create a secure, expiring link to share sensitive text (including passwords) with someone without sending them via email or chat. Go to the web vault → Send tab → New Send → configure expiration (1 use, 1 hour, 1 day, etc.) → copy the link. The recipient opens the link in their browser — no Bitwarden account needed. See our secure sharing guide for details.
Identities
Store your personal information (name, address, email, phone, credit card) as Identity items. Bitwarden can autofill this information into registration and checkout forms, similar to browser form fill but with proper encryption. Click + New Item → Identity to create one.
When to Upgrade to Bitwarden Premium ($10/year)
The free tier covers everything most users need. Upgrade to Premium when you want:
- Vault Health Reports (breach monitoring, reuse reports, weak password reports)
- Built-in TOTP Authenticator (store 2FA codes alongside passwords)
- 1GB encrypted file attachments (attach documents to vault items)
- Emergency Access (designate a trusted contact for vault access in emergencies)
- Priority customer support
At $10/year (~83¢/month), Bitwarden Premium is the best value upgrade in the password manager market. Most users who import their passwords and run the health report find the reports immediately valuable — they'll identify compromised and reused passwords that need changing.