Secure every step
Store
Securely store and manage secrets like database passwords and API keys.
Collaborate
Securely and easily share secrets across users and machines.
Deploy
Inject credentials into code securely using secret IDs in place of hardcoded secrets.
Audit
Review all access operations to ensure your secrets are safe.
Centralize control and prevent secrets sprawl
Single source of truth
Centralize infrastructure and machine secrets in one location to prevent unmanaged secret sprawl across your organization.
Strengthen enterprise security
Scalable access management
Maintain tight control over machine and human access to developer secrets with granular read or read/write access permissions.
Rotate access
Set expiration dates for machine access to secrets or simply revoke access as needed.
Log secret retrieval
Get timestamped records of events that occur within your organization like secret retrieval.
Programmatically provision users
Leverage your existing directory service to automatically provision users.
Securely sign-in
Adopt secure methods of authentication for your teams like single sign-on (SSO), trusted devices, biometrics, or passkeys.
Quick and easy deployment
Comprehensive documentation
Easy-to-follow documentation, how-to videos, resources, and more are at your disposal to streamline deployment.
Integrations
Quickly build connections between your various machines, tools, and ecosystems with out-of-the-box integrations.
SDKs
Software development kits (SDKs) empower your development team to build their own custom integrations and operations.
CLI
The Secrets Manager CLI is the primary method to inject secrets into applications and infrastructure and can be coupled with CLI wrappers for additional flexibility.
Your pick for secrets management
Easy to use
One solution for unlimited secrets
End-to-end encryption
Predictable pricing
Learn how Titanom Technologies bolstered developer security and increased productivity
"It would be almost impossible to leak our secrets. It's just one less thing we have to worry about."
Jannis Morgenstern
Head of IT, Titanom Technologies
Choose the plan that fits your needs
Free
$0
Free forever
Everything you need to get started.
- Unlimited secrets
- Up to 2 users
- Up to 3 projects
- Up to 3
Teams
$6
per month / per user
Support your full development team with additional business functionalities.
- Unlimited secrets and projects
- Up to 20
- $1 per additional
Enterprise
$12
per month / per user
Supports enterprise needs with automated provisioning and other administrative capabilities.
- Unlimited secrets and projects
- Up to 50
- $1 per additional
Pricing shown in USD and based on an annual subscription
Get started today
For current Bitwarden customers
Sign up for Secrets Manager by adding it to your subscription or contact sales for a free trial.
New to Bitwarden
If you are a new Bitwarden customer please contact sales to get started.
Contact Bitwarden
Compare Secrets Manager Plans and Features
Features
Free
Teams
Enterprise
Unlimited Secret Storage
Store unlimited developer secrets at no additional cost.
Free
Teams
Enterprise
Securely share secrets with users
Securely grant read or write secret access to users across the organization.
Free
Up to 2 users
Teams
Unlimited users
Enterprise
Unlimited users
Machine access via machine accounts
Facilitate programmatic machine access to a discrete set of secrets via machine accounts.
Free
Up to 3 machine accounts
Teams
Up to 20 machine accounts, $1 per additional machine account
Enterprise
Up to 50 machine accounts, $1 per additional machine account
Organize secrets via projects
Group relevant secrets together by project to easily assign user and machine access.
Free
Up to 3 projects
Teams
Unlimited projects
Enterprise
Unlimited projects
Two-step login
Add extra security to your login process with two-step login, also known as 2FA, or multi-factor authentication.
Free
Authenticator apps, email
Teams
Authenticator apps, email, Yubikey, FIDO2, and Duo
Enterprise
Authenticator apps, email, Yubikey, FIDO2, and Duo
Organization Two-Step Login via Duo
Enable and enforce Organization-wide two-factor authentication through Duo MFA.
Free
-
Teams
Enterprise
Event and Audit Logs
View detailed records of login and organization actions.
Free
-
Teams
Enterprise
User groups
Organize users by groups and grant them permissions for specific projects and access controls.
Free
-
Teams
Enterprise
Directory Connector
Synchronize your directory service with Bitwarden using the standalone Directory Connector application to easily provision users and groups.
Free
-
Teams
Enterprise
SSO Integration
Integrate with your existing Identity Provider to log in to Bitwarden.
Free
-
Teams
-
Enterprise
SCIM Support
Use the SCIM protocol to manage and provision Bitwarden users from your Identity Provider or directory service for easy onboarding and employee succession.
Free
-
Teams
-
Enterprise
Enterprise policies
Set organization-wide controls and additional settings for how Bitwarden is used, with many customization options.
Free
-
Teams
-
Enterprise
Account Recovery Administration
Recover locked out accounts by having an administrator initiate the account recovery process, which maintains the Bitwarden zero-knowledge encryption policy.
Free
-
Teams
-
Enterprise
Custom roles
Assign specific permissions to users including policies like SSO or Account Recovery.
Free
-
Teams
-
Enterprise
Priority Support
24/7 priority email support
Free
-
Teams
-
Enterprise
Self-host option
Run the Bitwarden server application on your own network or server.
Free
-
Teams
-
Enterprise
Pricing
Free
Free
Sign up now
Teams
$6/Month/User
Get started
Enterprise
$12/Month/User
Get started
Secrets Manager FAQ
Secrets refer to digital authentication credentials for sensitive parts of the IT and developer ecosystem. Secrets are sensitive key-value pairs that need to be securely stored and should never be exposed in plain-text code or transmitted over unencrypted channels.
Examples of secrets are:
SSH keys
Database passwords
SSL or TLS certificates
Private encryption keys
API keys
One-time password devices
Machine accounts represent non-human machine users, like applications or deployment pipelines, that require programmatic access to a discrete set of secrets.
A project is a collection of secrets that can be grouped together based on how you want to structure access by your engineering, DevOps, and cybersecurity teams.
Bitwarden Secrets Manager is built for developer teams to centrally store, manage, and deploy privileged secrets. Secrets Manager is tailored for infrastructure secrets and is supported only by the web app and the CLI clients. If you are looking to help your employees manage their personal credentials, check out Bitwarden Password Manager.
Yes! Secrets Manager and Password Manager can be used in conjunction to provide even stronger security to your business.
An organization will have the same plan across any product they are subscribed to. For example, if a customer is subscribed to a Bitwarden Password Manager Enterprise plan and decides to purchase Bitwarden Secrets Manager, they will also be subscribed to the Enterprise plan.
To subscribe to a different Secrets Manager plan than what you are currently subscribed to with Password Manager, simply create a new organization or account and sign up for Secrets Manager following these steps.
Bitwarden aims for the highest levels of availability. You can learn more about Bitwarden availability in the Security White Paper.
In addition, there are multiple secret backup options.
Integrations - Some integrations, like Bitwarden Secrets Manager Kubernetes Operator, act as a caching layer when secrets are fetched.
SDKs - Secrets can be cached locally when using an SDK. Caching any information or credentials in a local environment should be done with care and security awareness.
Self-hosting - Self-hosting Secrets Manager ensures that secrets are available in the event you cannot connect to the Bitwarden cloud.