Bitwarden Chrome Extension: Install, Setup, and Security

If you have ever typed the same password into three different sites in one sitting, you already know why a password manager earns its place in your toolbar. The Bitwarden Chrome extension is one of the more popular ways to stop doing that: it is free, open in its approach to security, and works the same whether you are on a work laptop or a personal one. This guide walks through installing it, setting it up, checking whether it is actually safe, and where it stands next to 1Password and LastPass. Along the way, we will also touch on something people rarely think about until it happens: what installing or updating a browser extension can do to the tabs you already had open.

What Is the Bitwarden Chrome Extension?

The Bitwarden Chrome extension is a free browser add-on that stores your website logins in an encrypted vault and fills them in for you. Instead of remembering (or reusing) passwords, you let Bitwarden generate strong, unique ones and recall them automatically when you visit a saved site.

Once installed, the extension sits in your Chrome toolbar as a small shield icon. Click it, and you get a quick view of your vault: saved logins, secure notes, and any passkeys you have stored. Bitwarden also offers standalone apps for desktop and mobile, but the browser extension is where most day-to-day saving and filling happens, since that is where you are signing into things.

Here is the quick version for anyone who wants the short answer before the details:

If you type bitwarden extension chrome into the Chrome Web Store search bar, the official listing is what comes up first. That is worth checking, since password manager extensions are exactly the kind of tool you want to install from the real source rather than a lookalike.

How Do I Install the Bitwarden Chrome Extension?

You install it by downloading the extension from the Chrome Web Store, adding it to Chrome, and pinning it to your toolbar so it is easy to reach. Bitwarden’s own setup guide lists this pinning step before anything else, which tells you how much they want it visible rather than buried in the extensions menu.

1. Get the extension. Go to the Chrome Web Store (or Bitwarden’s downloads page) and search for Bitwarden, or follow Bitwarden’s official download link.
2. Add it to Chrome. Click Add to Chrome and accept the permissions prompt.
3. Pin it to the toolbar. Click the puzzle-piece icon at the top right of Chrome, find Bitwarden, and select the pin so its icon stays next to the address bar.
4. Create or log into your account. Open the pinned icon and either sign up for a free account or log into an existing vault.

Pin it before you forget. It is easy to install an extension, close the tab, and never see it again buried in the puzzle-piece menu. Pinning takes one extra click and turns Bitwarden into an actual habit instead of a one-time install.

Once installed, Bitwarden does not need special access to the pages you visit beyond what it needs to detect login forms and offer to fill them. If you manage extensions for a team, Chrome, Firefox, and Edge all have documented enterprise deployment paths for Bitwarden, so IT departments do not have to install it one machine at a time.

How Do I Set Up Bitwarden and Start Autofilling Passwords?

You set it up by adding your first login to the Vault tab, then letting Bitwarden fill it the next time you visit that site. The extension is built around two moments: saving a credential, and filling it back in later.

If you already have logins saved in Chrome itself, you do not have to re-enter them one by one. There is an import path covered further down, and it is worth doing early so you are not maintaining two half-finished password lists at once.

One thing worth knowing: Bitwarden’s autofill also extends to passkeys, not just traditional passwords. It can store and fill a passkey for a site the same way it fills a password, and it can use a passkey to sign in to your Bitwarden account itself on Chromium-based browsers and the web app. If you are gradually moving accounts to passkeys, this means you are not managing two separate systems, one in Bitwarden and one scattered across sites.

Is the Bitwarden Chrome Extension Free?

Yes, Bitwarden’s core password management is free with no listed limit on saved passwords or devices. Bitwarden’s pricing page describes the free tier plainly: basic password management that is “always free,” and it lists unlimited devices and unlimited passwords among the features included in every account, free or paid.

Paid tiers exist for people who want more, not for people who want the extension to keep working:

That is a meaningfully different pitch from some rivals. 1Password, for example, does not offer an ongoing free tier at all, only a 14-day free trial before you choose a paid plan. If cost is the deciding factor for you, that difference alone is worth knowing before you commit to a tool you will be typing your passwords into every day.

How Secure Is Bitwarden’s Encryption?

Bitwarden encrypts your vault on your own device before anything is sent to its servers, using a scheme it calls AES256-CBC-HMAC-SHA256. In plain terms, that means the encryption and hashing happen locally, and Bitwarden’s servers only ever see the already-scrambled result.

Bitwarden describes this as a “zero knowledge encryption solution,” meaning it says you are the only party with the keys needed to decrypt your own vault data. Its help documentation draws a specific contrast with some competitors, saying that even fields other password managers leave unencrypted, like URLs, are protected in Bitwarden’s model, and that its own team members cannot see vault contents or your master password.

On top of the encryption itself, Bitwarden says it runs regular third-party security audits, including a named 2025 assessment of its browser extension and autofill overlay conducted by the security firm Cure53. It also lists compliance with GDPR, CCPA, and HIPAA, along with ISO 27001 certification.

None of this is unique to Bitwarden as a category. 1Password uses AES-GCM-256 with an additional Secret Key, and LastPass uses AES-256 with PBKDF2 hashing. What differs is transparency about the model and how often each company publishes independent audit results, which is worth a look before you settle on any single vendor for something this sensitive. For a broader look at hardening your browser itself, see our guide on how to secure Chrome.

Is There a Bitwarden Firefox Extension, and What Other Browsers Does It Support?

Yes, there is a dedicated Bitwarden Firefox extension, and it is set up almost identically to the Chrome version. Bitwarden’s own browser-extension setup guide gives separate pinning instructions for Chrome, Firefox, and Safari side by side, which tells you these three are treated as first-class, fully supported targets rather than afterthoughts.

Notably absent from Bitwarden’s own documentation are Brave and Opera as confirmed extension targets. Bitwarden’s guide to importing passwords does mention Opera when talking generically about “Chromium-based browsers,” but that is in the context of where your old passwords might be sitting, not a statement that Bitwarden officially supports and maintains an Opera-specific extension listing. If you use Brave or Opera day to day, the extension may well install and run fine since both are Chromium-based, but you are relying on Chrome Web Store compatibility rather than a Bitwarden-tested target. If you switch browsers often, our guide to Firefox extensions and Chrome extensions covers what else changes when you move.

How Do I Install Bitwarden on Safari on Mac?

You install Bitwarden on Safari by first running the Bitwarden desktop app from the Mac App Store, then turning the extension on inside Safari’s own settings. This is a different flow from Chrome or Firefox, because Apple requires Safari’s web extensions to come bundled with a full Mac app rather than a standalone browser add-on.

Bitwarden’s support documentation is specific about the order of operations here: “Before enabling the Safari web extension, run the desktop app at least once.” Only after that will Safari recognize the extension as available to turn on.

1. Install the desktop app. Download the Bitwarden app from the Mac App Store and run it at least once.
2. Open Safari’s Settings. Go to the Safari menu and select Settings.
3. Go to Extensions. Navigate to the Extensions page inside Safari’s settings.
4. Turn on Bitwarden. Check the Bitwarden checkbox and select Turn on in the confirmation dialog.

Apple’s own restriction, not Bitwarden’s. Bitwarden explains that Safari limits web extension use to only those obtained through Mac App Store downloads. That is an Apple platform rule, which is why Safari’s install path looks so different from Chrome’s even though the end result is the same shield icon in your toolbar.

If you split time between a Mac and a Windows or Chromebook machine, your Bitwarden vault stays the same account either way. It is only the installation mechanics that differ by platform, not the vault itself. For more on how Safari’s extension model compares to Chrome’s more open one, see our overview of Safari extensions.

How Do I Import My Chrome Passwords Into Bitwarden?

You import Chrome passwords into Bitwarden by exporting them as a CSV file from Chrome, then importing that file into your Bitwarden vault. Bitwarden’s guide covers this specifically for “Chromium-based browsers, like Google Chrome, Microsoft Edge, and Opera,” offering two paths depending on whether you use the desktop app.

1. Open Chrome’s password settings. Go to chrome://password-manager/settings in your address bar.
2. Find Export Passwords. Click it, then select Download file, and confirm your device’s login password if prompted.
3. Save the CSV. Chrome saves a comma-separated values file to your computer; keep track of where it lands.
4. Import into Bitwarden. In the Bitwarden web app, go to Tools, then Import, choose My Vault (or your organization) as the destination, and complete the import.

Bitwarden’s own note on this process is reassuring on the security side: “Data is encrypted locally before being sent to the server for storage,” meaning the import does not send your passwords across the internet in plain text at any point. If you use the Bitwarden desktop app instead of the web app, there is also a direct import option that skips the manual CSV export step entirely.

Delete the export file when you’re done. A CSV file full of plain-text passwords sitting in your Downloads folder is a real risk if your computer is ever lost, stolen, or shared. Once the import is confirmed and working, delete that file rather than leaving it around indefinitely.

This same export-and-import pattern is worth remembering if you ever move between password managers again later. Whichever tool you land on, none of them will retroactively recover credentials you never saved anywhere, which is a good reminder that “export before you switch” is a habit worth having for more than just passwords. Our guide to Chrome’s own password manager walks through the export side of this in more detail.

How Do I Stop Chrome From Also Prompting to Save Passwords?

You stop Chrome’s own prompts by turning off “Offer to save passwords and passkeys” inside Chrome’s settings, so only your third-party manager asks. Without this, you can end up with two competing pop-ups every time you sign into a site, one from Chrome and one from Bitwarden.

This does not delete anything you have already stored in Chrome, and it does not stop Bitwarden’s autofill from working. It simply removes Chrome’s own save dialog from the picture, so Bitwarden becomes the single tool asking you to save new logins rather than both fighting for the same click. If you would rather keep both around for a while during the transition, that is fine too. Just expect the occasional double prompt until you decide.

Bitwarden vs 1Password vs LastPass: How Do They Compare?

Bitwarden stands out mainly on price, with a genuinely free tier that the other two do not fully match, while 1Password and LastPass lean on brand familiarity and slightly different security architectures. None of the three is objectively “wrong,” and the right pick often comes down to whether free-forever matters more to you than a specific feature or interface.

Security history is also worth a mention, since it is the kind of thing that only shows up after the fact. LastPass disclosed a security incident in August 2022 involving a compromised developer account, and follow-up notices in December 2022 confirmed that a threat actor also obtained a backup of customer vault data, though LastPass stated the sensitive fields inside that backup remained protected by 256-bit AES encryption tied to each user’s own master password. A final update in March 2023 detailed the scope and stated the investigation found no further threat-actor activity after late October 2022.

That history does not automatically make LastPass unsafe to use today, since the encrypted fields were reported as protected throughout, but it is a documented event worth knowing about, and it partly explains why some users moved to Bitwarden or 1Password afterward. If you are choosing fresh in 2026, weigh the free tier, the browsers you use, and how much that history matters to you personally.

What Happens to Your Tabs When You Install a Password Manager Extension?

Nothing changes about your open tabs just from adding Bitwarden, but the broader habit of installing and updating extensions can still put your tabs at risk indirectly. Extensions themselves do not close your windows. Browser updates, crashes, and restarts are what cost people their tabs, and those events often cluster around the same moments you are installing new tools.

If you have ever restarted Chrome to finish installing something, only to find your carefully arranged research tabs replaced by a blank new-tab page, you already know the feeling. Chrome’s session restore helps sometimes, but it is not built for this specific job, and it is easy to lose the plot on which of forty tabs was important once they are gone. Our piece on what happens after Chrome crashes goes into exactly how much you can and cannot get back from Chrome alone.

This is really the gap BelayTab is built to close, and it works alongside a password manager rather than instead of it. Bitwarden protects your credentials; BelayTab protects the browsing state around them, saving every open window as a named, restorable session automatically every few minutes and whenever a window closes, with no account required and no limit on how many sessions you keep. If a session ever grows too large to reopen at once, BelayTab restores it in manageable batches instead of flooding your machine all at once.

Between a password manager that keeps your logins safe and a session tool that keeps your tabs safe, you end up covering both halves of the “what if my browser has a bad day” problem, rather than just one of them.