How to Use Bitwarden in Chrome: Setup, Features and Tips

How do you install Bitwarden and create an account in Chrome?

Add the extension from the Chrome Web Store, then create an account from the extension itself or from the web vault. The account is free for individuals, and the extension is the part you will touch every day.

1. Open the Bitwarden profile on this site and follow the link to the Chrome Web Store page.
2. Choose Add to Chrome, then Add extension.
3. Click the puzzle-piece icon in the toolbar and pin Bitwarden so its shield icon stays visible.
4. Click the icon and choose Create account. Enter your email, a name and a master password.
5. Add a master password hint only if you can write one that does not reveal the password. Confirm with Create account.
6. Check your email for a verification message if Bitwarden asks for one, then log in.

Before you type anything, decide where your data will live. Bitwarden's cloud offers a choice of server region at login, and the software can also be self-hosted. Most people use the default cloud and never think about it again.

What makes a good Bitwarden master password?

A good master password is long, unique to Bitwarden and easy for you to type from memory. A passphrase of several unrelated words beats a short string of symbols, because length does most of the work.

• Use four or more random words and add a separator you will remember.
• Never reuse it on any other site. It is the one password that unlocks all others.
• Avoid names, dates and song lyrics, which are easy to guess.
• Do not store it in a note on the same device that holds your vault.

You will type this password often at first, so choose something your fingers can manage on both a laptop and a phone. The extension can also unlock with a shorter PIN or with biometrics in some setups, but those are convenience layers on top of the master password, not replacements for it.

Once the account exists, turn on two-step login from the web vault under Settings > Security > Two-step login. An authenticator app is the usual choice. That way a stolen master password alone is not enough to get in.

How do you import your Chrome passwords into Bitwarden?

Export your passwords from Chrome to a file, import that file in the Bitwarden web vault, then delete the file. The export is unencrypted, so treat it like cash and do not leave it in Downloads.

1. In Chrome, open Settings > Autofill and passwords > Google Password Manager > Settings and choose Export passwords. Confirm with your computer password. (Menu names shift between Chrome versions, so use the settings search if you cannot find it.)
2. Save the CSV file somewhere temporary.
3. Open the Bitwarden web vault and choose Tools > Import data.
4. Set the format to Chrome (csv), select the file and choose Import data.
5. Spot-check a handful of logins in the vault.
6. Empty the Recycle Bin or Trash so the exported file is really gone.

If you are unsure where your Chrome passwords live, see our guide to seeing saved passwords in Chrome. Importing does not delete anything from Chrome, so you still have a copy until you remove it.

Which Bitwarden settings should you change on day one?

Change the vault timeout, the autofill behaviour and Chrome's own password saving. These three settings decide how safe and how annoying the tool feels.

Autofill on page load is the setting people debate most. Turning it on saves a click, but it fills before you have looked at the page. Leaving it off and using a keyboard shortcut is a safer habit, especially on pages that embed other sites.

To stop Chrome fighting with Bitwarden, go to chrome://settings/passwords and switch off Offer to save passwords and Sign in automatically. Otherwise you get two prompts for every new login, and your passwords drift into two places.

What are the five everyday workflows in Bitwarden?

Most daily use comes down to five actions: autofill a login, save a new one, generate a password, fill a code, and share something safely. Learn these and you have covered nearly everything.

1. Autofill a login

Open a login page and click the field. Bitwarden shows matching entries under it, or you can click the toolbar icon and choose the login. The default shortcut is Ctrl+Shift+L on Windows and ChromeOS and Cmd+Shift+L on Mac. You can check or change it at chrome://extensions/shortcuts.

2. Save a new login

Sign in on a new site. Bitwarden shows a bar asking whether to save it. Confirm, and pick a folder if you use them. If the bar never appears, check that the notification setting is on under Settings > Notifications.

3. Generate a strong password

On a sign-up form, open the extension's Generator tab. Choose length and character types, or switch to a passphrase or the username generator, then copy the result into the form and save the login. Never invent passwords by hand when the generator is one click away.

4. Fill a one-time code

Bitwarden can store a two-step login secret alongside a login and produce codes that autofill. This authenticator feature has been part of the paid tier, so check the current plan details on Bitwarden's site. Keeping codes in the same vault as passwords is convenient, but it puts both factors in one place.

5. Share a secret

Use Send for temporary, encrypted sharing of text or a file with someone outside your vault. You can set an expiry and a deletion date. For ongoing sharing with family or a team, Bitwarden offers organisations and collections, which are a paid feature.

What are Bitwarden's limits, and is the free plan enough?

The free plan covers unlimited logins on unlimited devices for one person, which is enough for most individuals. Paid plans add extras such as built-in authenticator codes, emergency access and sharing groups, but pricing and features may change, so check Bitwarden's pricing page.

Free

Personal vault, autofill, generator and Send. Suits one person who is happy to use a separate authenticator app.

Premium

Adds features such as the built-in authenticator and vault health reports. Check the site for the current list.

Families or organisations

Shared vaults and collections for households or teams. Useful when several people need the same logins.

Self-hosting

You can run your own Bitwarden server. It gives control but also makes you responsible for backups and updates.

The interface is functional rather than polished, and some people find it plainer than rivals. Autofill can also be less forgiving on unusual login forms, where you may have to copy and paste. Those are real trade-offs of a tool that prioritises openness and low cost.

Coming from another tool? Read the Bitwarden vs LastPass comparison, or browse the full password manager hub.

Is Bitwarden safe, and can it be hacked?

Bitwarden uses end-to-end encryption, so your vault is encrypted on your device before it is sent to the company. No password manager can promise it is unhackable, but a strong master password and two-step login make the realistic risks far smaller.

The realistic threats are not an attacker cracking the encryption. They are a weak or reused master password, a phishing page that tricks you into typing it, and malware on your own computer. Your habits matter more than the vendor's servers.

You may have seen people ask about a Bitwarden controversy. Past discussions have centred on things like how the software is licensed and on autofill behaviour on pages that embed other content. Bitwarden has responded to such points publicly, and details change, so read its official blog and release notes rather than a secondhand summary.

• Turn on two-step login for the Bitwarden account itself.
• Keep Chrome and the extension updated.
• Only open your vault on pages you have recognised by URL.
• Review the extension's access on chrome://extensions > Details, and read our permissions guide.

How do you lock down Bitwarden's privacy and security settings?

Shorten the vault timeout, require your master password to reveal sensitive items, and limit what the extension does automatically. Then check who else can reach the browser profile.

1. Open the extension and choose Settings > Vault timeout, and pick a short delay with the Lock or Log out action.
2. In Settings > Options, review the clipboard clear setting so copied passwords disappear after a short interval.
3. Keep Autofill on page load off unless you have a strong reason.
4. In the web vault, open Settings > Security and review your two-step login methods and recovery code.
5. Store the recovery code offline, not in the same vault it protects.
6. Use a separate Chrome profile for shared computers so nobody else opens your vault.

If you change a compromised password, do it from the site itself and then update the entry. Our guide on how to change a Chrome password covers the browser side of that. Locking the vault whenever you step away costs a few seconds and closes the most common gap.

Bitwarden's help centre documents each setting in detail, and the wording of menus can change as versions update. Use it when a screen in your version looks different from the ones described here.

Why is Bitwarden not autofilling or saving logins?

The usual cause is a URI match mismatch, a locked vault, a disabled setting, or Chrome's own password manager competing for the same fields. Work through the list below in order.

Nothing appears under the field

Log in to the vault first. Then confirm Show autofill suggestions is on in the extension's Autofill settings.

Wrong login offered

Edit the item and check its URI. Change the match detection from Base domain to Host when several subdomains use different accounts.

Save bar never shows

Turn on the notification prompts under Settings > Notifications and disable Chrome's Offer to save passwords.

Shortcut does nothing

Open chrome://extensions/shortcuts and check that the shortcut is set and not clashing with another extension.

Login form is unusual

Copy the username and password from the item and paste them manually. Some custom forms block autofill.

Vault keeps locking

That is the vault timeout at work. Lengthen it in Settings > Vault timeout if it is too aggressive for you.

Extension conflicts are worth ruling out too. Other tools that alter forms or block scripts can interfere, so pause them on the affected site. If you have piled up add-ons, see our guide to managing Chrome extensions for ways to keep the set tidy.