1Password vs Bitwarden Comparison

• Individual (annual): $47.88/year
• Families (up to 6 users, annual): $71.88/year

• Premium (individual, annual): $19.80/year
• Families (up to 6 users, annual): $47.88/year

Penetration test and code review of the 1Password system

Penetration test and source-code audit of the Bitwarden core application

Data is encrypted with AES-GCM-256. The vault key is derived from your account password using PBKDF2-HMAC-SHA256 at 650,000 iterations, then combined with a 128-bit Secret Key that never leaves your devices — so an attacker who guesses the password alone still cannot decrypt anything. Authentication uses SRP, so password-equivalent data is never sent to the server.

600,000 PBKDF2-HMAC-SHA256 iterations by default on the client, plus more server-side (700,000 total for the master password hash); Argon2id is available as an alternative KDF. Item names, notes, URIs, custom field names, TOTP secrets and card/identity data are all encrypted client-side. Vault metadata — which account an item belongs to, the number of items — is not.

AgileBits Inc., a Canadian company headquartered in Toronto, Ontario. Venture-funded — Accel and ICONIQ Growth both hold board seats. Founded 2005; roughly 1,400 employees.

Private US company based in Santa Barbara, California; the parent company of 8bit Solutions LLC. Founded by Kyle Spearrin, who remains Chief Innovation Officer.