Bitwarden vs Dashlane Comparison

• Premium (individual, annual): $19.80/year
• Families (up to 6 users, annual): $47.88/year

• Premium (individual, 1-year): $59.88 per year
• Friends & Family (10 members, 1-year): $89.88 per year

Penetration test and source-code audit of the Bitwarden core application

600,000 PBKDF2-HMAC-SHA256 iterations by default on the client, plus more server-side (700,000 total for the master password hash); Argon2id is available as an alternative KDF. Item names, notes, URIs, custom field names, TOTP secrets and card/identity data are all encrypted client-side. Vault metadata — which account an item belongs to, the number of items — is not.

The vault is encrypted client-side with AES-256 in CBC mode plus HMAC-SHA256 — an encrypt-then-MAC construction, so tampering with the ciphertext is detectable. The key is derived from the master password with Argon2d (3 iterations, 32 MB memory, 2 threads); PBKDF2 remains only as a backward-compatibility fallback that Dashlane says it will deprecate in 2026. All vault fields are encrypted, including usernames, item URLs and notes — not just passwords. Support for legacy CBC-only mode was removed in November 2025.

Private US company based in Santa Barbara, California; the parent company of 8bit Solutions LLC. Founded by Kyle Spearrin, who remains Chief Innovation Officer.

The product is run by Dashlane, Inc.; the brand and trademarks belong to Dashlane SAS, France. The company is independent and venture-backed — it has raised over $200M across five rounds, the last a $110M Series D led by Sequoia Capital in May 2019, with Bessemer Venture Partners, FirstMark Capital and Rho as earlier backers. It has not been acquired. Dual headquarters in New York and Paris.