Bitwarden vs Enpass Comparison

• Premium (individual, annual): $19.80/year
• Families (up to 6 users, annual): $47.88/year

• Premium (individual, 1-year): $23.99 per year
• Family (up to 6, 1-year): $47.99 per year

Penetration test and source-code audit of the Bitwarden core application

600,000 PBKDF2-HMAC-SHA256 iterations by default on the client, plus more server-side (700,000 total for the master password hash); Argon2id is available as an alternative KDF. Item names, notes, URIs, custom field names, TOTP secrets and card/identity data are all encrypted client-side. Vault metadata — which account an item belongs to, the number of items — is not.

The vault is a SQLite database encrypted via SQLCipher (AES-256-CBC). The Vault Key is derived from the Master Password — and, optionally, a keyfile — using PBKDF2-HMAC-SHA512 at 320,000 iterations, with a unique random salt per database.

Private US company based in Santa Barbara, California; the parent company of 8bit Solutions LLC. Founded by Kyle Spearrin, who remains Chief Innovation Officer.