Link: https://community.bitwarden.com/t/published-version-update-in-app-stores/102750

RyanL
Bitwarden Employee

Hello everyone!

Starting in the next release, the Bitwarden apps published to the various stores will be the commercially licensed builds. No action is needed, and the apps will work exactly as they do today.

Bitwarden remains committed to open source security and transparency
The GPLv3 OSS licensed version continues to be updated and published on GitHub
All current features are available in both versions
License details are on GitHub
Bitwarden remains committed to a robust, free forever plan for everyone

If you have any questions, please ask them in this thread. Thanks all!

EDIT:

Bitwarden is not going closed-source
You can still fork Bitwarden
No change to self-hosting, the licensing change affects those who are repackaging and reselling Bitwarden
The free plan is here to stay permanently

As always, people overreacting in the comments (of the linked forum). So the current plan is that the core remains OSS, but upcoming features are partially not. To me that sounds similar to Chrome's or VSCode's approach.

yeah sorry I dont want that

Be cautious in such cases is not overreacting. We've seen enough open to closed rug pulls in the last years.

I'm not saying that's great news, but it doesn't sound like the self destruction move that some OSS companies have done recently. I wouldn't migrate away just because of that change. In the end, they have to find a sustainable mode of operation.

Does anyone have a handy guide to switching to selfhosted version? I was considering doing that but I let my plan renew out of laziness.

Not surprised in the slightest sadly.

Idk how it compares feature wise, but i have been running keepassxc/keepassdx combined with syncthing (or any file synchronization/cloud system) for many years without issues. The entire password manager database sits in one encrypted .kdbx file that you keep synced between your devices. Syncthing is nice because its p2p, so no self-/hosting required.

https://keepassxc.org/
https://github.com/keepassxreboot/keepassxc

https://f-droid.org/packages/com.kunzisoft.keepass.libre/

https://syncthing.net/
https://github.com/syncthing/syncthing

Here it explains some self host options with links to “Get Started” for each:

https://bitwarden.com/help/self-host-bitwarden/

For example, here’s the link to “Linux standard deployment”

https://bitwarden.com/help/install-on-premise-linux/

You may also want to consider not making your server available to the open internet, and instead access it only on your LAN via VPN.

That or jump to Vaultwarden https://github.com/dani-garcia/vaultwarden

great suggestion

They are going to slowly strip features from the free version over time.

It is effectively going closed source

Is there another client we can use with vaultwarden though? (In the scenario wgere that gets locked down)

I used keepass but switched to vaultwarden, i might consider switching back, but is there a good self hostable web front end for a keepass database? (I need to access it on my work laptop and can't install stuff there)

Vaultwarden still depends on upstream bitwarden

I guess we're gonna see more open-source apps soon, aimed at Vaultwarden first

Yup great combo. It baffles me why anyone one would favour to depend oneself on an online service instead

I dont think there is. Keepass is trying to be as offline as possible. Just makes for a piece of software with much less attack surface.

There is KeeWeb but I am not sure how well maintained it is. This issue is still open. It might be worth contacting your employers IT department instead. Asking for a well known password manager like KeePass shouldn't raise any eyebrows.

Fucking minIO

I've been using that for a while. I like the control I have in that I understand where everything is stored and encrypted. I miss the way that Google password manager had the autofill for seemingly every page nailed though.

That's my stack, except swap keepassdx for keepass2android, and add the Firefox plugin.

What's the benefit for them to change the license?

commercial providers can’t fork and sell it and give nothing back to the OSS community.

How so

So basically they were getting undercut by people reselling the same a services under a different name.

I just wish Syncthing didn't have such a convoluted port usage, and also that its Android usage didn't revolve around an unofficial app.

So I'll stick to apps that do sync over SSH (using FolderSync atm).

And not having to do R&D

Does anyone know if there's any chance for a fork before this situation inevitably deteriorates? I dont know the license on that software enough to know if its an option.

No, that would GPL. The benefit for them is that some features will be paid and won't be unlockable just by using Vaultwarden

are u gonna maintain clients?

The web interface is hosted directly by your vaultwarden interface so it’s not lockdown-able. The only things that are would be the browser extension and phone apps. Both of which are formally unnecessary because you can always just use the web interface. I’m sure if they ever locked down there’d be community versions in no time as they’re basically just web wrappers anyway.

Claude, code me a bit warden clone...

Careful, Claude is very sensitive these days. Might want to add 'please' and 'thankyou'.

There is an iOS app for Vaultwarden. Under that name.

https://apps.apple.com/za/app/vaultwarden-password-manager/id6799711599

Don’t see one for Android. And for the rest I just online.

Every single time Bitwarden is mentioned on the internet, someone comes in here and proudly recites the anthem “I have been using Keep ass with sink things”

It sucks compared to a dedicated extension.

No autofill
No TOTP or 2FA support
Doesn’t do passkeys
Doesn’t have organizational sharing
Doesn’t sync to mobile devices
Doesn’t integrate with mobile browsers without trusting some compatible 3rd party app
Requires selfhosting your passwords (don’t fuck it up!)

It’s actually pretty sad that the open source world doesn’t have a better solution for this.
I mean I guess BitWarden was it but that’s been stolen by venture capital so

It’s 2026 and you have way too much optimism left after all the OSS rug pulls of the last six fucking years.

Even hardware rugpulled. Fucking Micron.

Forget it; BitWarden is cooked.

Anthropic is drawing a line in the sand protecting their model's training sets from abuse.

Meanwhile OpenAI is down in a dungeon torturing GPT6 into writing academic mathematics papers.

it literally says in the post that the license change affects companies who are repackaging and reselling bitwarden, but ok.

Well, we all know how this ends...

It's a really sad day for me, I love Bitwarden, it's easily the best password manager I've used, and I'm in IT, I've used a bunch.

Fuck private equity, fuck it to death. But until then, I'll be moving my test setup for KeyPassXC into production over the coming weeks and months.

I was happily subscribed to Bitwarden for years for my personal account, I moved several people and a whole company onto it's platform. We had a good run, time to move on.

Can I simply migrate content from Bitwarden to Vaultwarden?

I couldn't tell from looking at the faq or wiki.

why not vaultwarden?

They say if because AI will conquer the world... Reality since they use conversations to train AI, their AI is becoming less gentle.

But this is the post by bitwarden, defending their decision. AKA marketing.

Can you explain how bitwarden can be "repackaged and resold", that would be stopped by that change?

Everybody can still fork/rename/publish the FOSS version which is continued to be available. Everybody can connect to vaultwarden....?

What differences will exist between the two parallel versions?

Some future components will be published under the commercial license and will exist only in that build. Newly developed features will be evaluated on a case-by-case basis for which license applies to them.

source: the page linked by OP, https://community.bitwarden.com/t/published-version-update-in-app-stores/102750/4

Both KeepassXC on desktop and KeepassDX on mobile support autofill, passkeys, and TOTP. Syncing to mobile devices is handled by Syncthing (I use BasicSync on Android) and is quite seamless after setup.

Integration with mobile browsers and other applications is handled by the OS-level autofill service (at least on Android). Trusting a third party app that is completely open source and has a ton of eyes on it? I don't see a problem with that.

Selfhosting is literally the entire point, since who more can you trust with your most sensitive information than yourself? And even if you don't trust yourself with being able to keep good backups and following the 3-2-1 rule, you're more than welcome to sync with a third party cloud provider of your choosing since the password file is fully encrypted.

They don't make any money off of the open source version. It is just a matter of the before they "discontinue" the open source version and move to source available.

If you have any doubts just look at Redis, Vagrant or Terraform

No, I have money to pay instead. If I were able to contribute to the effort, I would have said that. Just picking fights in response to open questions today?

Sure, it's no change for self hosters currently, but it's one more step in moving towards a more closed platform overall. I do hope more FOSS client apps end up getting made sometime soon. I've been using Keyguard on Android for some time, which means the recent several breaking changes in the Bitwarden apps to the Vaultwarden backend haven't hit me as hard, but I do still use the official apps for my laptop and desktop and Keyguard isnt fully FOSS, of course. I'd love to see some forks or brand new apps one of these days that are actually fully FOSS for both mobile and browsers. I've thought about doing some myself, but I have too many other projects and I also don't have a MAC or want to pay the fees to make an iPhone version. And I abandoned my Android Developer account when they started the identity nonsense, so none of my apps are on the official store anymore and Fdroid and similar may not be viable soon, so it would only really be for myself and a few others who use alternate Android OS's.

I'm. Using Vaultgarden but its not clear if the Android app will still be available.