Self-Hosted Bitwarden: Free Software, Not Free Features
When you deploy the official Bitwarden server on your own infrastructure, the software is free. But premium features are not.
Out of the box, you get unlimited password storage, multi-device sync, password generator, and text-only Bitwarden Send. You do NOT get TOTP (integrated 2FA code generation), file attachments, vault health reports, emergency access, or advanced authentication methods like YubiKey and FIDO2.
To unlock those features, you must purchase a Bitwarden Premium license ($19.80/year as of 2026) and apply it to your server.
This licensing requirement, combined with Bitwarden's July 2026 price hike (Premium doubled from $9.99 to $19.80/year—a 98 percent increase), has driven teams to evaluate Vaultwarden as an alternative that includes all premium features for free.
This page compares exactly what you get at each tier so you can decide which path makes sense for your team.
Premium Features Matrix: Free vs. Licensed vs. Vaultwarden
| Feature | Bitwarden Free | Bitwarden Licensed | Bitwarden Enterprise | Vaultwarden |
|---|---|---|---|---|
| Unlimited storage | ✓ | ✓ | ✓ | ✓ |
| Multi-device sync | ✓ | ✓ | ✓ | ✓ |
| Password generator | ✓ | ✓ | ✓ | ✓ |
| Bitwarden Send | ✓ (text) | ✓ (files) | ✓ (files) | ✓ (files) |
| TOTP/2FA codes in vault | ✗ | ✓ | ✓ | ✓ |
| File attachments | ✗ | ✓ (5 GB) | ✓ | ✓ |
| Vault health & breach reports | ✗ | ✓ | ✓ | ✓ |
| Emergency access | ✗ | ✓ | ✓ | ✓ |
| Basic two-step login | ✓ | ✓ | ✓ | ✓ |
| YubiKey, FIDO2, Duo | ✗ | ✓ | ✓ | ✓ |
| Organizations/collections | ✗ | Limited | ✓ | ✓ (unlimited) |
| Event logs & audit | ✗ | Limited | ✓ | ✓ |
| Role-based access control | ✗ | Limited | ✓ | ✓ |
| SSO (SAML/OIDC) | ✗ | ✗ | ✓ | ✗ |
| SCIM provisioning | ✗ | ✗ | ✓ | ✗ |
Key insight: The features in bold are what people actually search for when they ask about premium features. Vaultwarden includes all of them by default. Bitwarden requires a license. SSO and SCIM are Bitwarden Enterprise only and not available in Vaultwarden.
What Do These Premium Features Actually Do?
TOTP: 2FA Codes in Your Vault
Instead of switching between your password manager and a separate authenticator app, TOTP lets you generate two-factor codes directly inside your vault. One app, one place. This is the most widely used premium feature because it is pure convenience—no more juggling six open apps to log in.
File Attachments
Store sensitive documents, contracts, and screenshots directly in your vault, encrypted end-to-end. Bitwarden limits this to 5 GB per user. Vaultwarden offers the same feature. This is critical for teams handling compliance docs, contracts, or any sensitive files alongside credentials.
Vault Health & Breach Reports
This feature scans your stored passwords against known breach databases, detects reused passwords across multiple sites, and identifies weak passwords. It grades your overall vault security and tells you exactly which passwords need attention. Bitwarden updates breach data regularly; Vaultwarden uses the same approach. If you store 200+ passwords, this feature alone pays for itself by catching reused passwords you have forgotten.
Emergency Access
Grant a trusted contact delayed access to your vault in case of emergency (incapacitation, death, etc.). They request access, wait a grace period you set (1 to 30 days), and gain entry only if you do not cancel. This is essential for families and business continuity planning.
Advanced Two-Step Authentication
Beyond email and authenticator-app 2FA, both platforms support hardware security keys (YubiKey, Titan, other FIDO2 devices) and Duo Security. This is enterprise-grade authentication that makes your vault nearly impossible to breach through password reuse or phishing.
How Bitwarden Self-Hosted Licensing Actually Works
The licensing model is straightforward but often misunderstood:
Step 1: Buy a license. Purchase Bitwarden Premium ($19.80/year), Families ($47.88/year), or Enterprise from bitwarden.com.
Step 2: Download your license file. Bitwarden ties the license to your account email and provides a downloadable license file.
Step 3: Upload to your server. Log into your self-hosted Bitwarden instance and upload the license file.
Step 4: Renew annually. The license expires after one year. Renew your subscription to get a new license file.
You are paying for a license to use premium features on your own infrastructure. The license is not per-seat—one Premium license covers one individual account. If you buy Families, it covers six family members. For organizations, buy a Teams or Enterprise license.
If you need SSO (SAML, OIDC) or SCIM provisioning for automated directory sync, Enterprise is the only option, and licensing costs increase accordingly.
Bitwarden Licensed vs. Vaultwarden: Which One for Your Team?
Choose Bitwarden Licensed If:
- You need SSO integration with Azure AD, Okta, or other enterprise identity providers. Vaultwarden does not support SAML or OIDC.
- You require SCIM provisioning to sync and manage users automatically from your directory.
- Your organization needs official support and SLAs for compliance reasons.
- You need SOC 2 Type II audit reports from your password manager vendor. Bitwarden provides these; Vaultwarden does not.
Choose Vaultwarden If:
- You want all premium features with zero licensing cost. The software is free (AGPL-3.0 open-source) and all premium features are unlocked by default.
- You are hosting for a small team, family, or yourself. Vaultwarden needs only 50 MB RAM; Bitwarden needs 2+ GB, making Vaultwarden suitable for even a Raspberry Pi.
- You value no vendor lock-in. Your data lives in a SQLite database you control. Export it anytime, migrate anywhere.
- Your organization does not require SSO or SCIM. These are Bitwarden Enterprise only.
- You prefer open-source transparency. Vaultwarden is publicly auditable on GitHub (70.5K stars, 3,148 commits, actively maintained by volunteers).
Choose Managed Vaultwarden (Opsily) If:
- You want all premium features, zero licensing fees, without running your own server.
- You want fully managed hosting: we handle backups, SSL certificates, updates, and monitoring.
- Your team is 1-100 people and does not require enterprise SSO or SCIM.
- You want German data residency for GDPR peace of mind. Your data stays in ISO 27001-certified German data centers.
- You want low, predictable cost: €3-10/month for a fully managed service, compared to the hidden costs of self-hosting (your time, monitoring, backups, security updates).
Frequently Asked Questions
Answers to common questions about Bitwarden licensing and Vaultwarden premium features.
When you self-host official Bitwarden without a license, you receive unlimited password storage, multi-device sync, password generator, text-only Bitwarden Send, and basic two-step login options (email, authenticator apps, hardware keys). You do not get TOTP (integrated 2FA code generator), file attachments, vault health reports, emergency access, or advanced authentication methods like YubiKey and FIDO2. These premium features require a paid license file uploaded to your server.