Chapter 1 · 1.2
Bitwarden, KeePassXC, Vaultwarden or your browser: which one suits you?
There is no single best password manager. It depends on your devices, whether you share passwords and how much you want to manage yourself. This article compares the options side by side.
The options side by side
| Bitwarden | KeePassXC | Vaultwarden | Your browser or phone | |
|---|---|---|---|---|
| Where is your vault stored? | With Bitwarden (EU or US region) | A file on your computer | Your own server | With Google, Microsoft, Apple or Mozilla |
| Sync | Automatic | Set it up yourself, for example via Nextcloud | Automatic, via your server | Automatic, within the same brand |
| Apps | Browser, Windows, Mac, Linux, Android, iPhone | Windows, Mac, Linux and browser; a different app on your phone | The Bitwarden apps | Built in |
| Sharing in a team | Yes, via an organisation | Limited, with a shared file | Yes, via an organisation | Limited |
| Emergency access | Yes, with a paid plan | Set it up yourself | Yes | Varies by brand |
| Who manages it? | Bitwarden | You (file and backup) | You (server, updates, backup) | The brand |
Which one should you choose?
- You want it easy, on all your devices, and perhaps want to share with your team or family: a cloud manager such as Bitwarden. Choose the European region when you sign up, so your vault is stored in the EU (see Creating a Bitwarden account in the European region).
- You want to keep everything in your own hands and mainly use one or two computers: KeePassXC. Your vault is a single file. Put that file in your Nextcloud to use it on more devices (see KeePassXC in your browser, on your phone and on more computers).
- You have your own VPS and want the convenience of Bitwarden without your vault being stored with another company: Vaultwarden. Expect some admin work: you handle updates, https and backups yourself (see Using Vaultwarden on your own VPS).
- You only use devices from one brand and don't share anything: the manager built into your browser or phone may be enough. Please note: there is often no separate master password. Anyone who gets into your logged-in computer can then also get to your passwords. So always secure your device with a PIN, password or fingerprint.
The Dutch NCSC advises that, when choosing, you also look at two-step verification for the manager, sharing with colleagues and the business model behind a free version. The German BSI points out that with a cloud manager, the location of the servers determines which privacy laws apply. You'll find more questions to help you choose in the lesson Choosing and using password managers of the Safe online course.
What about the Passwords app in Nextcloud?
There is a Passwords app for Nextcloud that puts a password vault in your Nextcloud. That app isn't included in the WebOké Nextcloud packages. You also can't install apps yourself in your WebOké Nextcloud (see Which apps are included in my package? and Permissions: who manages what in your Nextcloud?). Still want to keep your vault in your own Nextcloud? Then use KeePassXC and put the vault file in your Nextcloud (see KeePassXC in your browser, on your phone and on more computers). Your vault stays encrypted: Nextcloud only sees an encrypted file.
Tip: Not sure? Start with one program and use it for a few weeks. You can always switch later: all the programs in this manual can export and import your vault (see Making a backup or export of your vault).