Bitwarden Alternatives: Five Criteria to Check Before You Switch

Switching password managers is mostly a question of what happens after the move: how you recover the account, how you export the vault, and what the new provider asks from you at sign-up. The features on the pricing page matter less than these five points.

1. Where is the vault encrypted?

A manager that says it is secure must say where encryption and decryption happen. Look for client-side encryption, meaning the vault is encrypted on your device before sync. If the provider describes its server as a place where the vault is decrypted, the model is different.

2. What happens if you lose the master password?

This question separates the products. Some managers offer recovery by email or through support, which gives the provider a path to your data. Others use a secret held by you, or a threshold scheme spread across several holders. Ask for the recovery procedure in writing, and test it before you store anything important.

3. What does sign-up require?

Check whether you must give an email address, a phone number or a payment method before you can use the free tier. Each requirement links the vault to an identity and a recovery channel.

4. Can you export everything, and what format is it?

A full export is your exit. Check three things: whether the export includes attachments and notes, whether it can be encrypted, and whether the import into another tool works. Bitwarden offers an encrypted export option. Any unencrypted export is plain text, so delete it as soon as the import is done.

5. Hosted or self-hosted?

Self-hosting moves the operations to you: updates, backups, TLS and uptime. Vaultwarden is a community server that does this for Bitwarden clients. A hosted service moves the operations to the provider, and the trust question moves with them.

Checklist for the move

1. Export the current vault to an encrypted file, and keep a copy in a safe place.
2. Create the new account and test the recovery path with a dummy entry.
3. Import, then compare a sample of entries on two devices.
4. Remove the old export from disk and from any sync folder.
5. Keep the old account active until the new one has worked for a few days.

Where VaultKeepR fits

VaultKeepR is a hosted, zero-knowledge password manager. It does not ask for an email address to create an account. Recovery uses a threshold scheme (Shamir Secret Sharing, 3 shares out of 5 by default), explained in the Shamir article. Premium costs €17.99 per year, or €2.49 per month, on the pricing page. Test the five points above on a dummy vault before you move anything real.