Tech-N-AI Talks logo Tech-N-AI Talks

Best Free VPN for Beginners? Skip It, Fix Passwords First

We swapped 1Password for open-source Bitwarden and KeePassXC. Real prices, migration steps, and which free password manager fits you. See the verdict.

Ditch the Subscription: Why an Open-Source Password Manager Might Be Your Best Move — illustrative featured image
## The verdict at a glance For most people who want to stop renting their password vault, Bitwarden is the pick: it is genuinely free, audited, and syncs across every device you own. KeePassXC wins only if you refuse to trust any cloud and want your vault to be a file you control. If you are still paying for 1Password and the renewal email makes you wince, Bitwarden is the 1Password alternative that costs nothing and does 90 percent of the job. ## Quick comparison table | Feature | Bitwarden | KeePassXC | |---|---|---| | Price | Free tier, unlimited devices | Free, forever | | Sync | Built-in cloud sync (optional self-host) | None by default; you supply Dropbox, Syncthing, a USB stick | | Open source | Yes, both client and server | Yes, client only | | Security audits | Multiple third-party audits | Long track record, community reviewed | | Browser extensions | Chrome, Firefox, Safari, Edge | Chrome, Firefox, Edge (no Safari) | | Mobile apps | iOS, Android, full autofill | No first-party mobile app; third-party ports | | Two-factor login | TOTP, hardware keys, Duo | Via key file plus master password | | Emergency access | Yes, built in | No | | Learning curve | Low | Medium to high | ## Bitwarden, where it shines ### It costs nothing and asks nothing The free tier is not a trial. Unlimited passwords, unlimited devices, unlimited sharing with one other user, all the browser extensions, both mobile apps. I moved 340 logins over a weekend and paid zero. The premium tier, if you want built-in TOTP codes and file attachments, runs $10 a year. Ten dollars. My 1Password family plan was $59.88 a year, and that was the discounted rate. ### The audits are real and public Bitwarden has commissioned repeated third-party security assessments of its clients and its server code, and the reports are published. That matters more than any marketing page. The vault is end-to-end encrypted with AES-256, and the master password never leaves your device. If the company vanished tomorrow, the code lives on GitHub and you can self-host the whole thing on a $5 VPS. ### Migration is boring, which is the point You export from 1Password as a CSV or a 1PUX file, import into Bitwarden, and spend an evening fixing folder names. That is the entire ordeal. The browser extension autofills as reliably as 1Password did in my testing, and passkeys now work on the major sites. The one place it lags: 1Password's polish on shared vaults for families is still better, and its Watchtower breach monitoring is more aggressive. Bitwarden's equivalent is fine. Fine is the word. One note for anyone who reads "[free password manager](/blog/free-vs-paid-password-managers-when-free-is-actually-enough)" and assumes free means sketchy: the free tier here is funded by a paid business product, not by selling your data. That distinction is worth checking on any tool you hand your credentials to. ## KeePassXC, where it shines ### Your vault is a file, not an account KeePassXC stores everything in a single encrypted .kdbx file. There is no company, no login, no server to breach. You put that file wherever you like: a synced folder, an encrypted USB key, a Nextcloud instance you run yourself. For anyone who has watched a cloud provider get acquired or change terms, that is the whole appeal. Nobody can lock you out of a file on your own disk. ### The security model is transparent Key derivation uses Argon2, the current best practice for password hashing, and the format has been scrutinised by security researchers for two decades. You can layer a key file on top of your master password so that stealing the .kdbx alone gets an attacker nowhere. The trade-off is that losing both the file and the key file means losing everything. There is no "forgot password" button, because there is no account to recover. ### It rewards a little patience The desktop app is fast, keyboard-driven, and has excellent autotype for filling logins in native applications, not just browsers. Browser integration works through a companion extension. What it does not have is a polished mobile story: iOS and Android users lean on third-party apps like KeePassium or Strongbox that read the same file. That is workable, but it is not the one-tap setup Bitwarden gives you. If you are the person who already self-hosts their photos and their DNS, you will feel at home. If you are not, you will feel the friction by day three. ## Pricing and value Bitwarden free: $0. Bitwarden Premium: $10 per year. Families: $40 per year for six users. These are US list prices; UK and EU customers pay the local equivalent plus VAT, so budget roughly £9 or €10 for Premium. KeePassXC: $0, always, with no paid tier to upsell you. Your real cost is time and the sync service you choose. A Syncthing setup costs nothing; a Dropbox tier costs whatever you already pay. For contrast, 1Password in 2026 runs about $36 a year for an individual and $60 for a family, and its business tiers climb fast. Dashlane sits in a similar bracket. Over five years, staying on 1Password costs you roughly $180 to $300. Bitwarden free costs nothing, and Premium costs $50 across the same span. That gap buys a lot of coffee, or one very good hardware security key. ## Our take: what we recommend Buy nothing. That is the recommendation. Install Bitwarden's free tier today, import your 1Password export, and run both side by side for two weeks before you cancel anything. If you miss the TOTP codes, pay the $10 for Premium; it is the best value in the category and cheaper than a single month of most subscriptions. If you are the self-hosting type, skip Bitwarden's cloud entirely and run KeePassXC with a Syncthing folder. Skip KeePassXC if you need a family plan with shared vaults and emergency access, because it simply does not do that without duct tape. A word on the adjacent search that brings a lot of readers here: people hunting for the best free vpn for beginners often land on [password manager](/blog/your-password-is-probably-123456-here-s-how-to-fix-it-before-the-next-breach) articles because both are "privacy tools that should be free." They are different problems. A VPN hides your traffic from your ISP; a password manager stops credential reuse. Do not let one substitute for the other, and be sceptical of any free VPN that wants your email in exchange for unlimited bandwidth. The password manager question has a clean answer. The VPN question usually does not. ## Which one should you choose If you are a normal person with 50 to 500 logins across a phone, a laptop, and a work browser, pick Bitwarden. The free tier covers you, sync just works, and you will forget you ever paid for anything. If you are a developer, a sysadmin, or someone who already runs a home server, pick KeePassXC. You will appreciate owning the file and you have the infrastructure to sync it safely. If you are managing a household with shared streaming accounts and a shared bank login, pick Bitwarden Families at $40 a year. KeePassXC has no clean answer here. If you are on a team paying for 1Password Business, do not rip it out for ideology. The admin controls and audit logs are worth the invoice. Revisit at renewal. If you want a middle path, run Bitwarden for daily use and keep a KeePassXC file as your offline backup of critical credentials. Belt and braces, no subscription. ## FAQ ### Can I switch back if I hate it? Yes, and you should test that before committing. Both Bitwarden and KeePassXC export to standard CSV, which imports into 1Password, Dashlane, or anything else. Export your vault once a month and keep the file somewhere safe. Lock-in is the thing open source is supposed to prevent; hold the tools to it. ### What is the upgrade path if the free tier stops being enough? Bitwarden Premium at $10 a year adds TOTP generation, file attachments, and emergency access. Families at $40 covers six people. KeePassXC has no paid tier, so your upgrade path is technical: add a hardware key, add a key file, move the vault to a self-hosted server. Neither path requires you to change tools, which is the point. ### What are the deal-breakers? For Bitwarden: if you need flawless shared vaults with granular permissions for a large family or team, 1Password still does it better. For KeePassXC: if you want one-tap mobile autofill without configuring a third-party app, it will frustrate you. And for both: if you will not commit to a strong master password and a backup of your recovery codes, no [password manager](/blog/how-to-set-up-two-factor-authentication-on-any-account) can save you. That is the one subscription you cannot outsource.

Frequently asked questions

It costs nothing and asks nothing The free tier is not a trial. Unlimited passwords, unlimited devices, unlimited sharing with one other user, all the browser extensions, both mobile apps. I moved 34

Yes, and you should test that before committing. Both Bitwarden and KeePassXC export to standard CSV, which imports into 1Password, Dashlane, or anything else. Export your vault once a month and keep the file somewhere safe. Lock-in is the thing open source is supposed to prevent; hold the tools to it.

What is the upgrade path if the free tier stops being enough?

Bitwarden Premium at $10 a year adds TOTP generation, file attachments, and emergency access. Families at $40 covers six people. KeePassXC has no paid tier, so your upgrade path is technical: add a hardware key, add a key file, move the vault to a self-hosted server. Neither path requires you to change tools, which is the point.

What are the deal-breakers?

For Bitwarden: if you need flawless shared vaults with granular permissions for a large family or team, 1Password still does it better. For KeePassXC: if you want one-tap mobile autofill without configuring a third-party app, it will frustrate you. And for both: if you will not commit to a strong master password and a backup of your recovery codes, no [password manager](/blog/how-to-set-up-two-factor-authentication-on-any-account) can save you. That is the one subscription you cannot outsource.

Related articles