Bitwarden Changes 2026:
5 Things That Happened
While You Weren’t Watching
None of it made the changelog
All of it affects your account.
Author: Baizaar Lee | Date Published: 20 May 2026 | 9 min read
Between February and May 2026, Bitwarden made five significant changes. A new CEO with a private equity exit background quietly replaced the co-founder. A long-serving CFO departed and was replaced by someone whose most notable role ended with a product being wound down. The phrase “Always free” vanished from the product page, then reappeared after press coverage broke the story. Company values were rewritten to remove the word “Transparency.” Not to forget during all of this, they put their prices up. Not one of these Bitwarden changes 2026 was announced in a press release. None was communicated directly to Bitwarden’s user base. This article covers each change, what it actually means if you’re on the free plan, and what a privacy-conscious individual does next.
TL;DR: Bitwarden’s free plan still exists and still works as of May 2026. The concerns are not about today’s product. They are about the incentive structure now running it.
- Change 1: Bitwarden Replaced Its CEO in February 2026
- Change 2: The Bitwarden CFO Left in April 2026
- Change 3: Bitwarden Rewrote Its Core Values on 4 May 2026
- Change 4: Bitwardens 'Always Free' Was Removed (Then Quietly Restored)
- Change 5: Bitwarden Raised Prices in January 2026
- What Do These 5 Bitwarden Changes 2026 Tell Us Together?
- How to Export Your Bitwarden Vault (Just in Case)
- Is Proton Pass a Sensible Alternative to Bitwarden in 2026?
- Bitwarden Changes 2026 (FAQ)
- What to Do If You're Reconsidering Bitwarden in 2026
Change 1: Bitwarden Replaced Its CEO in February 2026
Michael Crandell co-founded Bitwarden and ran it for over a decade. He was the kind of CEO who posted in community forums, whose name appeared in changelogs, and whose presence gave the product a particular character. In February 2026, he was replaced by Michael Sullivan. No press release. No community post. No founder letter. Just a LinkedIn profile update and some very quiet internal shuffling that the community pieced together themselves.
Sullivan’s professional background is not a secret. His LinkedIn makes it plain: experience across “all facets of M&A” and a track record working with “leading private equity firms.” His two most prominent roles prior to Bitwarden: at Acquia, where he helped orchestrate a $1 billion sale to Vista Equity Partners, and at Insightsoftware, where he drove a $1 billion PE investment round. Those are not the credentials you hire when you are trying to remain a community-focused, open-source password manager. They are the credentials you hire when you have a different kind of exit in mind.
You can read the full breakdown of this leadership pattern over at IT’s FOSS’s investigation into Bitwarden’s sneaky changes, which was one of the first places to join the dots in print.
Why the Silence Matters More Than the Change
The Bitwarden changes 2026 watchers on Hacker News noticed the CEO swap before Bitwarden acknowledged it publicly.
Open-source security products run on a specific kind of trust. Users don’t just trust the code. They trust the people committing to the code’s continued transparency. A CEO succession is not an internal HR matter in that context. It is a signal about direction. The Bitwarden community noticed on Reddit and Hacker News before any official acknowledgement appeared. That is backwards. For a product whose entire value proposition rests on being auditable and honest, the silence is not a good look.
Change 2: The Bitwarden CFO Left in April 2026
Stephen Morrison’s departure as CFO went even quieter than the CEO change. His replacement is Michael Shenkman, former CEO of InVision. If you worked in product or design in the 2010s, you remember InVision: raised over $350 million in venture funding, dominated the design prototyping space, then spent several years pivoting towards enterprise before quietly winding down its core Freehand collaborative product in 2024.
This is not an accusation. It is context. The pattern of a product company raising significant capital, pivoting to enterprise monetisation, and eventually sunsetting its consumer product is very well documented across the SaaS space. The fact that Bitwarden’s new CFO oversaw one such trajectory is, at minimum, relevant information for a user base that trusts the product with every password they own.
What CFO Changes Usually Signal
In PE-adjacent scenarios, CFO exits and replacements typically precede one of three things: a fundraise, a sale, or a structural reorganisation of the business. Morrison’s departure alongside a new M&A-specialist CEO is not a single data point. It is a pattern. Neither event alone would raise an eyebrow. Together, they do. And if you’re someone who chose a password manager specifically because you didn’t want to play this kind of corporate guessing game, here’s the thing: you shouldn’t have to.
Change 3: Bitwarden Rewrote Its Core Values on 4 May 2026
Of all the bitwarden changes 2026 produced, this one landed strangest. Bitwarden’s internal values have long been expressed as a GRIT acronym. As of 4 May 2026, that acronym was updated. “Inclusion” and “Transparency” were removed. “Innovation” and “Trust” took their place.
The edit was made to a four-year-old blog post. No change log. No version note. No announcement. The post simply reads differently now than it did on 3 May. If you weren’t specifically watching for it, you would never know.
The Word Bitwarden Removed
Transparency is not just a brand value for a password manager company. It is an operational promise. Bitwarden’s users chose it, in many cases, specifically because the product’s open-source codebase allowed them to verify what was actually happening to their credentials. The argument from that community has never been “we trust Bitwarden the company.”
It has been “we can verify the code, so trust is auditable rather than assumed.” Removing “Transparency” from official company values, without a word of explanation, on a security product, is at best a communications failure. The full record of this particular change is documented in ppb1701’s detailed forensic analysis of the quiet renovation at Bitwarden, which caught the edit within days.
💬 Thinking about your options? Proton Pass publishes its source code, its independent Cure53 security audit, and its privacy policy in plain English. Right now, through BAIZAAR, you can get 50% off Proton Pass Plus with a 30-day money-back guarantee. No commitment. No corporate word games.
Change 4: Bitwardens ‘Always Free’ Was Removed (Then Quietly Restored)
In April 2026, Bitwarden’s personal plan page no longer carried the phrase “Always free.” It had been there for years. Then it was gone.
Fast Company reported this on 15 May 2026, covering both the values change and the language removal in the same piece. Shortly after the article published, the phrase reappeared on the product page. Bitwarden’s explanation: a “marketing error.” The product page itself, the page that lists what the free plan actually includes, was not updated alongside the restoration. Just the phrase. Back in. Job done. Say no more.
Bitwarden’s CCO, Gary Orenstein, offered this statement in response to questions: the company “remains committed to offering a robust free plan that delivers meaningful value.”
Read that carefully. There are no named features in that sentence. There is no timeline. There is no use of the word “always.” The phrase “robust free plan” can describe a plan with fewer features than today’s plan and still be accurate, depending on your definition of robust. “Meaningful value” is a subjective standard that can be satisfied by a plan that stores ten passwords if someone decides that constitutes value. That is not cynicism. That is what happens when lawyers draft customer communications.
The LastPass Parallel
In February 2021, LastPass restricted free users to a single device type with two weeks’ notice. No warning. Just an email. Bitwarden built a significant portion of its user base on the back of that change. Those same users are now watching Bitwarden remove the phrase that distinguished it from the product they left. The Privacy Guides community thread on this topic captures the mood well: a mix of “let’s not panic” and “we’ve seen this film before.”
Change 5: Bitwarden Raised Prices in January 2026
This one was announced. Bitwarden Premium moved from approximately $10 per year to $19.80 per year. Families went to $47.88 per year. The price increase is, on its own, not unusual. Products adjust pricing. Inflation is real.
The issue is context. Five changes in the same calendar year. Leadership swap with no announcement. CFO replacement. Values rewrite. Free-tier language removal and restoration. Price rise. Each of these, individually, is explainable. Together they describe a company moving in a particular direction, and that direction is not towards reducing monetisation. The Hacker News discussion thread on the combined changes is worth a read if you want to see how the security and developer community parsed all of this in real time.
How That Stacks Up Against Proton Pass Pricing
Bitwarden Premium now costs $19.80 per year. Proton Pass Plus, with the BAIZAAR exclusive deal, comes in at 50% off the standard rate. Or if you’re feeling adventurous you might want the full “Proton stack” – including Mail, Drive, VPN, and Pass together, Proton Unlimited offers up to 34% off through our link, which when you do the maths per product makes individual Bitwarden Premium look like poor value.
If you’re managing passwords for a remote team, our deep-dive on the best password manager for remote teams in 2026 has the full breakdown.
💬 Recalculating what Bitwarden is worth to you in 2026? Proton Pass is a fair comparison point, and right now the maths actually work in your favour.
Get 50% off Proton Pass Plus → | Up to 34% off Proton Unlimited →
What Do These 5 Bitwarden Changes 2026 Tell Us Together?
Here’s the honest position. Bitwarden’s free plan works. The code is still open source. The Vaultwarden self-hosting option still functions. Nothing has been taken away from you today.
What has changed is the incentive structure at the top. A PE-exit-specialist CEO. A CFO who presided over a product wind-down. A values rewrite that removed Transparency. A free-promise removal and a careful restoration with a legally hedged replacement statement. A price rise. Five things, four months, zero proactive communication. You do not need to believe a sale is imminent or a free tier cut is confirmed to look at that pattern and decide you’d rather have a backup plan. You just have to recognise that you chose a password manager partly because of the values it claimed to hold, and some of those values are no longer on the company’s official record.
The Question Worth Sitting With
If these same changes happened at a bank holding your savings, would you feel comfortable? Probably not fully. A password manager holds something in some ways more sensitive than money: the keys to every account you own. The bar for “I trust the people running this” should be at least as high. And if your answer to that question makes you slightly uncomfortable, the next two sections are for you.
How to Export Your Bitwarden Vault (Just in Case)
This is worth doing regardless of whether you intend to leave. Think of it as a smoke alarm test, not a fire evacuation. Five minutes, once a quarter, and you will never be in a position where someone else’s corporate decisions leave you locked out of your own credentials.
- Log into your Bitwarden web vault at vault.bitwarden.com
- Select Tools from the top navigation menu
- Click Export Vault
- Choose .json for a full re-importable version; .csv if you want something human-readable
- Enter your master password to authorise the export
- Save the file somewhere encrypted. Not your desktop. Not an unprotected cloud folder.
- Open the file and confirm a known entry is present before closing it
One thing most people miss: Bitwarden exports do not include file attachments. If you’ve stored documents or secure notes with attached files, those need to be moved manually. Check before you assume the export is complete.
Bitwarden Where to Export the File Safely
If you’re already considering a move towards Proton’s ecosystem, Proton Drive handles this well. End-to-end encrypted, Swiss legal jurisdiction, zero-knowledge architecture. It also ties into the same Proton Unlimited subscription that covers Pass, Mail, and VPN, so you’re not paying extra for storage. Worth knowing before you make a decision either way. Read our take on Proton Drive’s free tier here.
Is Proton Pass a Sensible Alternative to Bitwarden in 2026?
For most people reading this, yes. Particularly if the reason you chose Bitwarden in the first place was its open-source ethos, its transparency, or the fact that it wasn’t a PE-backed product optimised for an exit.
Proton Pass is owned by Proton AG, a Swiss non-profit. Founded by scientists from CERN. Funded through subscriptions, not PE rounds. CEO Andy Yen has not led an M&A exit. The product was independently audited by Cure53 in 2023. The code is on GitHub. The privacy policy is not twelve pages of corporate hedging followed by a quiet “subject to change.”
The free tier includes unlimited passwords, unlimited device sync, full two-factor authentication, and ten hide-my-email aliases powered by SimpleLogin. That last feature does not exist on Bitwarden’s free plan at any tier. It is also, quietly, one of the most underrated security features in a password manager: using a different email alias per service means a data breach at one site cannot be correlated back to your real address across others.
It is not perfect. There is no self-hosting option, which will be a dealbreaker for a specific group of users. The import from Bitwarden works cleanly via JSON. It takes under five minutes. And if you’re managing passwords as part of a broader privacy setup, it sits neatly inside the Proton ecosystem without any awkward integrations. Speaking of which, if you’re wondering whether your current setup involves storing passwords in a browser, our piece on whether Microsoft Edge is safe for passwords in 2026 covers exactly why dedicated managers matter.
🔐 Ready to make the move? Right now, BAIZAAR readers get 50% off Proton Pass Plus with a 30-day money-back guarantee. Unlimited passwords, unlimited devices, 10 email aliases, and a non-profit that doesn’t have a PE exit CEO. No credit card required to start on the free plan.
Claim 50% off Proton Pass Plus →
🛡️ Want the full setup? Proton Unlimited bundles Pass, Mail, Drive, and VPN together. BAIZAAR readers get up to 34% off with a 30-day money-back guarantee.
Bitwarden Changes 2026 (FAQ)
Did Bitwarden remove its free plan in 2026?
No. The bitwarden changes 2026 brought several things. A removed free plan was not one of them. The phrase “Always free” was deleted from the product page in April 2026 and later restored after Fast Company reported the removal. The free plan itself remains active as of May 2026, with unlimited passwords and cross-device sync intact.
Who is Bitwarden’s new CEO in 2026?
Michael Sullivan became Bitwarden’s CEO in February 2026, replacing co-founder Michael Crandell. Sullivan’s professional background centres on mergers, acquisitions, and private equity transactions, including leading a $1 billion PE sale at Acquia and a $1 billion PE investment round at Insightsoftware. The change was not publicly announced.
Did Bitwarden change its company values in 2026?
Yes. On 4 May 2026, Bitwarden updated its internal GRIT values, replacing “Inclusion” and “Transparency” with “Innovation” and “Trust.” The change was made to an existing blog post without a public announcement, change log, or explanation. The edit was first documented publicly by ppb1701’s forensic analysis.
Is Bitwarden still open source?
Yes. Bitwarden’s client applications remain open source as of May 2026. The leadership changes and values rewrite do not alter the codebase’s open-source status. Self-hosting via Vaultwarden continues to function, though users relying on the self-hosted route should monitor API compatibility if Bitwarden makes server-side architecture changes.
Is Proton Pass a good Bitwarden alternative in 2026?
Proton Pass is the strongest alternative for users the Bitwarden changes 2026 have left reconsidering their setup. It is independently audited by Cure53 (2023), open source, backed by Swiss non-profit Proton AG, and offers a free tier with unlimited passwords, unlimited sync, and ten email aliases. It does not support self-hosting. BAIZAAR readers currently have access to 50% off Proton Pass Plus with a 30-day money-back guarantee.
What to Do If You’re Reconsidering Bitwarden in 2026
Three honest options for anyone where the Bitwarden changes 2026 have left uneasy.
- Stay and monitor. The free plan works. Export your vault quarterly. Watch the product page and community forums. If features are cut or pricing changes reach the free tier, you already have an exit path.
- Export and migrate now. If the ownership trajectory is enough of a signal, migration to Proton Pass takes under ten minutes via JSON import. Run both vaults in parallel for a few weeks. Delete Bitwarden when you’re confident.
- Stay on Bitwarden, add Proton elsewhere. If you self-host via Vaultwarden and want to keep doing that, combining it with Proton Mail and Proton Drive for everything else is a perfectly rational split. Not mutually exclusive.
🔐 50% off Proton Pass Plus (BAIZAAR Exclusive) → 🛡️ Up to 34% off Proton Unlimited (BAIZAAR Exclusive) →
Both offers include a 30-day money-back guarantee. No risk.
Affiliate disclosure: This article contains affiliate links. If you sign up for Proton Pass or Proton Unlimited through our links, BAIZAAR earns a commission at no extra cost to you. We have an exclusive deal: 50% off Proton Pass Plus and up to 34% off Proton Unlimited, both with a 30-day money-back guarantee. Our editorial positions are not shaped by commercial relationships.
Article covering bitwarden changes 2026, fact-checked and accurate as of 20 May 2026.
