LoginSign Up
← Back to all sparks
B

Bitwarden

DEVOPS
Velocity5.0

Open-source password manager for individuals and teams.

bitwarden.com ↗

Bitwarden's server releases are filling in Privileged Controls, one PAM building block a month.

privileged-accessenterprise-securitysecrets-managementpassword-managementopen-source
◆Current state
Bitwarden's monthly server releases are dominated by the plumbing for Privileged Controls, its privileged access management product. September's 2026.9.0 added the collection reads behind PAM access rules and scaffolded a credential rotation API; 2026.10.1 added seat purchases, trials, access audit and notifications. Alongside, 2026.9.2 added secrets versioning with restore events for Secrets Manager and SAML assertion encryption, and 2026.10.0 added temporary-link sharing of vault items.
◆Where it's heading
The sequence runs from permission types (2026.8.1) to access rules and rotation (2026.9.0) to billing and trials (2026.10.1), the order a product follows on its way to sale. Most of it sits behind feature flags, so the server code is ahead of what customers can switch on.
◆Prediction
A customer-facing Privileged Controls launch or beta is the likeliest next significant entry, given that seat purchasing and trials are already in the server.

◆Recent moves

  1. 13d ago

    Bitwarden server 2026.10.1 wires in Privileged Controls (PAM)

    The server release is dominated by Privileged Controls plumbing: seat purchases, trials, access audit and notifications for a PAM offering. It shows a new paid product being wired in before any public launch note.

    View source ↗
  2. 27d ago

    Bitwarden 2026.10.0 adds temporary-link sharing of vault items

    Bitwarden's server release adds sharing vault items through temporary links and a configurable access token lifetime, and fixes an extra-month charge when switching to annual billing during a trial.

    View source ↗
  3. 1mo ago

    Version 2026.9.2

    Secrets Manager gains versioning with logged restore events, and SAML SSO adds local assertion encryption, alongside staged-user invites. It sits between September's PAM access-rule work and October's PAM billing, broadening the enterprise surface rather than redirecting it.

    View source ↗
  4. 1mo ago

    2026.9.1: Reply-To fix on price-migration email

    A single cherry-picked fix setting Reply-To on the price-migration email. Housekeeping around the ongoing plan migration.

    View source ↗
  5. 1mo ago

    2026.9.0 adds PAM access-rule reads and a rotation API scaffold

    The PAM build-out continues: the collection reads behind access rules and a scaffolded credential rotation API land here, along with SSO support for staged org users and a policy requiring a single organization before fill assist can be enabled. It is the step between 2026.8.1's permission types and 2026.10.1's seat purchases.

    View source ↗
  6. 2mo ago

    Version 2026.8.2

    v2026.8.2 is a two-change patch: a route parameter enforcement fix and a version bump — pure maintenance with no user-facing change.

    View source ↗