Bitwarden Announces Commitment to Achieve FedRAMP Class D (High) Certification

Bitwarden to meet rigorous federal cloud security and compliance requirements, expanding secure deployment options for organizations managing sensitive credentials and infrastructure secrets

SANTA BARBARA, Calif.--(BUSINESS WIRE)--Bitwarden, the trusted leader in passkey, password, and secrets management, today announced its commitment to achieving Federal Risk and Authorization Management Program (FedRAMP®) Class D (High) Certification for its cloud-hosted Password Manager and Secrets Manager.

Bitwarden already supports credential security across the federal government, including offices in all three branches, and teams in more than half of the 15 executive cabinet departments. Organizations that require direct control over their deployment environment can also self-host Bitwarden. Planned FedRAMP Class D Certification will add a dedicated cloud-hosted deployment option designed to meet FedRAMP requirements, reducing technical overhead, and offering federal agencies and the broader public sector a faster path to deployment.

Security controls for government environments

Built on trusted open source technology and end-to-end, zero-knowledge encryption, Bitwarden provides centralized controls for credentials, secure credential sharing, administrative policies, event logs, and integrations with existing identity systems. Bitwarden maintains ISO 27001, SOC 2 Type II and SOC 3 certifications, with security controls that support compliance with the NIST Cybersecurity Framework and NIST SP 800-63B.

How FedRAMP supports federal cloud deployment

FedRAMP provides a standardized, government-wide approach to assessing cloud security. Class D Certification is the highest FedRAMP security categorization and requires detailed security evidence and ongoing reporting to support certification decisions. Upon achieving certification, Bitwarden would provide federal organizations with validated, reusable security evidence to streamline reviews and support authorization decisions for cloud-hosted Bitwarden solutions.

“Federal agencies and public sector organizations need credential security that can operate within rigorous compliance requirements, and maintain complete transparency and control,” said Mike Sullivan, chief executive officer, Bitwarden. “Pursuing FedRAMP Class D Certification expands Bitwarden deployment options for federal adoption.”

Bitwarden expects to share additional details about certification status, availability, and procurement as the process advances.

For more information about Bitwarden for government and public sector organizations, please visit: https://bitwarden.com/solutions/public-sector/.

About Bitwarden:

Bitwarden equips enterprises and individuals with the power to securely manage and share information online with trusted open source security solutions. With a password manager for everyone, users can easily manage their entire online identity anywhere. Bitwarden Secrets Manager and Passwordless.dev enhance developer secrets security and streamline passkey development for end users and workforce authentication. Founded in 2016, Bitwarden serves over 80,000 businesses and more than 15 million users worldwide across 180 countries in 50+ languages. The company is headquartered in Santa Barbara, California. Learn more at bitwarden.com.