# Bitwarden vs Passbolt: privacy compared

| Criterion | Bitwarden | Passbolt |
| --- | --- | --- |
| Grade | C (73/100) | C (66/100) |
| Jurisdiction | United States (Five Eyes) | Luxembourg |
| Open source | Yes | Partial |
| No trackers or telemetry | No | No |
| No ads or data sales | Yes | Yes |
| Independent audit | Yes | Yes |
| Transparency report | No | No |
| Tells users about requests | No | No |
| TLS configuration | Yes | Yes |
| Security headers | Yes | Yes |
| Modern web standards | Not tested yet | Not tested yet |
| End-to-end encrypted vault | Yes | Yes |
| Local or self-hosted option | Yes | Yes |
| Full export | Yes | Yes |

**Bitwarden.** Bitwarden scores 73 out of 100 (grade C) on the password managers criteria. It meets 8 of 11 criteria: open source, no ads or data sales, independent audit, TLS configuration, security headers, end-to-end encrypted vault, local or self-hosted option and full export. It does not meet no trackers or telemetry, transparency report and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

**Passbolt.** Passbolt scores 66 out of 100 (grade C) on the password managers criteria. It meets 7 of 11 criteria: no ads or data sales, independent audit, TLS configuration, security headers, end-to-end encrypted vault, local or self-hosted option and full export. It partly meets open source. It does not meet no trackers or telemetry, transparency report and tells users about requests. It is based in Luxembourg: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

Source: https://privacyratings.com/compare/password-managers/bitwarden-vs-passbolt/