# Bitwarden vs Proton Pass: privacy compared

| Criterion | Bitwarden | Proton Pass |
| --- | --- | --- |
| Grade | C (73/100) | B (80/100) |
| Jurisdiction | United States (Five Eyes) | Switzerland |
| Open source | Yes | Partial |
| No trackers or telemetry | No | Partial |
| No ads or data sales | Yes | Yes |
| Independent audit | Yes | Yes |
| Transparency report | No | Yes |
| Tells users about requests | No | Yes |
| TLS configuration | Yes | Yes |
| Security headers | Yes | Partial |
| Modern web standards | Not tested yet | Not tested yet |
| End-to-end encrypted vault | Yes | Yes |
| Local or self-hosted option | Yes | Partial |
| Full export | Yes | Yes |

**Bitwarden.** Bitwarden scores 73 out of 100 (grade C) on the password managers criteria. It meets 8 of 11 criteria: open source, no ads or data sales, independent audit, TLS configuration, security headers, end-to-end encrypted vault, local or self-hosted option and full export. It does not meet no trackers or telemetry, transparency report and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

**Proton Pass.** Proton Pass scores 80 out of 100 (grade B) on the password managers criteria. It meets 7 of 11 criteria: no ads or data sales, independent audit, transparency report, tells users about requests, TLS configuration, end-to-end encrypted vault and full export. It partly meets open source, no trackers or telemetry, security headers and local or self-hosted option. It is based in Switzerland: Not in the Five, Nine or Fourteen Eyes; GDPR-style data protection law. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B+.

Source: https://privacyratings.com/compare/password-managers/bitwarden-vs-protonpass/