Bitwarden Send Encrypted Text: How It Works

Yes, Bitwarden Send lets you share encrypted text that is protected with end-to-end encryption, meaning only someone with the link and, if you set one, the password can read the content. You create a Send from your vault, choose a text note or a file, set expiration and access limits, and share the generated link—the actual text stays encrypted on Bitwarden’s servers and is decrypted only on the recipient’s device.

What Is Bitwarden Send?

Bitwarden Send is a feature built into the Bitwarden password manager that allows you to securely share text or files with anyone, even if they don’t have a Bitwarden account. It was introduced in 2020 and is available on all paid plans, as well as a limited version on the free plan. The core idea is that sensitive information—like a Wi-Fi password, a one-time recovery code, or a short message—can be shared without relying on email or messaging apps that might store the content permanently.

When you create a Send, the content is encrypted on your device using a key derived from your master password, then uploaded to Bitwarden’s servers. The recipient gets a link that, when opened, fetches the encrypted data and decrypts it locally in the browser. The server never sees the plain text, and even Bitwarden employees cannot read it.

How End-to-End Encryption Works in Send

Bitwarden uses AES-256-bit encryption for all vault data, and Send is no exception. The encryption key for each Send is generated on your device and is never transmitted to the server. Instead, the key is embedded in the share link itself (or provided separately as a password if you enable one).

Here’s the flow:

• You create a Send in the Bitwarden app or web vault.
• Your device generates a random encryption key and encrypts the text or file.
• The encrypted payload is uploaded to Bitwarden’s servers.
• You copy the share link, which contains the decryption key as part of the URL fragment (the part after #).
• When the recipient opens the link, their browser reads the key from the URL fragment, downloads the encrypted data, and decrypts it locally.

Because the key is in the URL fragment, it is never sent to the server when the link is opened—only the encrypted data is. This is the same technique used by many “zero-knowledge” sharing tools.

How to Create an Encrypted Text Send

Creating a Send is straightforward, whether you use the web vault, desktop app, or mobile app. The steps are similar across platforms:

1. Log in to your Bitwarden vault.
2. Go to the Send tab (in the web vault, it’s in the left sidebar).
3. Click New Send.
4. Choose Text as the type.
5. Enter a name (optional but helpful for organization).
6. Type the text you want to share in the Text field.
7. Set options: deletion date, expiration date, maximum access count, and whether to require a password.
8. Click Save.
9. Copy the generated link and send it to your recipient through any channel.

If you enable a password, you must share that password separately—ideally through a different communication channel (e.g., link via email, password via SMS).

Key Features and Limits

Bitwarden Send includes several controls that give you fine-grained control over the shared data:

• Deletion date: The Send is permanently deleted from Bitwarden’s servers after this date.
• Expiration date: The Send becomes inaccessible after this date, but it may remain on the server until the deletion date.
• Maximum access count: The Send can be viewed only a set number of times (up to 20 on paid plans).
• Password protection: A password can be required to view the Send, adding an extra layer of security.
• Hide text by default: On the viewing page, the text is hidden until the recipient clicks to reveal it, preventing shoulder-surfing.

Free accounts can create Sends with a maximum of 100 views or 7 days of expiration, while paid plans allow up to 20 access count and 30 days. File Sends are limited to 100 MB on free and 500 MB on paid.

Common Misconceptions and Pitfalls

One common misconception is that the share link itself is the only thing protecting the data. While the link contains the decryption key, anyone who obtains the link can view the Send. That’s why password protection is recommended for highly sensitive data.

Another pitfall is that the link is not meant to be permanent. If you need to share something that should remain accessible for a long time, a Send might not be the right tool—consider storing it in an encrypted note in your vault instead.

Also, note that Bitwarden Send does not provide a way to revoke a link once it’s been created. You can delete the Send manually, but if someone has already copied the content, you cannot undo that.

Comparing Bitwarden Send to Alternatives

Bitwarden Send is not the only tool for encrypted sharing. Here’s how it stacks up against common alternatives:

• One-Time Secret: This service lets you share a secret that self-destructs after being read. It’s simpler but does not offer file sharing or as many controls.
• PrivateBin: An open-source pastebin with encryption and expiration. It requires self-hosting for full control.
• Signal or WhatsApp: These messaging apps offer end-to-end encryption, but they are not designed for one-time or expiring links—messages can be screenshotted.
• Email with encryption (e.g., ProtonMail): Good for longer messages, but it requires the recipient to have a compatible account or a password.

Bitwarden Send stands out because it’s integrated into a password manager you may already use, and it offers a good balance of security and convenience.

Cost and Availability

Bitwarden Send is available on all plans, but the free tier is limited. The free plan allows Sends with up to 100 views and a maximum expiration of 7 days. Paid plans (Premium, Families, Teams, Enterprise) allow up to 20 views and 30 days, plus larger file sizes.

If you only need to share text occasionally, the free tier might be sufficient. For regular use, a paid plan is worth considering, but you should evaluate your needs before upgrading.

Frequently Asked Questions

Is Bitwarden Send really end-to-end encrypted?

Yes. The encryption happens on your device before the data is uploaded, and the decryption key is only in the share link. The server never sees the plain text or the key.

Can I share a Send with someone who doesn’t have Bitwarden?

Yes. The recipient does not need a Bitwarden account. They just open the link in a browser and enter the password if you set one.

How do I set a password on a Send?

When creating a Send, look for the option “Require password to view” and enter a password. You must share that password separately from the link.

What happens when a Send expires?

Once the expiration date passes, the Send becomes inaccessible. The data may still exist on the server until the deletion date, but it cannot be viewed.

Can I edit a Send after it’s created?

Yes, you can edit the text, name, and settings of a Send as long as it hasn’t been deleted. However, changing the text will generate a new encryption key, so the old link will stop working.

Is there a limit to how many Sends I can create?

Bitwarden does not impose a strict limit on the number of Sends, but there are limits on the number of views and expiration days per Send. Check your plan’s specifics.

Related

• Word Select Paragraphs With One Object?
• Oxygenos 15 Eligible Devices Full List & Timeline
• Delayed VR Accessory: What to Check Before Buying