Bitwarden

Kyle Spearrin shipped the first version in 2016 as a side project. The vault is encrypted on the client before it leaves, so the server only ever sees ciphertext — the same model as LastPass and 1Password. The difference is that the code can be audited and the server can be self-hosted.

The official server is heavyweight, so most self-hosters run Vaultwarden instead, an unofficial Rust reimplementation small enough for a Raspberry Pi. When LastPass leaked encrypted vaults in 2022, Bitwarden picked up a wave of new users, which says something about how this industry actually wins customers.