From typed password to unlocked vault, step by step
All three managers follow the same broad pattern, documented in their security white papers. You type a master password. The app on your device mixes it with a salt and runs it through a deliberately slow key derivation function (KDF). The output is a key that never leaves the device. That key decrypts a second, randomly generated key stored on the server in encrypted form, and that second key (or chain of keys) decrypts your items. The vendor only ever receives encrypted blobs.
Bitwarden: the master password is stretched with PBKDF2 using 600,000 iterations and the account email as the salt, producing a 256-bit Master Key. HKDF stretches that to 512 bits, which decrypts your Protected Symmetric Key, a 512-bit key generated on your device. Each vault item also gets its own random 64-byte key. Vault data uses AES-CBC 256-bit encryption with HMAC authentication. You can switch to Argon2id under Settings, Security, Keys in the web app.
1Password: your account password goes through PBKDF2-HMAC-SHA256 with 650,000 iterations, according to its white paper. Separately, your Secret Key is processed with HKDF, and the two 32-byte results are combined to form the Account Unlock Key. 1Password calls this two-secret key derivation (2SKD). Data is encrypted with AES-256-GCM, and sign-in uses Secure Remote Password (SRP) so the password is not sent over the network.
NordPass: its business security white paper says the Master Password and a unique 16-byte salt go through Argon2id to produce a Master Key, which decrypts your private key on the device. Items are encrypted with XChaCha20 and authenticated with Poly1305; X25519 and XSalsa20 handle the public-key side used for sharing. The white paper does not publish Argon2id memory or iteration settings. NordPass also separates account login (email and account password, or single sign-on for business users) from the Master Password that unlocks the vault.
Published cryptography side by side
| Question | Bitwarden | 1Password | NordPass |
|---|---|---|---|
| Vault cipher | AES-CBC 256-bit with HMAC | AES-256-GCM | XChaCha20 with Poly1305 |
| Key derivation | PBKDF2-SHA256, 600,000 iterations by default; Argon2id optional (defaults 32 MiB memory, 6 iterations, 4 threads) | PBKDF2-HMAC-SHA256, 650,000 iterations, combined with the Secret Key | Argon2id with a unique 16-byte salt; parameters not stated in the white paper |
| Second secret beyond the password | None by default | Secret Key: 34 characters, 128 bits of entropy, never sent to 1Password | None for unlocking; a separate account password is used for login |
| How login is checked | Client sends a hash of the master password; server hashes it again with a random salt before storing | Secure Remote Password, so the password is not sent | Account email and password (or SSO for business users), then the Master Password unlocks locally |
| Can the vendor reset a forgotten master password? | No | No | No, but you can reset it yourself with your Recovery Code |
| Self-service recovery routes | Emergency access contact, organization account recovery, log in with device or encryption-capable passkey, an app still unlocked by PIN or biometrics | Family organizer or team admin recovery, a recovery code if you generated one, biometrics while still active | 24-character Recovery Code; biometrics can reset the Recovery Code; in business organizations, admins approve recovery requests |
What a breach of the vendor exposes, and what it cannot
If an attacker copied a vendor database, they would get encrypted vault data and whatever the vendor stores in the clear. Bitwarden is specific about the second part: its white paper lists administrative data such as names, email addresses, phone and other contact details, and the number of items in an account as separate from end-to-end encrypted vault data. It also states that Bitwarden never stores and cannot access the master password or the keys.
The real risk from stolen encrypted data is offline guessing. An attacker picks candidate passwords, runs each one through the same KDF and checks whether it decrypts. This is why iteration counts and memory settings matter: with Bitwarden PBKDF2 at 600,000 iterations, every single guess costs 600,000 rounds of HMAC-SHA-256 instead of one. Argon2id adds a memory cost, which is harder to speed up on graphics cards. Neither setting rescues a short or reused password, but both multiply the cost of every guess.
1Password designed 2SKD to remove that offline-guessing path. Its white paper says an attacker who captures server data would need to guess the account password and also have the 128-bit Secret Key, and that the information held on its systems cannot be used to check whether a password guess is correct. The trade-off is that you must keep the Secret Key, which lives on your signed-in devices and in your Emergency Kit.
NordPass splits each item into metadata (titles and other non-sensitive details) and secret data, each with its own keys, so permissions can let someone see that an item exists without decrypting its contents. Its white paper says NordPass never has access to unencrypted data.
Why a forgotten master password usually cannot be reset
Zero-knowledge is the reason. If the vendor could reset your master password and give you back your data, it would need a way to decrypt that data without you, and so would anyone who compromised the vendor. Bitwarden says plainly that it has no way to access, retrieve or reset your master password, and that without a recovery route you must delete the account and start again, losing individually owned items and attachments. 1Password says no one can reset your password.
Every recovery feature is therefore a second key you set up in advance: NordPass encrypts your private key a second time with a key derived from the Recovery Code; 1Password family organizers and team admins hold recovery keys for members; Bitwarden emergency access and organization account recovery only work if you or your organization enrolled in them before the emergency. If you never set any of these up, there is nothing to recover with.
What this means for you: a checklist
- Make the master password long and random, because a vendor breach turns it into the only barrier against offline guessing. Our passphrase guide shows a six-word method.
- Set up at least one recovery route today: print the 1Password Emergency Kit, download and print the NordPass Recovery Code, or add a Bitwarden emergency access contact.
- Bitwarden users: check Settings, Security, Keys. Since release 2026.2.1, accounts below 600,000 PBKDF2 iterations are prompted or upgraded. Raise iterations in steps of 100,000 and test on your slowest device.
- Bitwarden users on Argon2id: 1Password says its Bitwarden importer currently errors on Argon2id accounts, so if you might switch later, expect to change back to PBKDF2 before exporting.
- Do not store the master password inside the vault it unlocks; the 1Password Emergency Kit is designed to be printed and kept offline instead.
- Turn on two-step login for the account itself. It protects sign-in to the vendor service; it does not change how your vault is encrypted.
Questions before you decide
Can Bitwarden, 1Password or NordPass see my passwords?
Their documentation says no. Bitwarden states it never stores or accesses the master password or keys, 1Password says your password is never shared with anyone including AgileBits, and the NordPass white paper says it never has access to unencrypted data.
Is Argon2id better than PBKDF2?
Argon2id adds a memory cost that makes large-scale guessing on specialised hardware harder. Bitwarden offers both, with defaults of 600,000 PBKDF2 iterations or Argon2id at 32 MiB, 6 iterations and 4 threads. A long random master password matters more than the algorithm choice.
What does the 1Password Secret Key actually add?
It is a 128-bit random value combined with your account password during key derivation. 1Password says data stolen from its servers cannot be used to test password guesses without it, and it never has a copy, so keep your Emergency Kit safe.
If I forget my NordPass Master Password, is my vault gone?
Not if you saved the 24-character Recovery Code, which lets you set a new Master Password. If biometrics are enabled you can also generate a new Recovery Code. Without either, NordPass says access can only be restored with a full account reset.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- Bitwarden: security whitepaper Accessed 30 Oct 2026
- Bitwarden: encryption key derivation (KDF algorithms) Accessed 30 Oct 2026
- Bitwarden: forgot master password Accessed 30 Oct 2026
- 1Password security white paper (PDF) Accessed 30 Oct 2026
- 1Password: about 1Password security Accessed 30 Oct 2026
- 1Password: about your Secret Key Accessed 30 Oct 2026
- 1Password: if you forgot your account password Accessed 30 Oct 2026
- NordPass security white paper (business, PDF) Accessed 30 Oct 2026
- NordPass: what if I forgot my Master Password? Accessed 30 Oct 2026
- NordPass: how to generate a new Recovery Code Accessed 30 Oct 2026
- Import data from Bitwarden into 1Password Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.