The password manager that keeps up.
Nimblepass is a fast, open-source extension for Chrome and other Chromium browsers, for your Vaultwarden server or any server that speaks the Bitwarden API.
- Popup open to your vault
- 209 ms
- Field focus to its menu
- 13 ms
- Pick a login to a filled field
- 11 ms
- Of Bitwarden’s features on Vaultwarden
- 96%
Everything in the field, nothing in the way.
Fill from the field
Focus a field and pick a login from the menu beside it, in every frame, including cross-origin iframes and shadow DOM.
Unlock in 92 ms
Argon2id at 64 MiB on its own 11 KB WebAssembly kernel, in parallel Workers, never in the popup. Or a PIN, Touch ID or Windows Hello.
Works offline
Unlock, search, fill and edit with no connection. Edits sync when your server is back; conflicts are yours to settle.
Passkeys in your vault
Create and sign in with passkeys, stored the way the Bitwarden apps store them, so they sync to your other devices.
Read every line
Free software under the GPL-3.0. Release builds are reproducible, byte for byte. Source on GitHub
Fast where you feel it.
| Interaction | Nimblepass | Bitwarden 2026.10.0 |
|---|---|---|
| Open the popup to your vault | 209 ms | 1,170 ms |
| Focus a field to its menu | 13 ms | 362 ms |
| Pick a login to a filled field | 11 ms | 914 ms |
| Type a search to its match | 40 ms | 152 ms |
Both ran back to back in the same Chromium build, on a machine busy with other jobs; on an idle machine both are faster. How it was measured
Works with the server you already run.
Vaultwarden
Tested against Vaultwarden 1.37.4, with live sync through its notifications hub.
The Bitwarden API
The same encrypted vault as the official Bitwarden apps, so their mobile and desktop apps keep working on your account.
Nothing to migrate
Log in to the same server and turn the Bitwarden extension off. Or import from Chrome, Firefox, 1Password, LastPass and others.
Security you can read.
Secrets live in one place
The decrypted vault exists only in the extension’s background worker. The popup asks it for one value at a time, and a web page gets only what is filled into it.
Checked frame by frame
A login is released only to a frame whose own address matches the item, so a cross-origin iframe gets only its own logins, even inside a page that matches.
A menu pages can’t touch
The inline menu is an extension page in a closed shadow root. Clicks count only after it has been fully visible for 400 ms, which defeats overlaid decoys.
Server changes held for review
If a server loosens how an item’s address matches or turns off its master-password re-prompt, the trusted values stay in force until you review the change.
Nothing phones home
No telemetry, analytics or crash reporting, and the developer runs no servers. Your vault goes only to your server, encrypted before it leaves your device.
Reviewed, not yet audited
The pre-release review found no critical or high issues; 1 medium and 10 low findings were fixed, each with a regression test. There has been no independent audit.
Questions
Which browsers does it run on?
Chrome, Edge, Brave and other Chromium browsers, version 144 or newer. There is no Firefox or Safari version, and no mobile or desktop app.
Which servers does it work with?
Vaultwarden, or any server that speaks the Bitwarden API. Nimblepass is tested against Vaultwarden 1.37.4. Bitwarden’s own cloud (bitwarden.com, bitwarden.eu) isn’t supported. Vaultwarden setup
Can I keep using Bitwarden’s mobile and desktop apps?
Yes. Nimblepass uses the same encrypted vault format as the official Bitwarden apps, so they keep working on the same account. Turn off the Bitwarden browser extension, so the two don’t both offer to fill. Switching from Bitwarden
Is it made by Bitwarden?
No. Nimblepass is an independent project, not affiliated with or endorsed by Bitwarden, Inc. or the Vaultwarden project. It tells your server it is Bitwarden’s browser extension, because Vaultwarden turns features on or off depending on the client it sees.
What data does it collect?
None. There is no telemetry, analytics or crash reporting. A few optional features contact other services, such as Have I Been Pwned for exposed-password checks; none of them receives your passwords or vault contents. Privacy policy
Does it work offline?
Yes, once you have logged in on that browser. You can unlock with your master password, search, fill and edit without a connection; edits sync when the server is back. How offline sync works
Can I log in to Vaultwarden with a passkey?
Not yet: Vaultwarden doesn’t support passkey login. Log in with your master password, then unlock with the password, a PIN or biometrics. Passkeys for websites work. Passkey limits
How do I install it today?
Build it from source: clone the repository, run pnpm install and pnpm build, then load apps/extension/dist from chrome://extensions with Developer mode on. The store listings and release zips come with the first public release. Install steps
What does it cost?
Nothing. Nimblepass is free software under the GNU General Public License v3.0.