The short version
All five products in this comparison clear the security baseline. The real differences are where each one draws its paywall and which platforms it runs on.
Pricing and feature data were taken from each vendor's own site in November 2026. These products change prices often; treat the vendor's site as authoritative.
Three questions to ask first
1. Where does your vault live?
Three models: the vendor's servers, storage you control (WebDAV, your own server), or nowhere — local only.
One common misconception worth clearing up: a cloud password manager does not mean "handing your passwords to the vendor." 1Password and Bitwarden both document end-to-end encryption; what sits on their servers is ciphertext. That is the baseline for this category, not any one vendor's advantage.
2. How many devices, and which systems?
One phone is a completely different requirement from "iPhone + Windows + Android tablet + work Mac". Platform coverage is the hardest constraint in this category — a product you cannot install scores zero, however good it is.
3. What are you willing to pay for, and for which feature?
This is the one most people skip. Every free tier below has a limit, but the limits are in completely different places.
Baseline capabilities
| 1Password | Bitwarden | Enpass | KeePass | KeyMe Pass | |
|---|---|---|---|---|---|
| End-to-end encryption | ✅ | ✅ | ✅ | ✅ | ✅ |
| Autofill | ✅ | ✅ | ✅ | via plugins | ✅ |
| Passkeys | ✅ | ✅ | ✅ | via plugins | ✅ |
| Browser extension | ✅ | ✅ | ✅ | third-party | ✅ |
| Import / export | ✅ | ✅ | ✅ | ✅ | ✅ |
| Open source | ❌ | ✅ | ❌ | ✅ | ❌ |
Mostly ticks — which is the point. End-to-end encryption is an entry ticket, not a selling point. A vendor leading with "we use AES-256" is usually a vendor without much else to say. Note the last row: we are not open source, and Bitwarden and KeePass are.
Free tiers: everyone draws a line, in a different place
| Product | Where the free tier stops |
|---|---|
| 1Password | No free tier — 14-day trial only |
| Bitwarden | Built-in TOTP, attachments, emergency access and security reports are Premium |
| Enpass | 25 items / 1 vault |
| KeePass | No feature limits (open source), but you host sync yourself |
| KeyMe Pass | Multi-device sync is paid; TOTP, passkeys and security checkup are free |
Bitwarden is often described as the most generous free tier. That is half right: unlimited items, unlimited devices — but built-in two-factor codes are Premium, so free users keep a separate authenticator app. (Source: Bitwarden’s own pricing page)
Enpass inverts it: sync is free, but 25 items runs out fast. 1Password simply has no free tier. KeyMe Pass keeps features intact and charges for multi-device sync — complete on one device, paid the moment you want a second.
So "whose free tier is most generous" is the wrong question. Each vendor is betting on what you care about least. Bitwarden bets you will keep codes separately; Enpass bets your vault is small; 1Password bets you will just pay; we bet you use one device.
Pricing and platforms
| Product | Individual | Family | Platforms |
|---|---|---|---|
| 1Password | $2.99/mo (promo; list $3.99) | $4.49/mo, 5 people | iOS / Android / Win / Mac / Linux / browser |
| Bitwarden | $1.65/mo ($19.80/yr) | $3.99/mo, 6 people | Same as above |
| Enpass | $1.99/mo | $3.99/mo, 6 people | Same as above |
| KeePass | Free | — | Windows mainly; others via community ports |
| KeyMe Pass | One-time purchase (subscription also available) | — | iOS / Android / HarmonyOS / Mac / Win / browser |
⚠️ 1Password's $2.99 is promotional; list price is $3.99, and it rose in March 2026 (individual annual $35.88 → $47.88). Check whether a low price is first-year only.
Four of the five are subscription-only; KeyMe Pass retains a one-time purchase, now uncommon in this category. One caveat applies to any perpetual licence: its long-term value depends on continued maintenance. 1Password's older perpetual licences ceased working after Chrome 99 — a precedent worth knowing.
Who should use which
1Password — for people who will pay for polish and do not want to tinker. The most finished product of the five, with the smoothest family sharing. No free tier, and it just raised prices.
Bitwarden — for budget-conscious people with many devices. Open source, self-hostable, unlimited items and devices on the free tier, $19.80/yr. If you rely heavily on two-factor codes, note they are Premium.
Enpass — for people who already have cloud storage and want the vault in their own hands. Supports WebDAV and services like Nextcloud. The 25-item free tier is effectively a trial.
KeePass — for technical users willing to wire up sync and plugins themselves. Completely free, completely open, data entirely yours; every convenience is DIY. Mobile and autofill rely on third-party builds, so quality varies.
KeyMe Pass — ours. It fits three situations: a single device (the free tier is not feature-stripped — TOTP and passkeys included), a HarmonyOS device (see below), or wanting to control storage without running a server (sync can stay off entirely, or point at your own WebDAV).
We would of course like you to pick KeyMe Pass. Not because it wins every row, but because of the free-tier table above: the others gate features; we gate device count. On a single device you get the complete product — two-factor codes, passkeys and the security checkup included, all of which are paid tiers elsewhere. Add devices later with a one-time purchase rather than an annual renewal.
A note for HarmonyOS users
On HarmonyOS NEXT devices, the other four have no official native build. Bitwarden's forum states there are no plans to publish to Huawei AppGallery; 1Password support has said it cannot confirm whether or when HarmonyOS will be supported, suggesting browser access instead.
Community builds exist (Homowarden and others) but are not independently audited — not advisable as the only home for password data.
Finally
All five are mature products, but if you want one line from us: start by answering how many devices you have.
Just one — install KeyMe Pass; the free tier is the complete product, so do not pay for sync you will not use. A HarmonyOS device — there are not many options, and we are one of the few with a native build. Several devices and open source matters to you — that is Bitwarden and KeePass territory; we are not open source, as the table says.
Otherwise, the practical move is to import your passwords and use it for two weeks. Whether filling feels smooth, search is fast and switching devices is painless — two weeks tells you more than ten reviews. All five support standard import and export formats, so you can always move again — which is why we are happy to let you try first.