Last week Lao Zhou called me, his voice shaking
His former assistant quit, then posted screenshots of client account passwords from three platforms to her WeChat Moments — because they'd always been passing passwords via WeChat. I felt a chill hearing this. Last year I did the exact same thing: sent a client's Notion link and password in a Xiaohongshu DM to teach my assistant how to log in.
So what is Bitwarden? Who's using it
Basically an encrypted password vault. You only remember one master password (just set one you can recall), and it stores the rest. I know a Xiaohongshu agency operator named Linlin — her team of 4 has been dumping every client account into a shared Bitwarden folder since last year. New hires get pulled in directly; old hands leaving get kicked out with one click, barely time to screenshot.
Why's it trending again? Bitwarden switched its open-source license last week (called "dual licensing"), which kicked up a debate in the dev community. But for regular folks like us, the free tier still has everything: unlimited passwords, phone and computer sync, auto-generated passwords, built-in 2FA.
What it costs to copy this today
💰 Money: Personal tier free forever; Teams $3/person/month (~¥22), half the price of 1Password
⏱️ Time: 10 min from signup to importing your first password
🎯 Skill barrier: Just know how to use a phone app, zero code
👉 First step: Go to bitwarden.com, hit "Get Started", sign up with your email, set a master password you can remember (e.g., birthday + pet name mashed together), then save your WeChat password in it to test
How to use it at each stage
Just starting / solo: Don't get greedy. Move just three passwords in first — email, domain registrar, banking app. That plugs 80% of the holes.
Got 1-2 clients: Open the "Organization" feature, build a shared folder, drop client accounts in. Your assistant can log in but can't see plaintext. When a client changes their password, no need to ping everyone individually.
Scaling (5+ people): Switch to the paid Teams plan. Each employee gets a separate account. Who viewed which client password and when — there's a backend audit trail you can check. When something goes wrong, you can trace who did it.
This tool isn't for everyone. If you only have 1-2 clients a year, passing things on WeChat is fine. But the moment you start hiring or start piling up client data, the earlier you set this up, the less headache later.