macOS
Your systemThe files are not code-signed yet: double-click, then System Settings → Privacy & Security → Open Anyway. Or in Terminal:
xattr -d com.apple.quarantine bitmerger-macos-*
chmod +x bitmerger-macos-*
./bitmerger-macos-*
Free & open source
Runs only on your computer
Merge duplicate entries in Bitwarden and Vaultwarden
Bitwarden has no merge function. BitMerger finds duplicate logins across your personal vault, organizations and collections, and merges them without losing anything: URLs, notes, custom fields, TOTP, attachments and every old password.
Works with bitwarden.com, bitwarden.eu and self-hosted servers on
Demo data · click to enlarge
How it works
From duplicate chaos to a clean vault
BitMerger shows every group of duplicates as a card. Nothing changes in your vault until you have reviewed the groups and started the merge.
-
Log in
With email and master password (two-step login supported) or with your personal API key. Works with bitwarden.com, bitwarden.eu and self-hosted servers such as Vaultwarden. -
Scan
BitMerger searches your personal vault, your organizations and their collections for entries that belong together. -
Review
Every group is a card. Choose which entries take part, which one stays, which password stays and, if you like, a new name. Changes are saved automatically. -
Dry run
The dry run shows exactly what will happen, before anything is written. -
Merge
The merge runs in the background with progress. Closing the browser tab does not stop it; quitting waits for the current group. -
Selftest before the first merge
The selftest creates two throwaway entries on your server, merges them, checks the result and deletes them. Run it once before your first merge.
Features
Made for vaults that grew over the years
Imports, browser saves and shared organizations leave the same login three or four times. BitMerger finds those duplicates and only merges what really belongs together.
Vault, organizations, collections
Duplicates are found across your personal vault, every organization and its collections. Groups spanning several organizations are never merged automatically.
Careful matching
Duplicates have the same site and username, or the same site, no username and the same password. Entries without URL but with the same name and username are suggested, never preselected. A different username is never a duplicate.
By host or by domain
By host keeps bike-shop.zendesk.com and travel-agency.zendesk.com apart. By domain also merges shop.example.com and account.example.com and marks those groups. Platforms on the public suffix list always count as separate sites.
Equivalent domains
Common equivalent domains count as one site: live.com = microsoft.com, gmail.com = google.com, icloud.com = apple.com, amazon.de = amazon.com.
Leave folders out
Exclude folders such as old backups from the search. Recycle bin folders brought along by imports, like the "Recycle Bin" from KeePass, are left out by default.
Nothing gets lost
Every old password ends up in the password history of the entry that stays. URLs, notes, custom fields, TOTP, passkeys and attachments are combined.
What a merge does
| Field | Result |
|---|---|
| URLs, custom fields | Combined, duplicates dropped |
| Notes | Appended with the name of the source entry |
| Password | The one you chose; all others go to the password history |
| TOTP, passkey | Taken over if the remaining entry has none |
| Attachments | Copied to the remaining entry |
| Collections | Combined (same organization) |
| Duplicates | Moved to the trash, restorable for 30 days |
Groups spanning more than one organization are skipped until you untick entries so that only one organization is left. Bitwarden keeps at most five old passwords; groups whose current passwords would not fit are skipped.
Security
Your vault never leaves your computer
BitMerger is a single program on your own computer. No server, no account, no telemetry, and the source code is open for everyone to read.
Runs only locally
The interface listens on 127.0.0.1 only and needs a random token from the start link. Other websites and DNS rebinding are locked out.
Official Bitwarden CLI
Your master password goes straight to the official Bitwarden CLI. BitMerger downloads it from Bitwarden's GitHub releases and checks it against a pinned SHA-256 checksum.
No passwords on disk
BitMerger never writes passwords to disk, the scan result stays in memory. Master password, API secret and two-step codes are never stored.
Cleans up after itself
The Bitwarden CLI runs with its own throwaway data folder. Quitting logs out and deletes it, and so do 20 minutes without browser activity.
Safe by design
Dry run first. The entry that stays is written and verified before the duplicates are moved to the trash, where they can be restored for 30 days.
Open source
BitMerger is MIT-licensed. Anyone can check on GitHub exactly what it does with a vault.
Please note: While BitMerger runs, other programs on your computer could talk to the local Bitwarden CLI, just as they could use an unlocked bw session. Do not run it on a shared or untrusted computer, and keep an export of your vault.
Download
One file, nothing to install
Download, start, and the interface opens in your browser. Free and open source.
Version 1.0.0 released on October 14, 2026 Release notes
BitMerger runs on your computer
BitMerger is a program for macOS, Windows and Linux, it does not run on phones or tablets. Open this page on your computer, or send yourself the link.
Windows
Your systemThe files are not code-signed yet: if Windows warns you, click More info → Run anyway.
Linux
Your systemMake the file executable and start it:
chmod +x bitmerger-linux-*
./bitmerger-linux-*On first start BitMerger downloads the official Bitwarden CLI (about 45 MB), checks it and keeps it in its own cache folder. Nothing is installed system-wide.
Try it without a vault: start BitMerger with --demo.
Guides
Step by step to a clean vault
Detailed guides for the most common situations, with screenshots.
How to merge duplicate entries in Bitwarden, step by step
Bitwarden has no merge function. This guide shows how to find duplicate logins and merge them with BitMerger without losing URLs, notes, TOTP or old passwords.
Read the guideVaultwarden: find and merge duplicate entries
How to clean up duplicate logins on a self-hosted Vaultwarden or Bitwarden server with BitMerger, including organizations and collections.
Read the guideDuplicates after importing from KeePass, LastPass, 1Password or your browser
Why importing into Bitwarden creates duplicates and how to clean them up with BitMerger: recycle bin folders, old backups, equivalent domains and careful matching.
Read the guideIs BitMerger safe? How it handles your vault
What happens to your master password and your entries: BitMerger runs locally, uses the official Bitwarden CLI, stores no passwords and is open source.
Read the guideFAQ
Questions about merging Bitwarden duplicates
Short answers to what people ask most often before cleaning up their vault.
How do I merge duplicate entries in Bitwarden?
Bitwarden itself has no merge function. Download BitMerger, start it and log in to your vault. It groups entries that belong to the same account, you review each group, run a dry run and then merge. URLs, notes, custom fields, TOTP, attachments and collections are combined, and every old password goes into the password history of the entry that stays.
Can Bitwarden remove duplicates on its own?
No. Bitwarden can export, import and delete entries, but it cannot combine two entries into one. Deleting duplicates by hand loses whatever only the deleted entry had, such as another URL, a note or an older password. BitMerger keeps all of that.
Does BitMerger work with Vaultwarden and self-hosted servers?
Yes. Besides bitwarden.com and bitwarden.eu you can enter the address of your own server, whether it is Vaultwarden or a self-hosted Bitwarden server. BitMerger talks to it through the official Bitwarden CLI, just like the Bitwarden apps do.
Is it safe to give BitMerger my master password?
Your master password goes straight to the official Bitwarden CLI on your computer. BitMerger does not store it, does not send it anywhere and never writes passwords to disk. The interface only listens on 127.0.0.1 and needs a random token. The source code is open on GitHub, so anyone can check this.
What happens to the passwords of the merged entries?
You choose which password stays. All other passwords go into the password history of the remaining entry. Bitwarden keeps at most five old passwords, so groups whose current passwords would not fit are skipped instead of losing one.
Can I undo a merge?
The duplicates are moved to the Bitwarden trash and can be restored there for 30 days. The dry run shows everything beforehand, and the selftest checks your server first. Keep an export of your vault before larger clean-ups anyway.
Does BitMerger find duplicates in organizations and collections?
Yes, it searches your personal vault and every organization with its collections. Groups that span several organizations are never merged automatically: you untick entries until only one organization is left.
I imported from KeePass, LastPass, 1Password or my browser. Will BitMerger help?
That is the most common reason for duplicates, and exactly what BitMerger is made for. Recycle bin folders brought along by imports, like the "Recycle Bin" from KeePass, are left out of the search by default, and you can exclude other folders such as old backups.
Do I have to install the Bitwarden CLI?
No. On first start BitMerger downloads the official Bitwarden CLI (about 45 MB) from Bitwarden's GitHub releases, checks it against a pinned SHA-256 checksum and keeps it in its own cache folder. Nothing is installed system-wide, and an existing Bitwarden CLI setup is not touched.
Does it work with two-step login or an API key?
Yes. You can log in with email, master password and two-step login, or with your personal API key.
Which systems does BitMerger run on?
On macOS (Apple Silicon and Intel), Windows (64-bit) and Linux (x64 and ARM64). It is a single file, nothing to install. It does not run on phones or tablets.
Why does my computer warn me when I start BitMerger?
The files are not code-signed yet, so macOS and Windows ask once. On macOS open it via System Settings → Privacy & Security → Open Anyway, on Windows via More info → Run anyway. The SHA-256 checksums of every release are published on GitHub.
Is BitMerger free?
Yes. BitMerger is free and open source under the MIT license. There is no account, no subscription and no telemetry.
Is BitMerger made by Bitwarden?
No. BitMerger is an independent project and not affiliated with or endorsed by Bitwarden, Inc. It uses Bitwarden's official command line tool to access your vault.
Another question, a bug or an idea? Report a bug hello@bitmerger.de