Deploy to your computers

For IT teams: install the extension and link it to your vault across a whole fleet, with no action from users.

How it works

Two settings are enough: force-install the extension, then give it your vault's address. Your users only have to sign in. Replace the example address with your vault's, shown in your customer portal. It must start with https://.

Force-install the extension

Chrome, via Group Policy (GPO)
  1. Install the Chrome administrative templates.
  2. Under "Google Chrome", "Extensions", enable the policy that configures the list of force-installed apps and extensions.
  3. Add this value:
nngceckbapebfimnlniiiahkandclblb;https://clients2.google.com/service/update2/crx
Microsoft Edge, via Group Policy (GPO)
  1. Install the Edge administrative templates.
  2. Under "Microsoft Edge", "Extensions", enable the policy that controls which extensions are installed silently.
  3. Add this value:
jbkfoedolllekgbhcbcoahefnbanhhlh;https://edge.microsoft.com/extensionwebstorebase/v1/crx
Firefox, via Group Policy (GPO)
  1. Install the Firefox administrative templates.
  2. Under "Firefox", "Extensions", enable the policy for extensions to install.
  3. Add this address:
https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi

Give the extension your vault's address

Chrome on Windows

Create this registry value, of type REG_SZ, named base, with your vault's address:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\3rdparty\extensions\nngceckbapebfimnlniiiahkandclblb\policy\environment
Microsoft Edge on Windows

Create this registry value, of type REG_SZ, named base, with your vault's address:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\3rdparty\extensions\jbkfoedolllekgbhcbcoahefnbanhhlh\policy\environment
Firefox on Windows

Create this registry value, of type REG_SZ, named base, with your vault's address:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\3rdparty\Extensions\{446900e4-71c2-419f-a6a7-df9c091e268b}\environment
Chrome on Linux

Create the file /etc/opt/chrome/policies/managed/bitwarden.json:

{
  "3rdparty": {
    "extensions": {
      "nngceckbapebfimnlniiiahkandclblb": {
        "environment": {
          "base": "https://acme-k7f3q2m8xp.fr.raptorpass.eu"
        }
      }
    }
  }
}
Firefox on Linux

Create the file /etc/firefox/policies/policies.json:

{
  "policies": {
    "3rdparty": {
      "Extensions": {
        "{446900e4-71c2-419f-a6a7-df9c091e268b}": {
          "environment": {
            "base": "https://acme-k7f3q2m8xp.fr.raptorpass.eu"
          }
        }
      }
    }
  }
}
Mac

Deploy a .mobileconfig profile created from the com.google.chrome.extensions.nngceckbapebfimnlniiiahkandclblb.plist file. It contains an environment dictionary with the base key, which holds your vault's address.

Turn off the browsers' built-in manager

Avoid conflicts by disabling the password-saving policy. On Mac and Linux, the setting is called PasswordManagerEnabled: set it to false.

Desktop app

Add this key to the app's data.json file, in %AppData%\Bitwarden on Windows and in ~/Library/Application Support/Bitwarden on Mac:

"global_environment_environment": {
  "region": "Self-hosted",
  "urls": {
    "base": "https://acme-k7f3q2m8xp.fr.raptorpass.eu"
  }
}

Mobile apps

In your mobile device management (MDM) tool, deploy the Bitwarden app with this string configuration key, which holds your vault's address:

baseEnvironmentUrl

Stuck? Write to us