Tom Lawrence has a short 7-minute video explaining how password managers handle authentication without sending the user’s master password over the Internet.
The short version is that the password manager (Bitwarden in this case) generates a password hash in-browser using a salt derived from the username. This protects against replay attacks and ensures that the entire process of accessing the underlying passwords themselves occurs entirely client-side.