What is Vaultwarden?
Vaultwarden provides an alternative server implementation of the Bitwarden Client API, written in Rust. It works with official Bitwarden clients and targets self-hosting individuals, families and small organizations. The project is independent of Bitwarden and was formerly known as Bitwarden_RS.
Its features include personal vaults, Send, attachments, emergency access and organization-based password sharing. Organizations can use collections, member roles, groups, event logs, administrative password resets and policies. The project describes its Client API implementation as nearly complete, rather than promising full feature parity.
The recommended deployment uses the project's container images, with Docker, Podman and Docker Compose examples provided. Containers include a modified web vault, which requires HTTPS and a secure context for the Web Crypto API. A reverse proxy is recommended, and operators are advised to back up files and the database regularly.
Key capabilities
- Personal vaults Supports password vault management, attachments, website icons and Send.
- Organization sharing Provides collections, password sharing, member roles, groups, policies and event logs.
- Multifactor authentication Supports authenticator apps, email, FIDO2 WebAuthn, YubiKey and Duo.
- Account recovery Includes emergency access and administrative password reset features.
- Administration Provides a Vaultwarden admin backend and support for Directory Connector.
- Client API Implements the Bitwarden Client API and supports personal API keys.
Where Vaultwarden fits
Vaultwarden fits self-hosted password management for individuals and families, or shared credential management in small organizations. It provides the server behind official Bitwarden clients, while collections, roles and policies organize access to shared passwords.
Before deployment, operators should verify HTTPS, reverse proxy configuration, persistent storage and backup procedures. They should also check compatibility between the server and their chosen clients or separately hosted web vault. Release notes document compatibility requirements and configuration validation changes that can affect upgrades. Support requests belong with the Vaultwarden project, not official Bitwarden support.
Install
docker pull vaultwarden/server:latest
docker run --detach --name vaultwarden \
--env DOMAIN="https://vw.domain.tld" \
--volume /vw-data/:/data/ \
--restart unless-stopped \
--publish 127.0.0.1:8000:80 \
vaultwarden/server:latestReviews of Vaultwarden
Be the first to share your experience with Vaultwarden.
Write a review
Loading review form…
Alternatives to Vaultwarden
BitwardenBitwarden is an open source password manager for individuals, families and organizations. Vaults are end-to-end encrypted, run on a US or EU cloud or a self-hosted Docker server, with a free plan and paid tiers.CVCryptex VaultCryptex Vault is an AGPL-3.0 password manager with a web app, Chromium extension and Android app that syncs encrypted vaults directly between linked devices.
KeePassXCKeePassXC is an open-source password manager for Windows, macOS and Linux that stores entries in an offline, encrypted KeePass-compatible KDBX file.