Why people self-host Vaultwarden
Vaultwarden provides a lightweight Bitwarden-compatible server that works well for individuals, families, and small teams already comfortable with Bitwarden clients. It keeps the familiar browser and mobile experience while moving the vault service onto owned infrastructure.
The tradeoff is that it is an unofficial server implementation. Back up the database, attachments, and admin token path, and enforce HTTPS before inviting users.
What Vaultwarden does well
- Works with the official Bitwarden browser extensions, desktop apps, and mobile apps.
- Includes organizations, collections, attachments, Bitwarden Send, and emergency access without a paid plan.
- Written in Rust, so it idles at well under 100 MB of memory.
- Supports TOTP, WebAuthn and passkeys, and YubiKey for two-factor login.
Who Vaultwarden is for
Vaultwarden is the usual choice for a self-hosted password manager at home: a family, a couple, or a few friends who trust the person running it. It gives you the Bitwarden experience on a tiny server. A company with compliance requirements should weigh the official Bitwarden server, which is the audited and supported product.
Deployment notes
Vaultwarden is listed with support signals for linux, docker. Check the upstream documentation before exposing it to the internet, review authentication defaults, and keep backups outside the primary host.
It is one Docker container with SQLite by default, and MySQL or PostgreSQL if you prefer. HTTPS is not optional, because the web vault's encryption relies on browser features that only work on secure origins, so put it behind a reverse proxy with a real certificate. Turn off open sign-ups once your users exist, and protect or disable the admin page. Many people keep it reachable only over a VPN. Back up the data folder regularly, and remember that every client keeps an offline copy of the vault if the server is ever down.
Common questions about Vaultwarden
Does Vaultwarden work with Bitwarden apps?
Yes. Set the self-hosted server URL on the login screen of any official Bitwarden client and it behaves as it would with Bitwarden's own cloud.
Is Vaultwarden safe?
Your vault is encrypted on your devices before it reaches the server, using the same client code as Bitwarden. The server itself is a community project without the formal audits of the official one, so keep it updated and limit who can reach it.
Other self-hosted password manager apps
- Padloc: Modern password manager for individuals and small teams.
- Passbolt: Team-oriented password manager with sharing and audit controls.
Compare them side by side in the password manager category.