Apr 10, 2026·1 min read

Vaultwarden — Lightweight Self-Hosted Bitwarden Server

Vaultwarden is an unofficial Bitwarden-compatible server written in Rust. Full Bitwarden features with minimal resources — perfect for self-hosted password management.

Anonymous
Anonymous · Community
Agent ready

Safe staging for this asset

This asset is staged first. The copied prompt tells the agent to inspect the staged files and ask before activating scripts, MCP config, or global config.

Stage only · 29/100Policy: stage
Agent surface
Any MCP/CLI agent
Kind
Skill
Install
Stage only
Trust
Trust: Community
Entrypoint
SKILL.md
Safe staging command
npx -y tokrepo@latest install e8706cbd-34a9-11f1-9bc6-00163e2b0d79 --target codex

Stages files first; activation requires review of the staged README and plan.

TL;DR
Vaultwarden implements the Bitwarden API in Rust, providing all premium features on minimal hardware with official Bitwarden client apps.
§01

What it is

Vaultwarden is an unofficial, lightweight Bitwarden-compatible server written in Rust. It implements the Bitwarden API, allowing you to use all official Bitwarden client apps (browser extensions, desktop, mobile) with a self-hosted backend. Features include password vault, cross-device sync, organizations for password sharing, Send for secure sharing, TOTP generator, file attachments, emergency access, and vault health reports. Released under AGPL-3.0.

Vaultwarden targets self-hosters who want Bitwarden's premium features (Organizations, TOTP, Send, Attachments) without paying for the premium subscription, running on hardware as modest as a Raspberry Pi.

§02

How it saves time or tokens

Vaultwarden provides all Bitwarden premium features for free when self-hosted. The password vault with auto-fill saves time on every login. Cross-device sync ensures passwords are always accessible. The TOTP generator eliminates the need for a separate 2FA app. Organizations enable secure password sharing with team members without sending credentials over chat or email.

§03

How to use

  1. Run the Docker container.
  2. Access the web vault and register your account.
  3. Install official Bitwarden apps on all devices and configure them to point to your Vaultwarden server URL.
§04

Example

docker run -d --name vaultwarden \
  -p 80:80 \
  -v vw-data:/data \
  vaultwarden/server:latest
# Access at http://localhost
# Use official Bitwarden apps with your server URL
§05

Related on TokRepo

§06

Common pitfalls

  • HTTPS is strongly recommended for production; passwords transmitted over HTTP are vulnerable to interception. Use a reverse proxy with SSL.
  • Disable new user registration after creating your accounts; open registration allows anyone who discovers your server to create accounts.
  • Backup the /data volume regularly; losing the database means losing all passwords. Automate backups with a cron job.

Frequently Asked Questions

Is Vaultwarden compatible with official Bitwarden apps?+

Yes. Vaultwarden implements the Bitwarden API, so all official Bitwarden clients work -- browser extensions for Chrome/Firefox/Safari/Edge, desktop apps for Windows/macOS/Linux, and mobile apps for iOS/Android. You configure the server URL in the app settings.

What premium Bitwarden features does Vaultwarden include?+

Vaultwarden includes all premium features for free: Organizations (shared vaults), TOTP authenticator, Bitwarden Send, file attachments, emergency access, vault health reports, and Duo/YubiKey 2FA support. These features require a paid subscription with official Bitwarden.

Can Vaultwarden run on a Raspberry Pi?+

Yes. Vaultwarden is written in Rust and uses SQLite by default, requiring minimal resources. It runs well on a Raspberry Pi with as little as 256MB RAM. The ARM Docker image is officially maintained.

How does Vaultwarden compare to official Bitwarden server?+

The official Bitwarden server uses a Microsoft SQL Server stack with higher resource requirements (2GB+ RAM). Vaultwarden uses Rust with SQLite and runs on 50-100MB RAM. Vaultwarden includes premium features for free. The official server has better enterprise features like SCIM and SSO.

Is Vaultwarden secure?+

Vaultwarden implements the same client-side encryption as official Bitwarden. Passwords are encrypted on your device before being sent to the server. The server never sees unencrypted passwords. The Rust implementation has been reviewed by the community. However, it is not officially audited like Bitwarden's server.

Citations (3)
Related on TokRepo
Security toolsSelf-hosted toolsFeatured workflows

Discussion

Sign in to join the discussion.
No comments yet. Be the first to share your thoughts.

Related Assets

Flatnotes — Self-Hosted Database-Free Markdown Notes

Flatnotes is a lightweight, self-hosted note-taking web app that stores notes as plain Markdown files in a flat folder — no database required, with full-text search and TOTP authentication.

Scripts
Script Depot

Cinny — Self-Hosted Matrix Client for Encrypted Chat

Cinny is a sleek, open-source Matrix client with end-to-end encryption, custom themes, and full self-hosting support for private team communication.

Scripts
Script Depot

Cloud Hypervisor — Lightweight Virtual Machine Monitor in Rust

Cloud Hypervisor is a KVM-based virtual machine monitor written in Rust for modern cloud workloads. It provides a minimal attack surface, fast boot times, and support for CPU/memory/device hotplug with a focus on security and simplicity.

Scripts
Script Depot

EspoCRM — Open-Source CRM Platform for Sales and Support Teams

EspoCRM is a self-hosted customer relationship management application with lead tracking, email integration, calendar, and workflow automation — fully customizable through an admin panel.

Configs
AI Open Source
◈Home🔍Search👤Me