ScriptsApr 10, 2026·3 min read

Vaultwarden — Lightweight Self-Hosted Bitwarden Server

Vaultwarden is an unofficial Bitwarden-compatible server written in Rust. Full Bitwarden features with minimal resources — perfect for self-hosted password management.

Script Depot
Script Depot · Community
TL;DR
Vaultwarden implements the Bitwarden API in Rust, providing all premium features on minimal hardware with official Bitwarden client apps.
§01

What it is

Vaultwarden is an unofficial, lightweight Bitwarden-compatible server written in Rust. It implements the Bitwarden API, allowing you to use all official Bitwarden client apps (browser extensions, desktop, mobile) with a self-hosted backend. Features include password vault, cross-device sync, organizations for password sharing, Send for secure sharing, TOTP generator, file attachments, emergency access, and vault health reports. Released under AGPL-3.0.

Vaultwarden targets self-hosters who want Bitwarden's premium features (Organizations, TOTP, Send, Attachments) without paying for the premium subscription, running on hardware as modest as a Raspberry Pi.

§02

How it saves time or tokens

Vaultwarden provides all Bitwarden premium features for free when self-hosted. The password vault with auto-fill saves time on every login. Cross-device sync ensures passwords are always accessible. The TOTP generator eliminates the need for a separate 2FA app. Organizations enable secure password sharing with team members without sending credentials over chat or email.

§03

How to use

  1. Run the Docker container.
  2. Access the web vault and register your account.
  3. Install official Bitwarden apps on all devices and configure them to point to your Vaultwarden server URL.
§04

Example

docker run -d --name vaultwarden \
  -p 80:80 \
  -v vw-data:/data \
  vaultwarden/server:latest
# Access at http://localhost
# Use official Bitwarden apps with your server URL
§05

Related on TokRepo

§06

Common pitfalls

  • HTTPS is strongly recommended for production; passwords transmitted over HTTP are vulnerable to interception. Use a reverse proxy with SSL.
  • Disable new user registration after creating your accounts; open registration allows anyone who discovers your server to create accounts.
  • Backup the /data volume regularly; losing the database means losing all passwords. Automate backups with a cron job.

Frequently Asked Questions

Is Vaultwarden compatible with official Bitwarden apps?+

Yes. Vaultwarden implements the Bitwarden API, so all official Bitwarden clients work -- browser extensions for Chrome/Firefox/Safari/Edge, desktop apps for Windows/macOS/Linux, and mobile apps for iOS/Android. You configure the server URL in the app settings.

What premium Bitwarden features does Vaultwarden include?+

Vaultwarden includes all premium features for free: Organizations (shared vaults), TOTP authenticator, Bitwarden Send, file attachments, emergency access, vault health reports, and Duo/YubiKey 2FA support. These features require a paid subscription with official Bitwarden.

Can Vaultwarden run on a Raspberry Pi?+

Yes. Vaultwarden is written in Rust and uses SQLite by default, requiring minimal resources. It runs well on a Raspberry Pi with as little as 256MB RAM. The ARM Docker image is officially maintained.

How does Vaultwarden compare to official Bitwarden server?+

The official Bitwarden server uses a Microsoft SQL Server stack with higher resource requirements (2GB+ RAM). Vaultwarden uses Rust with SQLite and runs on 50-100MB RAM. Vaultwarden includes premium features for free. The official server has better enterprise features like SCIM and SSO.

Is Vaultwarden secure?+

Vaultwarden implements the same client-side encryption as official Bitwarden. Passwords are encrypted on your device before being sent to the server. The server never sees unencrypted passwords. The Rust implementation has been reviewed by the community. However, it is not officially audited like Bitwarden's server.

Citations (3)
Related on TokRepo
Security toolsSelf-hosted toolsFeatured workflows
🙏

Source & Thanks

Discussion

Sign in to join the discussion.
No comments yet. Be the first to share your thoughts.

Related Assets

NAPI-RS — Build Node.js Native Addons in Rust

Write high-performance Node.js native modules in Rust with automatic TypeScript type generation and cross-platform prebuilt binaries.

Script Depot

Mamba — Fast Cross-Platform Package Manager

A drop-in conda replacement written in C++ that resolves environments in seconds instead of minutes.

Script Depot

Plasmo — The Browser Extension Framework

Build, test, and publish browser extensions for Chrome, Firefox, and Edge using React or Vue with hot-reload and automatic manifest generation.

Script Depot
◈Home🔍Search👤Me