- Home
- Password Managers
- Vaultwarden
Vaultwarden
What it is
Vaultwarden is a free, open-source server written in Rust for self-hosted password management and compatibility with official Bitwarden clients. It implements the Bitwarden Client API and lists personal features such as a vault, Send, attachments, website icons, and a personal API key. Organization tools include collections, password sharing, member roles, groups, event logs, admin password reset, directory connector, and policies. Multi-factor options include authenticator, email, FIDO2 WebAuthn, YubiKey, and Duo, with Emergency Access also listed. Deployment is recommended through container images published to ghcr.io, Docker Hub, and Quay.io. The web vault requires HTTPS; the project advises using a reverse proxy and says its built-in Rocket HTTPS option is not recommended. Admin guidance calls for HTTPS and a long, randomly generated token. Vaultwarden is not associated with Bitwarden, Inc., and its maintainers direct support requests to Matrix, GitHub Discussions, and Discourse.
For and against
For
- Free and open source
- Compatible with official Bitwarden clients
- Passkeys and secure sharing supported
- Multiple multifactor authentication options
- Organization roles, groups, and event logs
Against
- Requires self-hosted deployment
- Web vault requires HTTPS
- No passwordless account login
- Not associated with Bitwarden, Inc.
The verdict
Vaultwarden provides a broad Bitwarden-compatible feature set for self-hosted users, including sharing and organization administration. Plan for HTTPS, container deployment, and ongoing server security responsibilities.
Who it suits
Vaultwarden suits individuals, families, and small organizations comfortable operating a self-hosted service. It is also relevant to teams needing shared credentials, roles, collections, and other organization controls.
Plans and prices
Vaultwarden
Self-hosted server; community project; no paid plans stated
Read 11 Oct 2026 · github.com
On the record
- Admin security
- The admin documentation recommends HTTPS before enabling the admin panel and a long, randomly generated admin token.github.com · read 11 Oct 2026
- Audience and relationship
- The maintainers say the project serves the self-hosting community, including individuals, families, and small organizations, and that it is not associated with Bitwarden, Inc.github.com · read 11 Oct 2026
- Authentication
- The project lists authenticator, email, FIDO2 WebAuthn, YubiKey, and Duo among its multi-factor authentication options.github.com · read 11 Oct 2026
- Business admin controls
- Yesgithub.com · read 20 Sep 2026
- Client compatibility
- The server implements the Bitwarden Client API and is compatible with official Bitwarden clients.github.com · read 11 Oct 2026
- Deployment
- The project recommends installing through its container images, published to ghcr.io, Docker Hub, and Quay.io.github.com · read 11 Oct 2026
- Emergency access
- Emergency Access is included in the listed feature set.github.com · read 11 Oct 2026
- HTTPS guidance
- The project recommends placing Vaultwarden behind a reverse proxy that handles HTTPS and describes its built-in Rocket HTTPS option as not recommended.github.com · read 11 Oct 2026
- HTTPS requirement
- The web vault requires HTTPS because browsers generally expose the Web Crypto API only in secure contexts.github.com · read 11 Oct 2026
- Organization features
- The listed organization features include collections, password sharing, member roles, groups, event logs, admin password reset, directory connector, and policies.github.com · read 11 Oct 2026
- Passkey support
- Yesgithub.com · read 20 Sep 2026
- Passwordless account login
- Nogithub.com · read 20 Sep 2026
- Product
- Vaultwarden is an unofficial Bitwarden-compatible server written in Rust for self-hosted deployment.github.com · read 11 Oct 2026
- Secure sharing
- Yesgithub.com · read 20 Sep 2026
- Security reporting
- The project asks users to report security issues and requests reasonable time to address them before public or third-party disclosure.github.com · read 11 Oct 2026
- Support
- The project directs questions and help requests to Matrix, GitHub Discussions, and Discourse, and asks users to report bugs directly to Vaultwarden rather than official Bitwarden support.github.com · read 11 Oct 2026
- Supported platforms
- web,API,self-hosted deploymentgithub.com · read 20 Sep 2026
- Token hashing
- The admin token can be stored in Argon2id PHC format, and the built-in hash command provides Bitwarden-default and OWASP-minimum presets.github.com · read 11 Oct 2026
