Vaultwarden
github.com
What it is
Vaultwarden is a free, open-source, unofficial Bitwarden-compatible server written in Rust for self-hosted deployment. It implements the Bitwarden Client API and works with official Bitwarden clients. Personal features include a vault, Send, attachments, website icons, and a personal API key. Organization tools provide collections, password sharing, member roles, groups, event logs, admin password reset, a directory connector, and policies. Listed multi-factor options include authenticator, email, FIDO2 WebAuthn, YubiKey, and Duo, with Emergency Access also included. Vaultwarden supports passkeys, secure sharing, and business admin controls, but not passwordless account login. The project recommends container images from ghcr.io, Docker Hub, or Quay.io. Its web vault requires HTTPS; maintainers recommend a reverse proxy and do not recommend the built-in Rocket HTTPS option. Admin guidance calls for HTTPS and a long random token, with Argon2id storage supported. The project serves self-hosting individuals, families, and small organizations and is not associated with Bitwarden, Inc. The listed plan is free, with no paid plans stated.
Spec sheet
- Product
- Vaultwarden is an unofficial Bitwarden-compatible server written in Rust for self-hosted deployment.Read 11 Oct 2026 · github.com
- Deployment
- The project recommends installing through its container images, published to ghcr.io, Docker Hub, and Quay.io.Read 11 Oct 2026 · github.com
- Support
- The project directs questions and help requests to Matrix, GitHub Discussions, and Discourse, and asks users to report bugs directly to Vaultwarden rather than official Bitwarden support.Read 11 Oct 2026 · github.com
- Admin security
- The admin documentation recommends HTTPS before enabling the admin panel and a long, randomly generated admin token.Read 11 Oct 2026 · github.com
- Audience and relationship
- The maintainers say the project serves the self-hosting community, including individuals, families, and small organizations, and that it is not associated with Bitwarden, Inc.Read 11 Oct 2026 · github.com
- Authentication
- The project lists authenticator, email, FIDO2 WebAuthn, YubiKey, and Duo among its multi-factor authentication options.Read 11 Oct 2026 · github.com
- Business admin controls
- YesRead 20 Sep 2026 · github.com
- Client compatibility
- The server implements the Bitwarden Client API and is compatible with official Bitwarden clients.Read 11 Oct 2026 · github.com
- Emergency access
- Emergency Access is included in the listed feature set.Read 11 Oct 2026 · github.com
- HTTPS guidance
- The project recommends placing Vaultwarden behind a reverse proxy that handles HTTPS and describes its built-in Rocket HTTPS option as not recommended.Read 11 Oct 2026 · github.com
- HTTPS requirement
- The web vault requires HTTPS because browsers generally expose the Web Crypto API only in secure contexts.Read 11 Oct 2026 · github.com
- Organization features
- The listed organization features include collections, password sharing, member roles, groups, event logs, admin password reset, directory connector, and policies.Read 11 Oct 2026 · github.com
- Passkey support
- YesRead 20 Sep 2026 · github.com
- Passwordless account login
- NoRead 20 Sep 2026 · github.com
- Secure sharing
- YesRead 20 Sep 2026 · github.com
- Security reporting
- The project asks users to report security issues and requests reasonable time to address them before public or third-party disclosure.Read 11 Oct 2026 · github.com
- Supported platforms
- web,API,self-hosted deploymentRead 20 Sep 2026 · github.com
- Token hashing
- The admin token can be stored in Argon2id PHC format, and the built-in hash command provides Bitwarden-default and OWASP-minimum presets.Read 11 Oct 2026 · github.com
- Vault features
- Its listed features include a personal vault, Send, attachments, website icons, and a personal API key.Read 11 Oct 2026 · github.com
Plans and prices
Strong points and limits
Strong points
- Free open-source self-hosted server
- Compatible with official Bitwarden clients
- Supports passkeys and secure sharing
- Offers extensive organization administration features
- Provides multiple multi-factor authentication options
Limits
- Passwordless account login is not supported
- Web vault requires HTTPS configuration
- Self-hosted deployment requires administration
- Not associated with Bitwarden, Inc.
Who it suits
Vaultwarden suits self-hosting individuals, families, and small organizations wanting a free Bitwarden-compatible server. It is for users prepared to manage deployment, HTTPS, and administration themselves.
Verdict
Vaultwarden provides a broad Bitwarden-compatible feature set for people running their own service. Its free, open-source model includes organization controls and many authentication options, but HTTPS and self-hosting responsibilities remain with the operator.
Where Specifiction places it
- Password Managers#22 of 1048.6