[{"data":1,"prerenderedAt":128},["ShallowReactive",2],{"seo-verification":3,"marketplace-app-en-vaultwarden":6},{"google":4,"bing":5},"EycwPY2XMyTkVzas3n1ygeNJFGAH513qrMjfDljzsMQ","",{"key":7,"data":8},"marketplace-app-en-vaultwarden",{"slug":9,"slugs":10,"categorySlugs":11,"name":16,"description":17,"phase":18,"unavailableReason":19,"docsUrl":20,"logo":21,"github":22,"tagline":23,"longDescription":24,"features":25,"useCases":33,"steps":43,"faq":62,"specs":81,"compatibleOs":89,"relatedApps":91,"relatedPosts":119,"category":123},"vaultwarden",{"fr":9,"en":9,"ar":9,"es":9},{"fr":12,"en":13,"ar":14,"es":15},"cybersecurity","cybersecurity-bastion","الأمن-السيبراني-والحصن","ciberseguridad-bastion","Vaultwarden","Self-hosted Bitwarden-compatible password manager written in Rust. All Bitwarden clients work out of the box — browser extensions, mobile apps, desktop — under 50 MB RAM.",1,null,"https:\u002F\u002Fservorbit.com\u002Fblog\u002Fself-host-your-password-manager-deploy-vaultwarden-on-vps","https:\u002F\u002Fcdn.jsdelivr.net\u002Fgh\u002Fselfhst\u002Ficons\u002Fsvg\u002Fvaultwarden.svg","https:\u002F\u002Fgithub.com\u002Fdani-garcia\u002Fvaultwarden","Self-hosted Bitwarden in one Rust container — unlimited passwords, zero subscription, your data stays on your VPS.","Vaultwarden is an unofficial, open-source server implementation of the Bitwarden protocol written in Rust. Every official Bitwarden client works with it unchanged: browser extensions (Chrome, Firefox, Safari), iOS and Android apps, and the desktop client. Your team gets encrypted password sharing, TOTP authenticator, secure notes, emergency access, and an admin panel — all on a server that idles under 50 MB RAM.\n\nDeployed on a ServOrbit VPS, Vaultwarden stores your vault in an SQLite database inside a single Docker volume. No external database server, no third-party telemetry, no per-user billing. One container, one volume to back up, and all your passwords are yours for life at a fixed monthly cost.",[26,27,28,29,30,31,32],"100% compatible with all official Bitwarden clients: browser extensions, iOS, Android, desktop, and CLI","End-to-end encrypted vault: passwords, secure notes, credit cards, identities, and file attachments","Built-in TOTP authenticator — replace Google Authenticator or Authy with a self-hosted alternative","Organization vaults and encrypted sharing for teams, families, or agencies","Emergency access: grant a trusted contact read access after a configurable waiting period","Admin panel to manage users, reset accounts, and configure sign-up policies without CLI","Uses under 50 MB RAM at idle — runs comfortably alongside other services on the smallest VPS",[34,37,40],{"title":35,"body":36},"Team password management","Share credentials across your dev team or agency in encrypted organization vaults. Every member uses the Bitwarden app they already know — you just own the server.",{"title":38,"body":39},"Freelancer & solo dev","Stop paying Bitwarden's or 1Password's per-user fee. Self-host for yourself and your clients on a VPS that costs less per year than a single premium subscription.",{"title":41,"body":42},"Agency client onboarding","Spin up a Vaultwarden instance for each client. Give them a branded URL (e.g. passwords.client.ma), their own vault, and emergency-access policies — without mixing their credentials with yours.",[44,47,50,53,56,59],{"title":45,"body":46},"Order the VPS","Order a ServOrbit VPS with at least 1 vCPU and 512 MB of RAM, running Ubuntu 24.04. Plan for a domain name to point at that VPS as well: Bitwarden clients refuse to talk to a vault that is not served over HTTPS.",{"title":48,"body":49},"Deploy Vaultwarden","In your ServOrbit client area: Marketplace → Security → Vaultwarden → Deploy. Provisioning starts the `vaultwarden\u002Fserver:latest` image with the `vaultwarden` volume mounted on `\u002Fdata`, the port published on the local loopback at `127.0.0.1:8000`, and `WEBSOCKET_ENABLED=true` so that clients sync live. The container is ready within seconds; there is not a single command for you to type.",{"title":51,"body":52},"Sign in for the first time","The first time you open the address, Vaultwarden shows the Bitwarden web vault: click “Create account” and set your own e-mail address and master password (nobody can recover it, not even us). Do it IMMEDIATELY: sign-ups are open, and the instance starts with no admin token (`ADMIN_TOKEN`).",{"title":54,"body":55},"Attach your domain","Create an A record such as `passwords.example.com` pointing at the VPS IP, then attach that domain to the application from your client area: ServOrbit installs the nginx vhost and issues the TLS certificate, with nothing for you to install and nothing to configure. Your vault then answers on `https:\u002F\u002F\u003Cyour-domain>`, with no port number. As long as no domain is attached, the instance is only reachable through an SSH tunnel — `ssh -L 8000:127.0.0.1:8000 root@\u003Cvps-ip>` then `http:\u002F\u002Flocalhost:8000` — enough to look at the web vault from a computer, but neither the browser extension nor the phone app will be able to connect. Port 8000 is the catalogue port; if it has been reassigned, use the one shown on your app's card in the client area.",{"title":57,"body":58},"Connect your clients","Open `https:\u002F\u002F\u003Cyour-domain>` in your browser, sign in with the account you created above, then enter that same address in the “self-hosted server” field of the browser extension and of the mobile app before signing in there. Choose a strong master password: it is what encrypts the whole vault, and nobody can regenerate it.",{"title":60,"body":61},"Close public sign-ups","Once every account has been created, turn off open registration: connect to the VPS over SSH and restart the Vaultwarden container with `SIGNUPS_ALLOWED=false` in place of its initial value. The `vaultwarden` volume is left untouched: no vault is lost. Your instance then only accepts accounts created by invitation.",[63,66,69,72,75,78],{"q":64,"a":65},"What is Vaultwarden?","Vaultwarden is an open-source, unofficial implementation of the Bitwarden server API written in Rust. It is fully compatible with all official Bitwarden clients (browser extensions, iOS, Android, desktop, CLI) while using a fraction of the resources of the official server.",{"q":67,"a":68},"Is Vaultwarden safe to use?","Yes. Vaultwarden implements the same end-to-end encryption as the official Bitwarden server — your master password never leaves your device and all vault data is AES-256 encrypted before being sent to the server. The project is actively maintained with security patches published regularly.",{"q":70,"a":71},"Does Vaultwarden require HTTPS?","Yes. Official Bitwarden clients refuse to connect to a server without a valid TLS certificate, so you do need a domain name pointing at your VPS. What you do not need is to set up a reverse proxy or request a certificate yourself: attach the domain to the app from your ServOrbit client area and the nginx vhost and the TLS certificate are installed, then renewed, for you. It takes a couple of minutes, plus DNS propagation.",{"q":73,"a":74},"How much RAM does Vaultwarden need?","Vaultwarden is extremely lightweight: under 50 MB RAM at idle, even while serving dozens of concurrent users. A 512 MB VPS is sufficient for personal use or a small team; 1 GB is comfortable for an organization with 20–50 users.",{"q":76,"a":77},"Can I migrate from Bitwarden.com to Vaultwarden?","Yes. Export your vault from Bitwarden.com (Settings → Export Vault → JSON) and import it into Vaultwarden from the web vault or the app. The process takes under two minutes and all your passwords, notes, and folders are preserved.",{"q":79,"a":80},"How do I back up my Vaultwarden data?","All data lives in the Docker volume mounted at \u002Fdata: one SQLite file plus attachments. Back up this directory (e.g. with `docker run --rm -v vaultwarden:\u002Fdata -v \u002Fbackup:\u002Fout busybox tar czf \u002Fout\u002Fvaultwarden.tar.gz \u002Fdata`) and you have a complete snapshot. Schedule this daily with cron for zero-worry backups.",{"ram":82,"cpu":83,"stack":84,"port":88},"512 MB (1 GB recommended)","1 vCPU",[85,86,87],"Docker","Rust","SQLite","8000",[90],"ubuntu-24.04",[92,101,110],{"name":93,"slug":94,"categorySlug":95,"categoryName":96,"categoryColor":97,"logo":98,"tagline":99,"description":100},"WireGuard Server","wireguard-server","networking-vpn","Networking & VPN","text-sky-400 bg-sky-500\u002F10","https:\u002F\u002Fcdn.simpleicons.org\u002Fwireguard","Modern VPN built into the Linux kernel — secure connections for your teams and infrastructure.","Modern, minimal VPN built into the Linux kernel. Secure connections for your teams and infrastructure.",{"name":102,"slug":103,"categorySlug":104,"categoryName":105,"categoryColor":106,"logo":107,"tagline":108,"description":109},"Caddy","caddy","application-deployment-devops","Application Deployment & DevOps","text-success bg-success\u002F10","https:\u002F\u002Fcdn.simpleicons.org\u002Fcaddy","Automatic SSL for your applications — effortless HTTPS, auto-renewed certificates.","A modern web server and reverse proxy with automatic HTTPS. Let's Encrypt SSL certificates are obtained and renewed on their own, with minimal configuration via a Caddyfile.",{"name":111,"slug":112,"categorySlug":113,"categoryName":114,"categoryColor":115,"logo":116,"tagline":117,"description":118},"Uptime Kuma","uptime-kuma","monitoring-observability","Monitoring & Observability","text-amber-400 bg-amber-500\u002F10","https:\u002F\u002Fcdn.simpleicons.org\u002Fuptimekuma","Self-hosted uptime monitoring with beautiful status pages — unlimited monitors, no SaaS bill.","Simple, visual availability monitoring. Watch your HTTP, TCP and DNS endpoints and receive instant alerts.",[120,121,122],"deploy-vaultwarden-vps","securiser-vps-crowdsec","vpn-wireguard-vps",{"key":124,"slug":13,"name":125,"objective":126,"icon":124,"color":127},"security","Cybersecurity & Bastion","Harden infrastructure security.","text-red-400 bg-red-500\u002F10",1793820413056]