[{"data":1,"prerenderedAt":125},["ShallowReactive",2],{"seo-verification":3,"marketplace-app-en-vaultwarden":6},{"google":4,"bing":5},"EycwPY2XMyTkVzas3n1ygeNJFGAH513qrMjfDljzsMQ","",{"slug":7,"slugs":8,"categorySlugs":9,"name":13,"description":14,"phase":15,"unavailableReason":16,"docsUrl":17,"logo":18,"github":19,"tagline":20,"longDescription":21,"features":22,"useCases":30,"steps":40,"faq":59,"specs":78,"compatibleOs":86,"relatedApps":88,"relatedPosts":116,"category":120},"vaultwarden",{"fr":7,"en":7,"ar":7},{"fr":10,"en":11,"ar":12},"cybersecurity","cybersecurity-bastion","الأمن-السيبراني-والحصن","Vaultwarden","Self-hosted Bitwarden-compatible password manager written in Rust. All Bitwarden clients work out of the box — browser extensions, mobile apps, desktop — under 50 MB RAM.",1,null,"https:\u002F\u002Fservorbit.com\u002Fblog\u002Fself-host-your-password-manager-deploy-vaultwarden-on-vps","https:\u002F\u002Fcdn.jsdelivr.net\u002Fgh\u002Fselfhst\u002Ficons\u002Fsvg\u002Fvaultwarden.svg","https:\u002F\u002Fgithub.com\u002Fdani-garcia\u002Fvaultwarden","Self-hosted Bitwarden in one Rust container — unlimited passwords, zero subscription, your data stays on your VPS.","Vaultwarden is an unofficial, open-source server implementation of the Bitwarden protocol written in Rust. Every official Bitwarden client works with it unchanged: browser extensions (Chrome, Firefox, Safari), iOS and Android apps, and the desktop client. Your team gets encrypted password sharing, TOTP authenticator, secure notes, emergency access, and an admin panel — all on a server that idles under 50 MB RAM.\n\nDeployed on a ServOrbit VPS, Vaultwarden stores your vault in an SQLite database inside a single Docker volume. No external database server, no third-party telemetry, no per-user billing. One container, one volume to back up, and all your passwords are yours for life at a fixed monthly cost.",[23,24,25,26,27,28,29],"100% compatible with all official Bitwarden clients: browser extensions, iOS, Android, desktop, and CLI","End-to-end encrypted vault: passwords, secure notes, credit cards, identities, and file attachments","Built-in TOTP authenticator — replace Google Authenticator or Authy with a self-hosted alternative","Organization vaults and encrypted sharing for teams, families, or agencies","Emergency access: grant a trusted contact read access after a configurable waiting period","Admin panel to manage users, reset accounts, and configure sign-up policies without CLI","Uses under 50 MB RAM at idle — runs comfortably alongside other services on the smallest VPS",[31,34,37],{"title":32,"body":33},"Team password management","Share credentials across your dev team or agency in encrypted organization vaults. Every member uses the Bitwarden app they already know — you just own the server.",{"title":35,"body":36},"Freelancer & solo dev","Stop paying Bitwarden's or 1Password's per-user fee. Self-host for yourself and your clients on a VPS that costs less per year than a single premium subscription.",{"title":38,"body":39},"Agency client onboarding","Spin up a Vaultwarden instance for each client. Give them a branded URL (e.g. passwords.client.ma), their own vault, and emergency-access policies — without mixing their credentials with yours.",[41,44,47,50,53,56],{"title":42,"body":43},"Order the VPS","Order a ServOrbit VPS with at least 1 vCPU and 512 MB of RAM, running Ubuntu 24.04. Plan for a domain name to point at that VPS as well: Bitwarden clients refuse to talk to a vault that is not served over HTTPS.",{"title":45,"body":46},"Deploy Vaultwarden","In your ServOrbit client area: Marketplace → Security → Vaultwarden → Deploy. Provisioning starts the `vaultwarden\u002Fserver:latest` image with the `vaultwarden` volume mounted on `\u002Fdata`, the port published on the local loopback at `127.0.0.1:8000`, and `WEBSOCKET_ENABLED=true` so that clients sync live. The container is ready within seconds; there is not a single command for you to type.",{"title":48,"body":49},"Sign in for the first time","The first time you open the address, Vaultwarden shows the Bitwarden web vault: click “Create account” and set your own e-mail address and master password (nobody can recover it, not even us). Do it IMMEDIATELY: sign-ups are open, and the instance starts with no admin token (`ADMIN_TOKEN`).",{"title":51,"body":52},"Attach your domain","Create an A record such as `passwords.example.com` pointing at the VPS IP, then attach that domain to the application from your client area: ServOrbit installs the nginx vhost and issues the TLS certificate, with nothing for you to install and nothing to configure. Your vault then answers on `https:\u002F\u002F\u003Cyour-domain>`, with no port number. As long as no domain is attached, the instance is only reachable through an SSH tunnel — `ssh -L 8000:127.0.0.1:8000 root@\u003Cvps-ip>` then `http:\u002F\u002Flocalhost:8000` — enough to look at the web vault from a computer, but neither the browser extension nor the phone app will be able to connect. Port 8000 is the catalogue port; if it has been reassigned, use the one shown on your app's card in the client area.",{"title":54,"body":55},"Connect your clients","Open `https:\u002F\u002F\u003Cyour-domain>` in your browser, sign in with the account you created above, then enter that same address in the “self-hosted server” field of the browser extension and of the mobile app before signing in there. Choose a strong master password: it is what encrypts the whole vault, and nobody can regenerate it.",{"title":57,"body":58},"Close public sign-ups","Once every account has been created, turn off open registration: connect to the VPS over SSH and restart the Vaultwarden container with `SIGNUPS_ALLOWED=false` in place of its initial value. The `vaultwarden` volume is left untouched: no vault is lost. Your instance then only accepts accounts created by invitation.",[60,63,66,69,72,75],{"q":61,"a":62},"What is Vaultwarden?","Vaultwarden is an open-source, unofficial implementation of the Bitwarden server API written in Rust. It is fully compatible with all official Bitwarden clients (browser extensions, iOS, Android, desktop, CLI) while using a fraction of the resources of the official server.",{"q":64,"a":65},"Is Vaultwarden safe to use?","Yes. Vaultwarden implements the same end-to-end encryption as the official Bitwarden server — your master password never leaves your device and all vault data is AES-256 encrypted before being sent to the server. The project is actively maintained with security patches published regularly.",{"q":67,"a":68},"Does Vaultwarden require HTTPS?","Yes. Official Bitwarden clients refuse to connect to a server without a valid TLS certificate, so you do need a domain name pointing at your VPS. What you do not need is to set up a reverse proxy or request a certificate yourself: attach the domain to the app from your ServOrbit client area and the nginx vhost and the TLS certificate are installed, then renewed, for you. It takes a couple of minutes, plus DNS propagation.",{"q":70,"a":71},"How much RAM does Vaultwarden need?","Vaultwarden is extremely lightweight: under 50 MB RAM at idle, even while serving dozens of concurrent users. A 512 MB VPS is sufficient for personal use or a small team; 1 GB is comfortable for an organization with 20–50 users.",{"q":73,"a":74},"Can I migrate from Bitwarden.com to Vaultwarden?","Yes. Export your vault from Bitwarden.com (Settings → Export Vault → JSON) and import it into Vaultwarden from the web vault or the app. The process takes under two minutes and all your passwords, notes, and folders are preserved.",{"q":76,"a":77},"How do I back up my Vaultwarden data?","All data lives in the Docker volume mounted at \u002Fdata: one SQLite file plus attachments. Back up this directory (e.g. with `docker run --rm -v vaultwarden:\u002Fdata -v \u002Fbackup:\u002Fout busybox tar czf \u002Fout\u002Fvaultwarden.tar.gz \u002Fdata`) and you have a complete snapshot. Schedule this daily with cron for zero-worry backups.",{"ram":79,"cpu":80,"stack":81,"port":85},"512 MB (1 GB recommended)","1 vCPU",[82,83,84],"Docker","Rust","SQLite","8000",[87],"ubuntu-24.04",[89,98,107],{"name":90,"slug":91,"categorySlug":92,"categoryName":93,"categoryColor":94,"logo":95,"tagline":96,"description":97},"WireGuard Server","wireguard-server","networking-vpn","Networking & VPN","text-sky-400 bg-sky-500\u002F10","https:\u002F\u002Fcdn.simpleicons.org\u002Fwireguard","Modern VPN built into the Linux kernel — secure connections for your teams and infrastructure.","Modern, minimal VPN built into the Linux kernel. Secure connections for your teams and infrastructure.",{"name":99,"slug":100,"categorySlug":101,"categoryName":102,"categoryColor":103,"logo":104,"tagline":105,"description":106},"Caddy","caddy","application-deployment-devops","Application Deployment & DevOps","text-success bg-success\u002F10","https:\u002F\u002Fcdn.simpleicons.org\u002Fcaddy","Automatic SSL for your applications — effortless HTTPS, auto-renewed certificates.","A modern web server and reverse proxy with automatic HTTPS. Let's Encrypt SSL certificates are obtained and renewed on their own, with minimal configuration via a Caddyfile.",{"name":108,"slug":109,"categorySlug":110,"categoryName":111,"categoryColor":112,"logo":113,"tagline":114,"description":115},"Uptime Kuma","uptime-kuma","monitoring-observability","Monitoring & Observability","text-amber-400 bg-amber-500\u002F10","https:\u002F\u002Fcdn.simpleicons.org\u002Fuptimekuma","Self-hosted uptime monitoring with beautiful status pages — unlimited monitors, no SaaS bill.","Simple, visual availability monitoring. Watch your HTTP, TCP and DNS endpoints and receive instant alerts.",[117,118,119],"deploy-vaultwarden-vps","securiser-vps-crowdsec","vpn-wireguard-vps",{"key":121,"slug":11,"name":122,"objective":123,"icon":121,"color":124},"security","Cybersecurity & Bastion","Harden infrastructure security.","text-red-400 bg-red-500\u002F10",1787581038308]