Vaultwarden
Vaultwarden is an unofficial Bitwarden-compatible server written in Rust for self-hosted password management.
What Vaultwarden is
Vaultwarden is an unofficial Bitwarden-compatible server written in Rust for self-hosted password management. It implements the Bitwarden Client API and works with official Bitwarden clients. Personal features include a vault, Send, attachments, website icons, and a personal API key. For organizations, the listed tools include collections, password sharing, member roles, groups, event logs, admin password reset, directory connector, and policies. Multi-factor options listed by the project include authenticator, email, FIDO2 WebAuthn, YubiKey, and Duo; Emergency Access is also included. Vaultwarden is free and open source, with no paid plans stated. The project recommends installing its container images. Its web vault requires HTTPS, and the project advises using a reverse proxy to handle it rather than the built-in Rocket HTTPS option. The project also recommends HTTPS before enabling the admin panel and a long, randomly generated admin token. Vaultwarden is aimed at the self-hosting community, including individuals, families, and small organizations, and is not associated with Bitwarden, Inc. Passwordless account login is not supported.
Good
- Compatible with official Bitwarden clients.
- Includes personal vault and sharing features.
- Lists organization administration and governance tools.
- Offers several multi-factor authentication options.
- Free, open-source project with no paid plans stated.
Watch out
- Requires self-hosted deployment.
- Web vault requires HTTPS.
- Passwordless account login is not supported.
- Project is not associated with Bitwarden, Inc.
Who it suits
Vaultwarden is for individuals, families, and small organizations prepared to deploy and manage a self-hosted password server. It may also suit teams that need organization features and multi-factor options.
Verdict
Vaultwarden combines Bitwarden client compatibility with personal and organization features for self-hosted use. Account for the HTTPS and deployment requirements, and note that passwordless login is not available.
Plans and prices
From Vaultwarden's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Vaultwarden | Free | Self-hosted server; community project; no paid plans stated |
The facts
Each one read from Vaultwarden's own pages, with the date it was checked.
What it does
- Admin security
- The admin documentation recommends HTTPS before enabling the admin panel and a long, randomly generated admin token.checked 11 Oct 2026
- Audience and relationship
- The maintainers say the project serves the self-hosting community, including individuals, families, and small organizations, and that it is not associated with Bitwarden, Inc.checked 11 Oct 2026
- Authentication
- The project lists authenticator, email, FIDO2 WebAuthn, YubiKey, and Duo among its multi-factor authentication options.checked 11 Oct 2026
- Business admin controls
- Yeschecked 20 Sep 2026
- Client compatibility
- The server implements the Bitwarden Client API and is compatible with official Bitwarden clients.checked 11 Oct 2026
- Deployment
- The project recommends installing through its container images, published to ghcr.io, Docker Hub, and Quay.io.checked 11 Oct 2026
- Emergency access
- Emergency Access is included in the listed feature set.checked 11 Oct 2026
- HTTPS guidance
- The project recommends placing Vaultwarden behind a reverse proxy that handles HTTPS and describes its built-in Rocket HTTPS option as not recommended.checked 11 Oct 2026
- HTTPS requirement
- The web vault requires HTTPS because browsers generally expose the Web Crypto API only in secure contexts.checked 11 Oct 2026
- Organization features
- The listed organization features include collections, password sharing, member roles, groups, event logs, admin password reset, directory connector, and policies.checked 11 Oct 2026
- Passkey support
- Yeschecked 20 Sep 2026
- Passwordless account login
- Nochecked 20 Sep 2026
- Product
- Vaultwarden is an unofficial Bitwarden-compatible server written in Rust for self-hosted deployment.checked 11 Oct 2026
- Secure sharing
- Yeschecked 20 Sep 2026
- Security reporting
- The project asks users to report security issues and requests reasonable time to address them before public or third-party disclosure.checked 11 Oct 2026
- Support
- The project directs questions and help requests to Matrix, GitHub Discussions, and Discourse, and asks users to report bugs directly to Vaultwarden rather than official Bitwarden support.checked 11 Oct 2026
- Token hashing
- The admin token can be stored in Argon2id PHC format, and the built-in hash command provides Bitwarden-default and OWASP-minimum presets.checked 11 Oct 2026
- Vault features
- Its listed features include a personal vault, Send, attachments, website icons, and a personal API key.checked 11 Oct 2026
Where it runs
- Supported platforms
- web,API,self-hosted deploymentchecked 20 Sep 2026
Alternatives to Vaultwarden
- 1
Proton Pass
Free planOpen sourceAndroidiOSWebAPI9.4From $35.88 a year - 2
Padloc
Free planOpen sourceAndroidiOSWebExtension9.1From $3.49 a month - 3
NordPass
Free planAndroidiOSWebAPI9.0Free plan - 4
Zoho Vault
Free planAndroidiOSWebAPI8.9Free plan - 5
LogMeOnce
Free planAndroidiOSWebAPI8.8From $2.50 a month - 6
1Password
AndroidiOSWebAPI8.7From $2.99 a month