Logo
Deploy Now

Stars

64016

Forks

3019

Watchers

293

Vaultwarden

The Bitwarden server, reimplemented in Rust: Vaultwarden (formerly bitwarden_rs) is the unofficial lightweight edition. It speaks the same wire protocol as the official server, so every official Bitwarden client - browser extensions, iOS, Android, desktop, and the bw CLI - connects without modification, while the server itself runs as a single container against SQLite (or MySQL/MariaDB/PostgreSQL) instead of the official multi-container stack that wants gigabytes of RAM. Features Bitwarden gates behind paid tiers ship free: organizations with collections, groups, member roles, and policies; TOTP code storage; file attachments; Bitwarden Send; Emergency Access; event logs; and admin password reset. Two-factor options cover authenticator apps, email, FIDO2 WebAuthn, YubiKey, and Duo, and OIDC-based SSO landed natively in v1.35.0. Zero-knowledge encryption is unchanged - vault data is encrypted client-side and the master password never reaches the server. Attachments and Sends store on local disk or S3-compatible backends, an admin panel manages users and server settings, and backup is copying one data directory. Suited to individuals and teams up to roughly 50 users.

Vaultwarden

Benefits

  • Premium Features Without Subscriptions
  • TOTP storage, file attachments, Emergency Access, and full Organizations with groups and policies - features Bitwarden meters per user - are simply included.
  • A Fraction of the Footprint
  • One Rust binary on SQLite versus the official server's multi-container stack with MS SQL and 2-4 GB RAM floor. Runs comfortably on the smallest instances.
  • Zero-Knowledge, Your Server
  • Vault data is encrypted client-side before it leaves the device; self-hosting adds control over where the ciphertext lives without changing the security model.
  • Trivial Backup and Migration
  • The entire state - database, RSA keys, attachments, Sends - lives in one data directory. Copy it and you have a complete backup.

Features

  • Full Client Compatibility
  • Official Bitwarden browser extensions, mobile apps, desktop apps, and CLI all connect unmodified.
  • Organizations and Sharing
  • Collections, password sharing, member roles, groups, policies, event logs, and admin password reset for team use.
  • Complete 2FA Coverage
  • Authenticator apps, email codes, FIDO2 WebAuthn, YubiKey, and Duo, plus native OIDC SSO.
  • Bitwarden Send and Attachments
  • Share encrypted text and files with expiring links; attach files to vault items, stored locally or on S3.
  • Emergency Access
  • Grant trusted contacts time-delayed vault access for account recovery scenarios.
  • Admin Panel and Flexible Storage
  • Web admin backend for user and server management; SQLite by default with MySQL and PostgreSQL options.