Categories
Self-Hosted Privacy DevOps Security Encryption Authentication Password Manager Team CollaborationStars
Forks
Watchers
Developer links
Vaultwarden
The Bitwarden server, reimplemented in Rust: Vaultwarden (formerly bitwarden_rs) is the unofficial lightweight edition. It speaks the same wire protocol as the official server, so every official Bitwarden client - browser extensions, iOS, Android, desktop, and the bw CLI - connects without modification, while the server itself runs as a single container against SQLite (or MySQL/MariaDB/PostgreSQL) instead of the official multi-container stack that wants gigabytes of RAM. Features Bitwarden gates behind paid tiers ship free: organizations with collections, groups, member roles, and policies; TOTP code storage; file attachments; Bitwarden Send; Emergency Access; event logs; and admin password reset. Two-factor options cover authenticator apps, email, FIDO2 WebAuthn, YubiKey, and Duo, and OIDC-based SSO landed natively in v1.35.0. Zero-knowledge encryption is unchanged - vault data is encrypted client-side and the master password never reaches the server. Attachments and Sends store on local disk or S3-compatible backends, an admin panel manages users and server settings, and backup is copying one data directory. Suited to individuals and teams up to roughly 50 users.
Benefits
- Premium Features Without Subscriptions
- TOTP storage, file attachments, Emergency Access, and full Organizations with groups and policies - features Bitwarden meters per user - are simply included.
- A Fraction of the Footprint
- One Rust binary on SQLite versus the official server's multi-container stack with MS SQL and 2-4 GB RAM floor. Runs comfortably on the smallest instances.
- Zero-Knowledge, Your Server
- Vault data is encrypted client-side before it leaves the device; self-hosting adds control over where the ciphertext lives without changing the security model.
- Trivial Backup and Migration
- The entire state - database, RSA keys, attachments, Sends - lives in one data directory. Copy it and you have a complete backup.
Features
- Full Client Compatibility
- Official Bitwarden browser extensions, mobile apps, desktop apps, and CLI all connect unmodified.
- Organizations and Sharing
- Collections, password sharing, member roles, groups, policies, event logs, and admin password reset for team use.
- Complete 2FA Coverage
- Authenticator apps, email codes, FIDO2 WebAuthn, YubiKey, and Duo, plus native OIDC SSO.
- Bitwarden Send and Attachments
- Share encrypted text and files with expiring links; attach files to vault items, stored locally or on S3.
- Emergency Access
- Grant trusted contacts time-delayed vault access for account recovery scenarios.
- Admin Panel and Flexible Storage
- Web admin backend for user and server management; SQLite by default with MySQL and PostgreSQL options.