Vaultwarden

Description

Vaultwarden is a lightweight, open-source password-manager server written in Rust that implements the Bitwarden API and works with the official Bitwarden apps, browser extensions, and CLI. It is a self-hostable alternative to 1Password, LastPass, and hosted Bitwarden, giving individuals and teams an encrypted vault on their own hardware. Where the official Bitwarden server needs around 2 GB of RAM and SQL Server, Vaultwarden runs the same feature set from a single container in roughly 10 MB.

Features

• Bitwarden client compatible: Use the official desktop, mobile, browser, and CLI clients unchanged.
• Premium features included: TOTP codes, passkeys / FIDO2, file attachments, and Sends at no cost.
• Organizations: Share collections across users and groups with per-item permissions.
• Admin panel: Web UI for user management, invitations, and server settings.
• Two-factor auth: TOTP, WebAuthn, Duo, and email.
• Tiny footprint: Single binary / container; runs on a Raspberry Pi.

Technology Stack

• Rust (Rocket web framework)
• SQLite, MySQL, or PostgreSQL
• Docker as the primary distribution

Requirements

• Docker Engine and Docker Compose
• A domain with DNS and HTTPS (Bitwarden clients refuse plain HTTP)
• Optional SMTP server for email invitations and 2FA