Vaultwarden

Vaultwarden is an open-source, self-hosted server implementation of the Bitwarden Client API. Written in Rust, it provides a lightweight environment for managing passwords and secrets, designed specifically for deployments where resource consumption is a primary concern. The software allows users to maintain full control over their encrypted data by hosting the backend on their own hardware or private cloud infrastructure.

The software is typically deployed as a Docker or Podman container, though it can also be built from source for specific environments. Because the web vault requires the use of the Web Crypto API, the application requires HTTPS and a secure context to function correctly. Users generally deploy the server behind a reverse proxy to handle TLS termination and manage network traffic effectively.

Key features

• Support for password sharing via collections
• Management of member roles and groups
• Event logs for auditing activity
• Admin password reset capabilities
• Directory Connector integration
• Multi-factor authentication via Email, FIDO2 WebAuthn, and YubiKey
• Bundled modified Web Vault client

Vaultwarden is built using the Rocket web framework, which provides the underlying structure for its API endpoints. It is designed for individuals, families, and small organizations that require a self-hosted secrets platform without the overhead of a full enterprise installation. The server maintains compatibility with official Bitwarden clients across mobile, desktop, and browser platforms, ensuring that users can access their vaults through various interfaces. Persistent storage is handled by mounting a volume from the host to the container, allowing for the backup and migration of the database and attachments.

This project serves as a lightweight server for the self-hosting community.