Vaultwarden

The Bitwarden server, reimplemented in Rust: Vaultwarden (formerly bitwarden_rs) is the unofficial lightweight edition. It speaks the same wire protocol as the official server, so every official Bitwarden client - browser extensions, iOS, Android, desktop, and the bw CLI - connects without modification, while the server itself runs as a single container against SQLite (or MySQL/MariaDB/PostgreSQL) instead of the official multi-container stack that wants gigabytes of RAM. Features Bitwarden gates behind paid tiers ship free: organizations with collections, groups, member roles, and policies; TOTP code storage; file attachments; Bitwarden Send; Emergency Access; event logs; and admin password reset. Two-factor options cover authenticator apps, email, FIDO2 WebAuthn, YubiKey, and Duo, and OIDC-based SSO landed natively in v1.35.0. Zero-knowledge encryption is unchanged - vault data is encrypted client-side and the master password never reaches the server. Attachments and Sends store on local disk or S3-compatible backends, an admin panel manages users and server settings, and backup is copying one data directory. Suited to individuals and teams up to roughly 50 users.

Vaultwarden
Vaultwarden
Vaultwarden
Vaultwarden

Benefits

  • Premium Features Without Subscriptions
  • TOTP storage, file attachments, Emergency Access, and full Organizations with groups and policies - features Bitwarden meters per user - are simply included.
  • A Fraction of the Footprint
  • One Rust binary on SQLite versus the official server's multi-container stack with MS SQL and 2-4 GB RAM floor. Runs comfortably on the smallest instances.
  • Zero-Knowledge, Your Server
  • Vault data is encrypted client-side before it leaves the device; self-hosting adds control over where the ciphertext lives without changing the security model.
  • Trivial Backup and Migration
  • The entire state - database, RSA keys, attachments, Sends - lives in one data directory. Copy it and you have a complete backup.

Features

  • Full Client Compatibility
  • Official Bitwarden browser extensions, mobile apps, desktop apps, and CLI all connect unmodified.
  • Organizations and Sharing
  • Collections, password sharing, member roles, groups, policies, event logs, and admin password reset for team use.
  • Complete 2FA Coverage
  • Authenticator apps, email codes, FIDO2 WebAuthn, YubiKey, and Duo, plus native OIDC SSO.
  • Bitwarden Send and Attachments
  • Share encrypted text and files with expiring links; attach files to vault items, stored locally or on S3.
  • Emergency Access
  • Grant trusted contacts time-delayed vault access for account recovery scenarios.
  • Admin Panel and Flexible Storage
  • Web admin backend for user and server management; SQLite by default with MySQL and PostgreSQL options.