Vaultwarden
The Bitwarden server, reimplemented in Rust: Vaultwarden (formerly bitwarden_rs) is the
unofficial lightweight edition. It speaks the same wire protocol as the official server, so
every official Bitwarden client - browser extensions, iOS, Android, desktop, and the bw CLI -
connects without modification, while the server itself runs as a single container against
SQLite (or MySQL/MariaDB/PostgreSQL) instead of the official multi-container stack that wants
gigabytes of RAM. Features Bitwarden gates behind paid tiers ship free: organizations with
collections, groups, member roles, and policies; TOTP code storage; file attachments;
Bitwarden Send; Emergency Access; event logs; and admin password reset. Two-factor options
cover authenticator apps, email, FIDO2 WebAuthn, YubiKey, and Duo, and OIDC-based SSO landed
natively in v1.35.0. Zero-knowledge encryption is unchanged - vault data is encrypted
client-side and the master password never reaches the server. Attachments and Sends store on
local disk or S3-compatible backends, an admin panel manages users and server settings, and
backup is copying one data directory. Suited to individuals and teams up to roughly 50 users.
Deploy