Vaultwarden
Lightweight Bitwarden-compatible server written in Rust
FreeSecurityOpen Source6 impressions
Vaultwarden is a free alternative to 1Password.
Vaultwarden is a lightweight, self-hosted server compatible with Bitwarden’s API, written in Rust.
- for
- Teams and individuals who want to run their own password manager without using Bitwarden’s cloud service.
- pricing
- open source
- license
- AGPL-3.0
Key features
- Bitwarden-compatible API — Provides the same API as Bitwarden, allowing existing Bitwarden clients to connect without changes.
- Rust implementation — Built in Rust for performance and safety, using minimal resources.
- Docker support — Official Docker images enable quick deployment on any container platform.
- Two-factor authentication — Supports email, authenticator apps, YubiKey and Duo for added security.
- SSO and organization support — Includes single sign-on, organization keys and user management similar to Bitwarden.
- Extensible configuration — Environment-file based settings let you customize storage, email, and security options.
Use cases
- Self-hosting a password vault for a small business
- Running a secure password manager in a Docker swarm or Kubernetes cluster
- Providing Bitwarden-compatible access for mobile and desktop clients without third-party cloud
- Testing password-manager integrations in CI pipelines
Vaultwarden vs alternatives
Bitwarden | Infisical | Keycloak | |||
|---|---|---|---|---|---|
| Best for | Self-hosted Bitwarden-compatible password storage | Managed cloud password vault | App secrets management | Service-level secret storage | Enterprise SSO and IAM |
| Pricing | Open source | Free | Subscription | Free | Free |
| DevHunt upvotes | 0 | 0 | 0 | 0 | 0 |
| Launched | — | — | — | — | — |
- Vaultwarden vs Bitwarden: Official Bitwarden service is hosted SaaS, while Vaultwarden is self-hosted and free.
- Vaultwarden vs Doppler: Doppler manages secrets for apps, not end-user passwords like Vaultwarden.
- Vaultwarden vs Infisical: Infisical focuses on secrets and certificates for services, whereas Vaultwarden stores personal passwords.
- Vaultwarden vs Keycloak: Keycloak provides identity and access management, not a password-manager UI compatible with Bitwarden clients.
Vaultwarden FAQ
Can Vaultwarden replace the official Bitwarden cloud?+
Yes, it implements the same API, so any Bitwarden client can connect to a Vaultwarden instance.
What platforms can I run Vaultwarden on?+
It runs on any system that supports Docker or can compile Rust binaries, including Linux, macOS and Windows.
Is data encrypted at rest?+
Vaultwarden stores encrypted vault data; encryption keys are derived from the user’s master password.
How do I enable two-factor authentication?+
Configure the desired 2FA methods (email, authenticator apps, YubiKey, Duo) in the environment settings and enable them per user.
Summarized by DevHunt from github.com · Oct 7, 2026. Details may change; check the official site.
About this listing
DevHunt lists Vaultwarden because developers expect to find it next to the tools in its category. It did not launch on DevHunt. Work on Vaultwarden? Message us to claim this listing.
Bitwarden
Infisical
Keycloak







