Vaultwarden is an unofficial, drop-in compatible Bitwarden server written in Rust that lets you self-host every Bitwarden client — browser extensions, mobile apps, desktop apps, the CLI — on a fraction of the resources, and unlocks every paid Bitwarden Premium feature for free. We rate it 92/100 — the most efficient and most popular self-hosted password manager you can deploy in 2026, ideal for homelabbers, privacy-focused individuals, and small families or teams who want full control of their secrets without paying per seat.

What is Vaultwarden?

Vaultwarden was created by Spanish developer Daniel García (dani-garcia), with the first commit landing on February 22, 2018 under the original name bitwarden_rs. It was renamed to Vaultwarden in April 2022 at the request of Bitwarden Inc. to remove brand confusion. The project lives at github.com/dani-garcia/vaultwarden and is licensed under AGPL-3.0. As of April 27, 2026 the repository sits at 59,368 stars and 2,737 forks, with the latest stable release v1.35.8 shipped on April 25, 2026.

Vaultwarden replaces Bitwarden’s official .NET-based self-hosted server with a single Rust binary that speaks the same API. You point any Bitwarden client at your Vaultwarden URL and it just works — same vault encryption (AES-256, PBKDF2/Argon2id), same end-to-end model, same sync. The difference is operational: where the official Bitwarden self-host stack pulls eleven Docker containers and asks for 2 GB of RAM, Vaultwarden runs as one container with SQLite or Postgres, idles around 50 MB of RAM, and is comfortable on a Raspberry Pi.

Vaultwarden GitHub repository — the unofficial Rust-based Bitwarden-compatible server — Vaultwarden on GitHub: 59k+ stars, AGPL-3.0, and a drop-in replacement for the official Bitwarden self-hosted server.

Key Features of Vaultwarden

Full Bitwarden client compatibility: works unchanged with the official browser extensions (Chrome, Firefox, Safari, Edge, Brave), iOS and Android apps, the macOS / Windows / Linux desktop app, and the bw CLI — no client forks required.
Premium features unlocked for free: built-in TOTP authenticator, file and text attachments, Bitwarden Send, Emergency Access, and vault-health reports are all enabled by default — features that cost $10/year per user on Bitwarden Premium.
Organizations and Collections: unlimited users, unlimited organizations, unlimited collections — useful for families and small teams that would otherwise pay $40/year for a Bitwarden Family plan or $36/user/year for Teams.
Built-in admin panel at /admin: Argon2-token-protected dashboard for user management, invitations, diagnostics, SMTP settings, push-notification configuration, and database backups — no separate management container.
Multiple database backends: SQLite (default, zero-config), MySQL/MariaDB, or PostgreSQL — pick whatever your homelab already runs.
Push notifications via Bitwarden’s relay: v1.32 introduced an optional Bitwarden push relay so mobile clients sync instantly without exposing your server publicly to Apple and Google’s push gateways.
WebAuthn, FIDO2, YubiKey OTP, Duo, Email 2FA: every Bitwarden 2FA method is supported, including hardware-key registration directly from the web vault.
Tiny footprint: a single Rust binary or roughly a 70 MB Docker image. The vaultwarden/server image has been pulled over 1 billion times on Docker Hub.

Vaultwarden’s official wordmark, hosted in the project’s GitHub resources/ directory.

What Users Say About Vaultwarden

Vaultwarden is the de-facto standard on r/selfhosted, where it has appeared in nearly every “what self-hosted services do you actually use?” thread for the past four years. Recurring praise centers on three things: how light it is on a Raspberry Pi or low-end VPS, how it unlocks Bitwarden Premium features without a subscription, and how clean the upgrade story is — docker compose pull && docker compose up -d is the entire patch flow. On Hacker News, threads about the project consistently call out Daniel García’s long-term, single-maintainer commitment as both a strength and a risk.

The honest complaints are also consistent. Vaultwarden has not had a third-party security audit on the scale of Bitwarden Inc.’s SOC 2 Type II reports, so security-conscious shops with compliance requirements still pay for the official server. Push notifications, while now supported via the Bitwarden relay, are still trickier to set up than on Bitwarden’s hosted offering. And users on G2 mention occasional friction with autofill on mobile browsers and a steeper bar to entry for non-technical family members compared to the hosted Bitwarden plan.

Vaultwarden Pricing

Vaultwarden itself is free, open source, and donation-funded. You only pay for the infrastructure you run it on. A typical small deployment fits comfortably inside the free tier of any major homelab option.

Deployment Option	Typical Monthly Cost	Notes
Raspberry Pi 4 / 5 at home	$0 (electricity only)	Idles at ~50 MB RAM — runs alongside other services
Hetzner CX11 / Oracle Free Tier VPS	$0–$5	Most popular VPS choice on r/selfhosted
DigitalOcean / Linode 1 GB droplet	$4–$6	Add an automated backup snapshot for ~$1/month
Donations to the project	Optional	Via GitHub Sponsors and Liberapay

Who Should Use Vaultwarden?

Best for: homelabbers, privacy-conscious individuals, families wanting unlimited users without a $40/year Family plan, and small teams or freelancers comfortable maintaining a Docker container. Anyone who already runs services like Jellyfin, Immich, or Pi-hole and wants a similarly lightweight password manager will feel at home.

Not ideal for: enterprises with SOC 2 / ISO 27001 obligations, organizations that want vendor-backed support and a managed SLA, or non-technical users who don’t want to babysit a server. For those, Bitwarden’s hosted Teams or Enterprise plans (or 1Password Business) remain the right answer.

Pros and Cons

Pros:

Idles at ~50 MB RAM — one of the lightest password servers shipped today
Premium features (TOTP, attachments, Send, Emergency Access) free for everyone
Single-binary or single-container deploy — setup verified at under 5 minutes by multiple Reddit threads
Unlimited users, unlimited orgs, unlimited collections
Active maintenance: 60+ releases since 2018, latest v1.35.8 on April 25, 2026

Cons:

No formal third-party audit comparable to Bitwarden Inc.’s SOC 2 Type II
Single primary maintainer — bus factor of effectively one
Push notifications still require relay configuration
You are responsible for backups, updates, TLS, and disaster recovery

Alternatives to Vaultwarden

The closest direct comparison is the official Bitwarden self-hosted server, which is heavier (multi-container, ~2 GB RAM) but vendor-supported and audited. Bitwarden’s hosted Free / Family / Premium plans are the no-effort path for most non-technical users. 1Password is the polished commercial alternative if you don’t care about self-hosting. For teams that need fine-grained secrets management with rotation, HashiCorp Vault or Infisical serve a different but adjacent niche. For a more recent open-source web-vault alternative, look at Passbolt — team-first, GPG-based, and audited.

Verdict: Is Vaultwarden Worth It?

If you can run a Docker container, Vaultwarden is almost a no-brainer. It has been the most popular self-hosted password manager on Reddit, GitHub, and Hacker News for years for a reason: it gives you 95% of Bitwarden Premium for $0/month and idles in less RAM than a single browser tab. The only real reasons to choose something else are formal compliance requirements, or simply not wanting the operational responsibility of running a server. For everyone else — families, homelabbers, indie developers, privacy-first power users — Vaultwarden in 2026 earns its 92/100.

Frequently Asked Questions

Is Vaultwarden free?: Yes. Vaultwarden is free and open source under the AGPL-3.0 license, with all Bitwarden Premium features (TOTP, attachments, Send, Emergency Access) enabled by default. You only pay for the infrastructure you run it on, which can be as little as $0 on a Raspberry Pi or Oracle Free Tier VM.
Is Vaultwarden compatible with Bitwarden clients?: Yes — Vaultwarden re-implements the Bitwarden REST API, so the official browser extensions, iOS and Android apps, desktop apps, and the bw CLI all work without modification. You only change the server URL.
Is Vaultwarden safe to use?: Vaultwarden uses the same end-to-end client-side encryption as Bitwarden (AES-256-CBC, PBKDF2 or Argon2id, HMAC-SHA-256). The Rust implementation eliminates whole classes of memory-safety bugs. It has not, however, undergone a formal SOC 2 Type II audit, so organizations with strict compliance needs may prefer the official server.
How does Vaultwarden compare to Bitwarden?: Vaultwarden is a community-built Rust server that speaks Bitwarden’s API. It is dramatically lighter (~50 MB RAM vs. 2 GB+) and unlocks Premium features for free, but lacks vendor support and formal audits. Bitwarden Inc.’s server is audited and vendor-supported but heavier and gates premium features behind a subscription.
Is Vaultwarden open source?: Yes — the source code is available at github.com/dani-garcia/vaultwarden under the AGPL-3.0 license.
What’s the latest version of Vaultwarden?: The latest stable release is v1.35.8, published on April 25, 2026.

#homelab

Beszel

Vaultwarden

AdGuard Home

Glance