Vaultwarden

Vaultwarden is an alternative server implementation of the Bitwarden Client API, written in Rust and compatible with the official Bitwarden clients. It targets self-hosted deployments where the official, resource-heavy service is not ideal, keeping your vault on hardware you own. Formerly Bitwarden_RS, it is not associated with Bitwarden, Inc.

Implementing nearly all of the Bitwarden Client API, it lets existing mobile, desktop, and browser clients connect directly. Supported features include the personal vault, Send, attachments, and organizations with collections, sharing, roles, and policies. Two-step login works via authenticator, email, FIDO2 WebAuthn, YubiKey, and Duo, plus emergency access.

Vaultwarden ships as official container images on ghcr.io, Docker Hub, and Quay, run behind a reverse proxy with a mounted volume for persistent data. It bundles a modified Bitwarden web vault and a built-in admin backend for managing the instance, and requires HTTPS for the Web Crypto API.