We've got a new update. We now offer our own Web Console. Open the console and type ssh root@your-server-ip to reach any server you own, right from your browser. No SSH app needed.
Vaultwarden is a lightweight, unofficial server that works with the official Bitwarden apps. It runs happily on our smallest VPS. Running it yourself puts your encrypted vault under your control, and also makes you responsible for HTTPS, updates and backups. Here is how to do it and what to watch.
Vaultwarden is described by its project as suited to self-hosting where the official resource-heavy service is not ideal. Prices are one-month prices; a 12-month term takes 50% off.
or $2.88/mo on a 12-month term (−50%)
Our cheapest size. More than enough for a household vault with room for backups.
Configure and orderor $4.25/mo on a 12-month term (−50%)
Room for a reverse proxy, a monitoring tool and a second service.
Configure and orderThe official image is vaultwarden/server. Check the project wiki for the current options, including how to enable the admin page, before you rely on this.
docker run -d --name vaultwarden --restart unless-stopped \
-v /srv/vaultwarden:/data \
-p 127.0.0.1:8080:80 \
vaultwarden/server:latest# /etc/caddy/Caddyfile
vault.yourdomain.com {
reverse_proxy 127.0.0.1:8080
}sudo ufw allow 22/tcp
sudo ufw allow 80/tcp
sudo ufw allow 443/tcp
sudo ufw enableThe project states that the web vault requires HTTPS and a secure context for the Web Crypto API. Do not expose it over plain HTTP. You need a domain; see buy domain names and point a domain to your VPS.
The vault lives in the folder you mount at /data. Copy it off the server on a schedule. A backup you have never restored is a guess. See how to back up a VPS.
A password server is a high-value target. Pull the new image when releases come out and restart the container.
Leaving registration open on a public server invites strangers. Turn it off once your family or team has accounts. The project wiki explains the setting.
Enable it on every account, and keep the recovery codes offline.
It is an alternative server implementation of the Bitwarden client API, written in Rust and compatible with the official Bitwarden clients. It is an unofficial project, formerly known as bitwarden_rs.
Very little. The project presents it as suited to self-hosted setups where the official resource-heavy service would not be ideal. Our cheapest VPS, 1 vCPU and 2 GB for $5.76 a month, is plenty for a personal or family vault.
Yes. The project says the web vault requires HTTPS and a secure context for the Web Crypto API. Use a domain and a reverse proxy with a certificate.
It can be, if you keep the server patched and backed up and use two-factor authentication. If you cannot maintain a server, a hosted service may be safer.
Yes. Vaultwarden is built to work with the official Bitwarden clients. Point the app at your own server address in its settings.
Yes. Generate a login and pay in Bitcoin, Monero, USDT or another supported coin, with no name, ID or phone. See pay with crypto.
Checked 19 October 2026. Chain sizes and software requirements change, so confirm against the source before you order.
Pick a size, pay in crypto, log in as root. No ID, no card.