Vaultwarden
title: Vaultwarden type: platform created: 2026-05-26 last_updated: 2026-05-26 related: ["radar/platforms/Defguard", "radar/platforms/PocketId", "radar/tools/Infisical"] sources: ["https://github.com/dani-garcia/vaultwarden"] radar_quadrant: Platforms radar_ring: Assess radar_position: inner
Unofficial self-hosted Bitwarden-compatible password manager server written in Rust. All official Bitwarden clients (browser extensions, desktop apps, mobile apps) work against it unchanged; the server is a single binary or Docker container requiring roughly 10 MB of RAM.
Vaultwarden reimplements the Bitwarden server API in Rust at a fraction of the resource cost. The official Bitwarden server requires MSSQL and multiple services; Vaultwarden runs on SQLite (or PostgreSQL/MySQL) in a single container. Supported features include:
- All Bitwarden vault features — passwords, secure notes, cards, identities, attachments, folder organisation
- Organisation vaults and sharing — multi-user vaults with access control and collection sharing
- TOTP and passkey support — two-factor authentication generation and WebAuthn credential storage
- Send — encrypted file and text sharing with expiry
- Admin panel — web UI for user management, invitations, and instance configuration
- Emergency access — designated trusted contacts for account recovery
Vaultwarden covers end-user password management — credentials a person uses day-to-day. It does not replace application secrets tools:
- Infisical (Assess/inner) — secrets for applications: API keys, database URLs, environment variables
- Varlock (Trial/inner) — schema-first env config for AI-safe application configuration
- Vaultwarden — personal and team passwords, TOTP codes, secure notes
Vaultwarden sits in the Assess ring of the Platforms quadrant, at inner position. First studied via GitHub (2024-08-17). 36,000+ stars; actively maintained since 2018; used by a large fraction of self-hosted homelab deployments. The lightweight Rust implementation (single container, SQLite, ~10 MB RAM) makes it viable on a Raspberry Pi or any minimal VPS — the official Bitwarden server is not. Inner position reflects a clear Docker Compose deployment path and broad applicability to any homelab or small-team setup requiring a self-hosted password manager. Remaining gate before Trial is a running instance managing real credentials across devices with verified client sync.
