How to Self-Host Your Own Password Manager: Vaultwarden Guide

Trusting a third party with your passwords is a significant risk. Major leaks in the past have proven that even the most secure companies can be vulnerable. Self-hosting your password manager ensures you hold the keys to your own digital life.

Vaultwarden is an unofficial, lightweight Rust implementation of the Bitwarden API. It's fully compatible with the official Bitwarden apps while using significantly fewer resources.

Why Vaultwarden?

• Lightweight: Runs on a Raspberry Pi or a $5 VPS (uses <200MB RAM).
• Compatible: Works with official Bitwarden browser extensions and mobile apps.
• Unlocks Premium Features: Includes "premium" features like TOTP generation and organization sharing for free.
• Data Privacy: Your encrypted database never leaves your network.

Prerequisites

• A VPS or home server with Docker installed.
• A domain name (required for SSL).
• A reverse proxy (Caddy, Nginx, or Traefik).

Step 1: Docker Compose Setup

Create a directory for Vaultwarden and paste the following into docker-compose.yml:

services:
  vaultwarden:
    image: vaultwarden/server:latest
    container_name: vaultwarden
    restart: always
    environment:
      - SIGNUPS_ALLOWED=true # Set to false after creating your account
      - DOMAIN=https://pass.yourdomain.com
    volumes:
      - ./vw-data:/data
    ports:
      - 8080:80

Step 2: SSL is Mandatory

You should never access your password manager over an unencrypted connection (HTTP). Use Caddy for the simplest SSL setup:

pass.yourdomain.com {
    reverse_proxy localhost:8080
}

Step 3: Secure Your Instance

Once you have registered your account, edit your docker-compose.yml and set SIGNUPS_ALLOWED=false. This prevents random people from creating accounts on your server.

Step 4: Backups (Crucial!)

Since you are now your own sysadmin, you are responsible for backups. Vaultwarden stores everything in an SQLite database inside the vw-data folder.

Simple Backup Script:

# Stop the container
docker stop vaultwarden
# Copy the data folder
cp -r ./vw-data ./backups/backup_$(date +%F)
# Start the container
docker start vaultwarden

Conclusion

Self-hosting Vaultwarden gives you the premium experience of a modern password manager with the absolute privacy of self-hosting. It is one of the most rewarding self-hosted projects you can undertake.

Compare other password managers on The AltStack today!