Your password vault is the one service where trusting a third party costs the most. Self-hosting Vaultwarden puts every secret on a machine you control, and hosting it offshore with no KYC means the machine is not filed under your name either.
Why host your own vault
- Works with every Bitwarden client: desktop, mobile, browser extensions and CLI
- Lightweight: the Rust server runs comfortably in 512 MB of memory
- One-click install with HTTPS issued automatically
- Offshore and no KYC, paid in crypto, with no card tied to the vault
Get it running
Pick a small VPS
Vaultwarden asks for very little: around 512 MB of memory, a couple of GB of disk and a single core. Even the entry offshore VPS has room to spare.
Install it in one click
Install Vaultwarden from the catalog, give it a hostname, and the certificate is issued for you. See how one-click installs work.
Create your account, then close the door
Open the web vault, register your account, and immediately turn signups off so nobody else can register on your server.
Connect your clients
Point the Bitwarden apps and extensions at your own server URL instead of the hosted service. Same clients, your infrastructure.
A fresh install accepts new registrations. If you leave that on, anyone who finds the URL can create an account on your vault server. Set signups to false the moment your own account exists, and treat it as part of the install, not a later chore.
If the disk dies and the backup was never restored once, you have not verified you can get your passwords back. Take on-demand backups, keep a copy off that server, and actually test a restore. See manage your VPS from chat.
Vaultwarden can publish a Tor v3 .onion address, including with no public hostname at all. A vault that is only reachable over Tor is invisible to internet-wide scanning. See how to publish a Tor .onion site.
End-to-end encryption means the server never sees your master password, and neither do we. That is the point, and it also means nobody can reset it for you. Store it somewhere you will not lose it.
Start now
Spin up an offshore VPS and install from the catalog, or read the documentation first.