Vaultwarden

Deploy Vaultwarden on a VPS in One Click

Authentication & security

A self-hosted password manager compatible with official Bitwarden apps — encrypted vault for passwords, secure notes and 2FA under your own control.

  • Ready in ~3 min
  • Free installation
  • We handle the setup
At a glance
Version
Latest (1.x)
Operating system
Ubuntu Server 24.04 LTS
Minimum RAM
1 GB
License
AGPL-3.0
Addressing
IPv4, IPv6
GitHub
69,000
Deployment~3 min
Open source & self-hosted
VPS plans

Choose a VPS plan for Vaultwarden

Blazing-fast NVMe drives and powerful processors. Take a ready-made plan or build the configuration yourself.
Minex
Perfect for personal projects and small websites.
€3.20/mo
Save €0.80 per month

  • 1 vCPU core
  • 1 GB DDR5 RAM
  • 20 GB NVMe SSD
  • Full root access
  • 1 dedicated IPv4
  • 1 TB traffic
Basex
A great balance of power and affordable price.
€4.80/mo
Save €1.20 per month

  • 2 vCPU cores
  • 2 GB DDR5 RAM
  • 40 GB NVMe SSD
  • Full root access
  • 1 dedicated IPv4
  • 2 TB traffic
Most popular
Corex
For growing applications and businesses.
€7.20/mo
Save €1.80 per month

  • 4 vCPU cores
  • 4 GB DDR5 RAM
  • 50 GB NVMe SSD
  • Full root access
  • 1 dedicated IPv4
  • Unlimited traffic
Midex
Resources for high-load projects.
€9.60/mo
Save €2.40 per month

  • 4 vCPU cores
  • 6 GB DDR5 RAM
  • 60 GB NVMe SSD
  • Full root access
  • 1 dedicated IPv4
  • Unlimited traffic
Proex
Maximum power and scalability.
€12.00/mo
Save €3.00 per month

  • 6 vCPU cores
  • 8 GB DDR5 RAM
  • 70 GB NVMe SSD
  • Full root access
  • 1 dedicated IPv4
  • Unlimited traffic
Scalex
Resources for scaling.
€16.00/mo
Save €4.00 per month

  • 6 vCPU cores
  • 10 GB DDR5 RAM
  • 150 GB NVMe SSD
  • Full root access
  • 1 dedicated IPv4
  • Unlimited traffic
Maxex
A large reserve of power.
€44.00/mo
Save €11.00 per month

  • 8 vCPU cores
  • 16 GB DDR5 RAM
  • 200 GB NVMe SSD
  • Full root access
  • 1 dedicated IPv4
  • Unlimited traffic
Apex
The top configuration.
€79.99/mo
Save €20.00 per month

  • 16 vCPU cores
  • 32 GB DDR5 RAM
  • 400 GB NVMe SSD
  • Full root access
  • 1 dedicated IPv4
  • Unlimited traffic

What you can do with Vaultwarden

Vaultwarden is an unofficial, lightweight server implementation of the Bitwarden API, written in Rust, built for people who want a password manager without handing their vault to a third-party cloud. It works with the exact same clients as Bitwarden — browser extensions, mobile apps, desktop apps and the CLI — so nothing changes on the user side, only where the data actually lives.

What sets it apart from the official Bitwarden server is footprint: a single small binary replaces a multi-container stack, and organization features that Bitwarden reserves for paid plans — unlimited collections, Send, emergency access — are unlocked for free once self-hosted. That's the whole logic behind running Vaultwarden self-hosted: a password vault is the one thing you don't want sitting on infrastructure you don't control, and a vps for Vaultwarden puts the encrypted database entirely on hardware that answers only to you.

The applications screen of the control panel with one-click install

Vaultwarden features

A server surrounded by app icons — applications running on a VPS

Beyond basic password storage, Vaultwarden replicates most of what makes Bitwarden useful for teams, not just individuals.

01

Full Bitwarden client compatibility

Works unmodified with browser extensions, mobile, desktop and CLI Bitwarden apps.

02

Organizations & collections

Share logins and secrets with a team or family with per-member access control.

03

Multiple 2FA methods

TOTP, WebAuthn/FIDO2 security keys, Duo, YubiKey OTP and email codes.

04

Bitwarden Send

Share an encrypted note or file via a link with expiry and view limits, without a shared vault.

05

Built-in admin panel

A web UI for managing users, diagnostics and server settings without touching the CLI.

06

Emergency access

Designate a trusted contact who can request vault access after a set waiting period.

07

Light resource use

The Rust binary runs comfortably on a modest Vaultwarden vps docker setup, unlike the official multi-service Bitwarden stack.

Requirements

Which server to run it on

Minimum requirements for Vaultwarden and the configuration worth starting with.
Minimum
  • CPU1 vCPU
  • Minimum RAM1 GB
  • Disk10 GB
Recommended
VPS Minex
  • CPU1 vCPU
  • Minimum RAM1 GB
  • Disk20 GB

Installation is free — you only pay for the server

Getting started

How to deploy Vaultwarden

Three steps and the app is running on your server.
Step 1
Choose a server

Pick a plan with modest RAM — Vaultwarden's Rust binary is light enough that you don't need to install Vaultwarden on vps with heavy specs just to keep a vault running.

Step 2
Pick the app

Mark Vaultwarden during setup and the Vaultwarden one click install deploys the Docker container along with the reverse proxy and domain binding automatically.

Step 3
Get your credentials

You'll receive the vault URL and the ADMIN_TOKEN for the /admin panel — use them to create your first account and lock down registrations.

Why us

Why Host Vaultwarden on Leneex

Speed, protection and support you can rely on — on every plan, with no hidden limits.
Deployment speed
When you're migrating off a cloud password manager, every hour without vault access is friction. A fast Docker deploy means your team keeps using their Bitwarden apps with almost no interruption.
Free installation
Vaultwarden's minimal footprint means you're not paying extra for compute just to run a single lightweight binary — the free setup goes straight toward server resources instead of installation overhead.
DDoS protection
Your vault's sync endpoint is reachable from every device you own, all the time — that same exposure is what makes it a target for automated abuse. DDoS mitigation keeps the login endpoint available without you managing firewall rules yourself.
Control and support
Managing an ADMIN_TOKEN, choosing between SQLite and PostgreSQL, or restoring an encrypted database backup all require real server access. Root access plus 24/7 engineers means you're not stuck if a database migration goes wrong at 2 a.m.
99.9% uptime with SLA compensation
A password manager that's down locks you out of every other account behind it. SLA-backed uptime matters more here than for most apps, because vault downtime cascades into everything else you use daily.
Flexible payment
Privacy-conscious users — the exact audience choosing a self-hosted vault over a cloud one — often prefer paying without tying a card to the account. Crypto payment fits that mindset directly.
What to choose

Vaultwarden: Self-Hosted vs Cloud — Which to Choose

We compare cost, control over your data and limits, so the choice is an informed one.
Bitwarden Cloud
Self-hosted on LeneexRecommended
Resources and limitsShared infrastructure; free tier caps organizations at 2 membersDedicated CPU/RAM, not shared with other tenants
Control and accessNo server access; support-mediated exports onlyRoot access, direct DB access (SQLite/PostgreSQL), custom domain and TLS
Feature limitsAdvanced org features, some 2FA methods and Send limits gated behind paid tiersOrganizations, Send, unlimited collections unlocked for free
ScalingScaling means upgrading to a higher per-seat planUpgrade VPS resources anytime, independent of user count
CostRecurring subscription that grows per seat (Families/Teams/Enterprise)Fixed monthly VPS cost regardless of team size
Who it fitsUsers who want zero server maintenance and are fine with a managed vaultTeams and privacy-conscious users who want full data control without per-seat fees

Self-hosted Vaultwarden vps hosting makes the most sense once you have more than a handful of users, since Bitwarden Cloud's per-seat pricing scales with your team while a VPS doesn't. For a solo user who just wants organization features unlocked for free, or a team that doesn't want vault data on someone else's servers, self-hosting is the more direct route to the same clients you already use.

Frequently Asked Questions about Vaultwarden on VPS

What people ask most about Vaultwarden and our servers.

  • Yes — export your vault from Bitwarden in its standard JSON or encrypted export format, then import it through the Vaultwarden web vault after your first login. Client apps don't need reconfiguring beyond pointing them at your new server URL.

  • Yes, the vault database lives on persistent storage separate from compute resources, so changing your VPS plan only affects CPU/RAM, not your data.

  • Yes, the one-click deployment binds your domain and issues a certificate automatically, so vault sync traffic is encrypted from the first login.

  • Vaultwarden typically needs only a few hundred MB of RAM at idle, so an entry-level VPS comfortably handles a family or small team's worth of accounts using the default SQLite database.

  • Updating the container image is your responsibility as the server owner — Leneex doesn't auto-update it for you, so you'll want to pull new Vaultwarden releases and restart the container periodically.

What's already configured

The one-click deployment installs Vaultwarden inside a Docker container using SQLite as the default database — no separate database server to set up. The container is bound to your domain with a reverse proxy and TLS certificate already in place, and it's configured to restart automatically if the server reboots.

First login

Open your assigned domain in a browser to reach the Vaultwarden web vault. By default, Vaultwarden allows anonymous account registration, so the first thing to do is create your own account directly from that screen. The admin panel lives at the /admin path of your domain and is protected separately by the ADMIN_TOKEN generated during install — use it to disable further public sign-ups once your account exists, which closes off the most common misconfiguration on a freshly deployed vault.

A few practical notes

Vaultwarden speaks the same API as Bitwarden, so any of the official Bitwarden browser extensions, mobile or desktop apps will connect once you point them at your domain instead of bitwarden.com. If you expect a larger team, PostgreSQL can replace SQLite, but that migration involves exporting existing data first.

Deploy Vaultwarden in about 3 minutes

Choose a server — we do the rest: install, configure and send you the credentials.