Is Vaultwarden Secure? A Hardening Pass
Vaultwarden encrypts every vault item in the client, so the server holds no plaintext. The real risks are your admin token and your backup file.
Filtering by topic #vaultwarden · clear
Vaultwarden encrypts every vault item in the client, so the server holds no plaintext. The real risks are your admin token and your backup file.
Copy a live Vaultwarden vault with sqlite3 .backup, keep the attachments, config.json and rsa_key files, then prove the restore works before you need it.
Bitwarden's own server wants a dozen containers and 2 GB of RAM. Vaultwarden serves the same API in one. Here is which one belongs on your VPS.
Self-host a Bitwarden-compatible password manager with Vaultwarden and Docker on a VPS: HTTPS-first, admin token, Fail2ban, tested backups.