Vaultwarden

Vaultwarden (formerly bitwarden_rs) is an alternative implementation of the Bitwarden server, written in Rust and compatible with the official Bitwarden clients (browser extensions, desktop, mobile, and CLI). It is designed for lightweight self-hosted deployments where running the official, resource-heavy Bitwarden server isn't ideal — and serves as a private alternative to hosted services like 1Password.

Yes. Vaultwarden implements essentially the full Bitwarden Client API, so the official Bitwarden browser extension, desktop, mobile, and CLI apps connect to it without modification — you just point the app's server URL at your Vaultwarden instance. The clients can't tell they're talking to Vaultwarden instead of Bitwarden's cloud.

Vaultwarden ships as one lightweight Rust binary in a single container with SQLite by default (MySQL/PostgreSQL optional), idling at roughly 40 MB RAM — versus the official server's six containers plus SQL Server. It targets individuals, families, and small organizations, and unlocks premium features like TOTP storage, Sends, and attachments without a paid license.

Yes, self-hosting is its purpose. Deploy it via official container images on ghcr.io, docker.io, or quay.io, or build the binary yourself, and pair it with a reverse proxy for HTTPS (required by the web vault and clients). It runs comfortably on a modest VPS or even a Raspberry Pi, and comes with an admin panel for configuration.

Vaultwarden covers the Bitwarden API surface: personal and Organization vaults, collections, password sharing, groups, roles, policies, Send, attachments, website icons, a personal API key, two-factor authentication (TOTP, email, Duo, YubiKey, FIDO2/WebAuthn), Emergency Access, username generator with SimpleLogin/AnonAddy/Firefox Relay, and live sync. Note it does not include enterprise SSO (SAML/OIDC) or directory sync.