Vaultwarden
Deploy a Bitwarden-compatible team password vault on OpenHost — lightweight, end-to-end encrypted, unlimited users.
Vaultwarden is a lightweight, Rust-based server compatible with all official Bitwarden clients (browser extensions, mobile apps, desktop, CLI). It's roughly 10× lighter than the official Bitwarden server while supporting the same feature set.
What you get
- End-to-end encrypted vault — the server never sees master passwords
- Unlimited users, organizations, and collections
- TOTP 2FA, secure notes, file attachments
- Admin panel for user management
- Works with every official Bitwarden client out of the box
Requirements
| Resource | Minimum | Included on Password Vault plan |
|---|---|---|
| RAM | 512 MB | 1 GB |
| Storage | 2 GB | 5 GB (20 GB on Plus) |
| CPU | 1 core | Shared |
Install
Deploy from the installer
In your control panel: App installer → Vaultwarden. Assign a domain (e.g.
vault.yourdomain.com). The app provisions in under a minute.Create your account
Visit
https://vault.yourdomain.comand click Create account. This first account is your vault admin.Connect Bitwarden apps
On any Bitwarden client (browser extension, mobile, desktop):
- Open Settings before logging in
- Under Self-hosted environment, enter your vault URL:
https://vault.yourdomain.com - Save and log in with your new credentials
Lock registration (recommended)
Once your team has signed up, contact support to disable open registration. This prevents strangers from creating accounts on your vault.
Admin panel
The admin panel lets you manage users, view diagnostics, and configure advanced settings. Access it at https://vault.yourdomain.com/admin using the admin token shown in your control panel.
From the admin panel you can:
- Invite users via email
- Disable/delete accounts
- View registered devices
- Monitor vault health
- Configure SMTP for email notifications
Setting up email (SMTP)
Vaultwarden needs SMTP to send:
- Account verification emails
- Organization invites
- Two-factor recovery codes
- Password hint reminders
Configure in the admin panel under SMTP Email Settings:
| Field | Example value |
|---|---|
| Host | smtp.resend.com |
| Port | 465 |
| Security | Force TLS |
| Username | resend |
| Password | Your Resend API key |
| From address | vault@yourdomain.com |
Organizations and sharing
Organizations let teams share passwords securely:
- Create an organization from any Bitwarden client
- Create collections inside it (e.g. "Engineering", "Finance", "Shared logins")
- Invite team members and assign collection access
- Shared items sync across all members' vaults in real time
Backups
Daily off-site backups are automatic. To restore:
- Panel → Backups → pick a date
- Restore the full app (files + database)
For additional safety, export your vault periodically from Settings → Export vault in any Bitwarden client (encrypted JSON recommended).
Troubleshooting
| Issue | Fix |
|---|---|
| Mobile app won't connect | Verify HTTPS is working and the URL includes https:// |
| Admin panel shows "disabled" | Check admin token in panel settings; restart the app |
| Emails not sending | Verify SMTP config in admin panel; try port 587 if 465 fails |
| 2FA lockout | Use recovery code from initial 2FA setup, or contact support for admin reset |
Security best practices
- Enable 2FA for every user (TOTP app or hardware key)
- Use a unique, strong master password (16+ characters)
- Lock registration after onboarding
- Review active sessions periodically in admin panel
- Keep one emergency recovery sheet printed and stored physically