Vaultwarden Password Manager

Key Features

• Full Bitwarden API compatibility with all official clients (desktop, mobile, browser extensions)
• Complete premium feature set including organizations, collections, and secure sharing at no cost
• WebSocket notifications for real-time synchronization across all connected devices
• Built-in administrative panel for user management and server configuration
• Two-factor authentication support with TOTP, WebAuthn, and Duo integration
• Emergency access functionality for trusted contacts and account recovery
• Lightweight Rust implementation requiring only 50MB RAM minimum
• Email invitation system for secure user onboarding and organization management

Common Use Cases

• 1Family password management with secure sharing of household accounts and subscriptions
• 2Small business credential storage with team access to shared services and applications
• 3Development team management of API keys, database credentials, and deployment secrets
• 4Privacy-focused individuals avoiding cloud-based password services
• 5Home lab enthusiasts centralizing authentication for self-hosted services
• 6Organizations requiring air-gapped or on-premises credential management
• 7Educational institutions providing password management for students and staff

Prerequisites

• Docker and Docker Compose installed on host system
• Minimum 128MB RAM available for container (50MB minimum, 128MB+ recommended)
• Available ports 8080 and 3012 on host system
• Domain name configured if enabling HTTPS and browser extension support
• SMTP server credentials if email invitations and notifications are required
• SSL certificate and reverse proxy knowledge for production HTTPS deployment

docker-compose.yml

1services: 
2  vaultwarden: 
3    image: vaultwarden/server:latest
4    container_name: vaultwarden
5    environment: 
6      - DOMAIN=${DOMAIN}
7      - ADMIN_TOKEN=${ADMIN_TOKEN}
8      - SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED}
9      - INVITATIONS_ALLOWED=true
10      - WEBSOCKET_ENABLED=true
11      - LOG_LEVEL=info
12    volumes: 
13      - vaultwarden_data:/data
14    ports: 
15      - "8080:80"
16      - "3012:3012"
17    restart: unless-stopped
18    networks: 
19      - vaultwarden-network
20
21volumes: 
22  vaultwarden_data: 
23
24networks: 
25  vaultwarden-network: 
26    driver: bridge

.env Template

1# Vaultwarden
2DOMAIN=https://vaultwarden.example.com
3ADMIN_TOKEN=your-secure-admin-token
4SIGNUPS_ALLOWED=true

Usage Notes

Quick Start

1# 1. Create the compose file
2cat > docker-compose.yml << 'EOF'
3services:
4  vaultwarden:
5    image: vaultwarden/server:latest
6    container_name: vaultwarden
7    environment:
8      - DOMAIN=${DOMAIN}
9      - ADMIN_TOKEN=${ADMIN_TOKEN}
10      - SIGNUPS_ALLOWED=${SIGNUPS_ALLOWED}
11      - INVITATIONS_ALLOWED=true
12      - WEBSOCKET_ENABLED=true
13      - LOG_LEVEL=info
14    volumes:
15      - vaultwarden_data:/data
16    ports:
17      - "8080:80"
18      - "3012:3012"
19    restart: unless-stopped
20    networks:
21      - vaultwarden-network
22
23volumes:
24  vaultwarden_data:
25
26networks:
27  vaultwarden-network:
28    driver: bridge
29EOF
30
31# 2. Create the .env file
32cat > .env << 'EOF'
33# Vaultwarden
34DOMAIN=https://vaultwarden.example.com
35ADMIN_TOKEN=your-secure-admin-token
36SIGNUPS_ALLOWED=true
37EOF
38
39# 3. Start the services
40docker compose up -d
41
42# 4. View logs
43docker compose logs -f

One-Liner

Run this command to download and set up the recipe in one step:

1curl -fsSL https://docker.recipes/api/recipes/vaultwarden-passwords/run | bash

Troubleshooting