Vaultwarden
Hacker ApprovedRanked 4 of 21 password managers by recommenders
A lightweight, easy-to-deploy self-hosted server for Bitwarden clients that lets you own your vault data, though it depends on Bitwarden's clients and self-hosting something this critical carries risk.
A lightweight, easy-to-deploy self-hosted server for Bitwarden clients that lets you own your vault data, though it depends on Bitwarden's clients and self-hosting something this critical carries risk.
125 people gave an opinion
- recommend it
- 112
- criticize it
- 13
- approval share
- 90%
Recommended in 11 of 13 months
- November 2025: recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: not recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Owned for 3 years
Median of the 9 owners who said how long they have had it.
Each square is one year.
Why it carries the badge
- 112 people recommend itNeeds 10 or more, met.
- 8.6 recommenders for every criticNeeds 2 to 1 or better, met.
- Recommended in 11 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Quick and easy to set up
“It is surprisingly very durable and maintenance-free even for a script kiddie like me to maintain.”
Comment from 19 May 2026 in “The Quiet Renovation at Bitwarden” “it took 2 minutes to create a quadlet to run vaultwarden and a few more to configure it”
Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden” “ridiculously easy to deploy and also very lightweight while being immensely popular”
Comment from 2 May 2026 in “I Do Not Recommend Bitwarden” - Comment from 4 Sep 2026 in “Ask HN: Advice on Migrating from 1Password?”
- Comment from 24 Feb 2026 in “1Password pricing increasing 20% in March”
Keep vault off public internet
“It's a pretty painless way to keep things in sync without ever allowing Bitwarden to be accessible outside my home network.”
Comment from 23 Apr 2026 in “Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain” “By not exposing it to the wider internet. When I use a client (iPhone, browser, etc.) while on the home network, it syncs.”
Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden” “If desired, you can self-host something like Vaultwarden so that you can both keep the keys independent of third parties”
Comment from 18 Sep 2026 in “I don't like passkeys” - Comment from 12 Jan 2026 in “2026 is the Year of Self-hosting”
- Comment from 10 Oct 2026 in “Bitwarden Dual License Model”
- Comment from 14 Dec 2025 in “Poor Johnny still won't encrypt”
Works with Bitwarden clients
“As a Bitwarden (and Vaultwarden) user on Mac/iOS/Safari, Linux/Firefox and Android I have had zero issues with passkeys”
Comment from 14 Oct 2026 in “Passkeys are not a trap” “It is pretty feature-parity with normal Bitwarden, up to and including the emergency access stuff”
Comment from 19 May 2026 in “The Quiet Renovation at Bitwarden” “there are clients for Linux or Windows? …and that is where Bit/Vaultwarden comes into play.”
Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden” - Comment from 12 Oct 2026 in “Passkeys are a trap”
- Comment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”
Lightweight, runs for years trouble-free
“I have it running as a secondary thing on a 512 MB machine and don't notice it's there.”
Comment from 10 Oct 2026 in “Bitwarden Dual License Model” “ridiculously easy to deploy and also very lightweight while being immensely popular”
Comment from 2 May 2026 in “I Do Not Recommend Bitwarden” “I've been self hosting Vaultwarden for me and my wife for years without issue.”
Comment from 11 Oct 2026 in “Bitwarden Dual License Model” - Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden”
- Comment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”
- Comment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”
What people warn about
Each mark is one comment
Self-hosting critical data is risky
“now I have to run and maintain and backup a Vaultwarden server just to log into my HSA, which is absurd”
Comment from 18 Sep 2026 in “I don't like passkeys” “less like a guide on hardening Vaultwarden than a guide on why I should be skeptical about it”
Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden” “isn't something you can casually run by yourself without some careful thinking”
Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden” - Comment from 12 Jan 2026 in “2026 is the Year of Self-hosting”
- Comment from 3 Sep 2026 in “Ask HN: Advice on Migrating from 1Password?”
- Comment from 11 Oct 2026 in “Bitwarden Dual License Model”
- Comment from 11 Jan 2026 in “2026 is the Year of Self-hosting”
Relies on Bitwarden's goodwill
“Take that away and Vaultwarden is nothing more than some random back end software that can not really be trusted”
Comment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site” “Vaultwarden relies on the goodwill of Bitwarden to allow it to use its clients for compatibility.”
Comment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site” “the person behind that project now works for Bitwarden so there's some risk of a rugpull”
Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden” - Comment from 10 Oct 2026 in “Bitwarden Dual License Model”
Client app limitations
“Vaultwarden's great, but the inferior browser clients just don't make up for it.”
Comment from 2 May 2026 in “I Do Not Recommend Bitwarden” “The lack of an iOS client is the only thing making me explore alternative solutions altogether.”
Comment from 19 May 2026 in “The Quiet Renovation at Bitwarden” “simply didn't allow to search for the fields you didn't scroll yet to”
Comment from 4 May 2026 in “Microsoft Edge stores all passwords in memory in clear text, even when unused”
Other password managers people recommend
The four most recommended other password managers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
See all 21 password managers, rankedWhat people said
40 of the 143 comments that mention it, newest first. Each links to the original comment.
“As a Bitwarden (and Vaultwarden) user on Mac/iOS/Safari, Linux/Firefox and Android I have had zero issues with passkeys”
“I'm using BitWarden with a self-hosted Vaultwarden for the server-side to do that”
“I've been self hosting Vaultwarden for me and my wife for years without issue.”
“in the age of the LLM security is an arms race that I’m not going to win”
“I have it running as a secondary thing on a 512 MB machine and don't notice it's there.”
“The clients keep a local encrypted copy of the vault, so the server only needs to be up for syncing.”
“it's probably not wise to stay with it as a server long term”
“I have the ability to lock it behind a VPN so it isn't even publicly exposed.”
“now I have to run and maintain and backup a Vaultwarden server just to log into my HSA, which is absurd”
“If desired, you can self-host something like Vaultwarden so that you can both keep the keys independent of third parties”
“One of my favorite things about self-hosted Vaultwarden is that you get distributed backups for free.”
“Was able to get it setup, migrated and 1Pass sub cancelled in less than an hour.”
“I was always a bit afraid of the self-hosting (of something this critical)”
“the export feature is highly unlikely gonna be removed immediately as the free plan disappears”
“It is pretty feature-parity with normal Bitwarden, up to and including the emergency access stuff”
“The lack of an iOS client is the only thing making me explore alternative solutions altogether.”
“It is surprisingly very durable and maintenance-free even for a script kiddie like me to maintain.”
“it took 2 minutes to create a quadlet to run vaultwarden and a few more to configure it”
“less like a guide on hardening Vaultwarden than a guide on why I should be skeptical about it”
“there are clients for Linux or Windows? …and that is where Bit/Vaultwarden comes into play.”
“By not exposing it to the wider internet. When I use a client (iPhone, browser, etc.) while on the home network, it syncs.”
“Me and some friends have each been hosting vaultwarden casually for years now.”
“the person behind that project now works for Bitwarden so there's some risk of a rugpull”
“isn't something you can casually run by yourself without some careful thinking”
“I'm running Vaultwarden because while on the one hand I'd like to just pay a company to make my password problem go away”
“I have been self-hosting Vaultwarden for a few months and it has been great.”
“Take that away and Vaultwarden is nothing more than some random back end software that can not really be trusted”
“Vaultwarden relies on the goodwill of Bitwarden to allow it to use its clients for compatibility.”
“If you are using Bitwarden self hosted, you can switch it out for Vaultwarden.”
“I've been self-hosting Vaultwarden for some time, I'm pretty happy with it.”
“simply didn't allow to search for the fields you didn't scroll yet to”
“Vaultwarden's great, but the inferior browser clients just don't make up for it.”
“ridiculously easy to deploy and also very lightweight while being immensely popular”
“It's a pretty painless way to keep things in sync without ever allowing Bitwarden to be accessible outside my home network.”
“especially from anyone running Vaultwarden with Secrets Manager — I don't have one to test against.”
“basically solves it permanently. takes ~30 min to set up and you own your data.”
“I can selectively expose services on the internet (e.g. VaultWarden) without exposing my server”
“Vibe-setting up a home network server with VaultWarden is beyond reckless.”
“I also take minor issue with running Vaultwarden in this setup.”
“Even better I run vaultwarden on the cheapest AWS instance using tailscale.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.