Hacker ApprovedDepartments

Vaultwarden

Hacker Approved

Ranked 4 of 21 password managers by recommenders

A lightweight, easy-to-deploy self-hosted server for Bitwarden clients that lets you own your vault data, though it depends on Bitwarden's clients and self-hosting something this critical carries risk.

A lightweight, easy-to-deploy self-hosted server for Bitwarden clients that lets you own your vault data, though it depends on Bitwarden's clients and self-hosting something this critical carries risk.

125 people gave an opinion

recommend it
112
criticize it
13
approval share
90%
Each figure is one person. RecommendsCriticizes

Recommended in 11 of 13 months

  1. November 2025: recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: not recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Owned for 3 years

Median of the 9 owners who said how long they have had it.

Each square is one year.

Why it carries the badge

  • 112 people recommend itNeeds 10 or more, met.
  • 8.6 recommenders for every criticNeeds 2 to 1 or better, met.
  • Recommended in 11 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Quick and easy to set up

    “It is surprisingly very durable and maintenance-free even for a script kiddie like me to maintain.”

    Comment from 19 May 2026 in “The Quiet Renovation at Bitwarden”

    “it took 2 minutes to create a quadlet to run vaultwarden and a few more to configure it”

    Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

    “ridiculously easy to deploy and also very lightweight while being immensely popular”

    Comment from 2 May 2026 in “I Do Not Recommend Bitwarden”
  • Keep vault off public internet

    “It's a pretty painless way to keep things in sync without ever allowing Bitwarden to be accessible outside my home network.”

    Comment from 23 Apr 2026 in “Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain”

    “By not exposing it to the wider internet. When I use a client (iPhone, browser, etc.) while on the home network, it syncs.”

    Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

    “If desired, you can self-host something like Vaultwarden so that you can both keep the keys independent of third parties”

    Comment from 18 Sep 2026 in “I don't like passkeys”
  • Works with Bitwarden clients

    “As a Bitwarden (and Vaultwarden) user on Mac/iOS/Safari, Linux/Firefox and Android I have had zero issues with passkeys”

    Comment from 14 Oct 2026 in “Passkeys are not a trap”

    “It is pretty feature-parity with normal Bitwarden, up to and including the emergency access stuff”

    Comment from 19 May 2026 in “The Quiet Renovation at Bitwarden”

    “there are clients for Linux or Windows? …and that is where Bit/Vaultwarden comes into play.”

    Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden”
  • Lightweight, runs for years trouble-free

    “I have it running as a secondary thing on a 512 MB machine and don't notice it's there.”

    Comment from 10 Oct 2026 in “Bitwarden Dual License Model”

    “ridiculously easy to deploy and also very lightweight while being immensely popular”

    Comment from 2 May 2026 in “I Do Not Recommend Bitwarden”

    “I've been self hosting Vaultwarden for me and my wife for years without issue.”

    Comment from 11 Oct 2026 in “Bitwarden Dual License Model”

What people warn about

Each mark is one comment

  • Self-hosting critical data is risky

    “now I have to run and maintain and backup a Vaultwarden server just to log into my HSA, which is absurd”

    Comment from 18 Sep 2026 in “I don't like passkeys”

    “less like a guide on hardening Vaultwarden than a guide on why I should be skeptical about it”

    Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

    “isn't something you can casually run by yourself without some careful thinking”

    Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden”
  • Relies on Bitwarden's goodwill

    “Take that away and Vaultwarden is nothing more than some random back end software that can not really be trusted”

    Comment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

    “Vaultwarden relies on the goodwill of Bitwarden to allow it to use its clients for compatibility.”

    Comment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

    “the person behind that project now works for Bitwarden so there's some risk of a rugpull”

    Comment from 18 May 2026 in “The Quiet Renovation at Bitwarden”
  • Client app limitations

    “Vaultwarden's great, but the inferior browser clients just don't make up for it.”

    Comment from 2 May 2026 in “I Do Not Recommend Bitwarden”

    “The lack of an iOS client is the only thing making me explore alternative solutions altogether.”

    Comment from 19 May 2026 in “The Quiet Renovation at Bitwarden”

    “simply didn't allow to search for the fields you didn't scroll yet to”

    Comment from 4 May 2026 in “Microsoft Edge stores all passwords in memory in clear text, even when unused”

Other password managers people recommend

The four most recommended other password managers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

Vaultwarden compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Bitwarden27821357%126.5 yrs23 owners—
1Password23817957%1215 yrs28 owners—
KeePassXC1313878%125 yrs5 ownersApproved
VaultwardenThis page1121390%113 yrs9 ownersApproved
KeePass1003276%1210 yrs10 ownersApproved
See all 21 password managers, ranked

What people said

40 of the 143 comments that mention it, newest first. Each links to the original comment.

“As a Bitwarden (and Vaultwarden) user on Mac/iOS/Safari, Linux/Firefox and Android I have had zero issues with passkeys”

RecommendsComment from 14 Oct 2026 in “Passkeys are not a trap”

“I'm using BitWarden with a self-hosted Vaultwarden for the server-side to do that”

RecommendsComment from 12 Oct 2026 in “Passkeys are a trap”

“I've been self hosting Vaultwarden for me and my wife for years without issue.”

RecommendsComment from 11 Oct 2026 in “Bitwarden Dual License Model”

“in the age of the LLM security is an arms race that I’m not going to win”

CriticizesComment from 11 Oct 2026 in “Bitwarden Dual License Model”

“I have it running as a secondary thing on a 512 MB machine and don't notice it's there.”

RecommendsComment from 10 Oct 2026 in “Bitwarden Dual License Model”

“The clients keep a local encrypted copy of the vault, so the server only needs to be up for syncing.”

RecommendsComment from 10 Oct 2026 in “Bitwarden Dual License Model”

“it's probably not wise to stay with it as a server long term”

MixedComment from 10 Oct 2026 in “Bitwarden Dual License Model”

“I have the ability to lock it behind a VPN so it isn't even publicly exposed.”

RecommendsComment from 10 Oct 2026 in “Bitwarden Dual License Model”

“now I have to run and maintain and backup a Vaultwarden server just to log into my HSA, which is absurd”

CriticizesComment from 18 Sep 2026 in “I don't like passkeys”

“If desired, you can self-host something like Vaultwarden so that you can both keep the keys independent of third parties”

RecommendsComment from 18 Sep 2026 in “I don't like passkeys”

“One of my favorite things about self-hosted Vaultwarden is that you get distributed backups for free.”

RecommendsComment from 17 Sep 2026 in “Ask HN: How to recover Google auth after phone stolen?”

“Was able to get it setup, migrated and 1Pass sub cancelled in less than an hour.”

RecommendsComment from 4 Sep 2026 in “Ask HN: Advice on Migrating from 1Password?”

“I was always a bit afraid of the self-hosting (of something this critical)”

CriticizesComment from 3 Sep 2026 in “Ask HN: Advice on Migrating from 1Password?”

“the export feature is highly unlikely gonna be removed immediately as the free plan disappears”

RecommendsComment from 21 May 2026 in “Get your passwords out of Bitwarden while you still can”

“It is pretty feature-parity with normal Bitwarden, up to and including the emergency access stuff”

RecommendsComment from 19 May 2026 in “The Quiet Renovation at Bitwarden”

“The lack of an iOS client is the only thing making me explore alternative solutions altogether.”

MixedComment from 19 May 2026 in “The Quiet Renovation at Bitwarden”

“It is surprisingly very durable and maintenance-free even for a script kiddie like me to maintain.”

RecommendsComment from 19 May 2026 in “The Quiet Renovation at Bitwarden”

“it took 2 minutes to create a quadlet to run vaultwarden and a few more to configure it”

RecommendsComment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

“less like a guide on hardening Vaultwarden than a guide on why I should be skeptical about it”

CriticizesComment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

“there are clients for Linux or Windows? …and that is where Bit/Vaultwarden comes into play.”

RecommendsComment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

“By not exposing it to the wider internet. When I use a client (iPhone, browser, etc.) while on the home network, it syncs.”

RecommendsComment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

“Me and some friends have each been hosting vaultwarden casually for years now.”

RecommendsComment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

“the person behind that project now works for Bitwarden so there's some risk of a rugpull”

CriticizesComment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

“isn't something you can casually run by yourself without some careful thinking”

MixedComment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

“I'm running Vaultwarden because while on the one hand I'd like to just pay a company to make my password problem go away”

MixedComment from 18 May 2026 in “The Quiet Renovation at Bitwarden”

“I have been self-hosting Vaultwarden for a few months and it has been great.”

RecommendsComment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

“Take that away and Vaultwarden is nothing more than some random back end software that can not really be trusted”

CriticizesComment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

“Vaultwarden relies on the goodwill of Bitwarden to allow it to use its clients for compatibility.”

MixedComment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

“If you are using Bitwarden self hosted, you can switch it out for Vaultwarden.”

RecommendsComment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

“I've been self-hosting Vaultwarden for some time, I'm pretty happy with it.”

RecommendsComment from 15 May 2026 in “Bitwarden scrubs 'Always free' and 'Inclusion' values from its site”

“simply didn't allow to search for the fields you didn't scroll yet to”

CriticizesComment from 4 May 2026 in “Microsoft Edge stores all passwords in memory in clear text, even when unused”

“Vaultwarden's great, but the inferior browser clients just don't make up for it.”

RecommendsComment from 2 May 2026 in “I Do Not Recommend Bitwarden”

“ridiculously easy to deploy and also very lightweight while being immensely popular”

RecommendsComment from 2 May 2026 in “I Do Not Recommend Bitwarden”

“It's a pretty painless way to keep things in sync without ever allowing Bitwarden to be accessible outside my home network.”

RecommendsComment from 23 Apr 2026 in “Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain”

“especially from anyone running Vaultwarden with Secrets Manager — I don't have one to test against.”

MixedComment from 15 Apr 2026 in “Bws-MCP-server – giving AI agents a controlled path to Bitwarden secrets”

“basically solves it permanently. takes ~30 min to set up and you own your data.”

RecommendsComment from 24 Feb 2026 in “1Password pricing increasing 20% in March”

“I can selectively expose services on the internet (e.g. VaultWarden) without exposing my server”

MixedComment from 12 Jan 2026 in “2026 is the Year of Self-hosting”

“Vibe-setting up a home network server with VaultWarden is beyond reckless.”

CriticizesComment from 12 Jan 2026 in “2026 is the Year of Self-hosting”

“I also take minor issue with running Vaultwarden in this setup.”

CriticizesComment from 11 Jan 2026 in “2026 is the Year of Self-hosting”

“Even better I run vaultwarden on the cheapest AWS instance using tailscale.”

RecommendsComment from 14 Dec 2025 in “Poor Johnny still won't encrypt”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.