Bitwarden-compatible password manager server
CIS Level 1 hardened Ubuntu 24.04 LTS image by Lynxroute · unique credentials at first boot · CVE-scanned · SBOM and CIS report inside
| Cloud | Version | Software price | Last build | |
|---|---|---|---|---|
| AWS Marketplace EC2 AMI · all commercial regions | 1.37.4 | $0.03/hr Recommended instance: t3.micro · 5-day free trial | 2026-10-23 | Listing ↗ |
| Azure Marketplace VM image · plan payg-gen2 · Gen2 | 1.37.3 | $0.028/vCPU/hr Recommended VM: Standard_D2s_v3 | 2026-09-17 | Listing ↗ |
Software price only; cloud infrastructure is billed separately by the provider. Prices in USD.
| Base OS | Ubuntu 24.04 LTS |
| Hardening | CIS Level 1, Ubuntu 24.04 LTS (tailored) |
| License | AGPL-3.0 |
| Upstream | Daniel Garcia |
| Machine-readable | product.json · catalog.json |
Vaultwarden is a lightweight self-hosted password manager server written in Rust - an unofficial community reimplementation of the Bitwarden client API. It supports the full Bitwarden self-hosted feature set (vault items, secure notes, attachments, TOTP, FIDO2/U2F, organisations, collections, sends, emergency access, password breach checks) without requiring the full official server stack of MSSQL, Identity Server and multiple .NET microservices. The single Rust binary plus a bundled web vault (Bitwarden's GPL-3.0 web client) serves all official Bitwarden desktop, mobile and browser-extension clients on Windows, macOS, Linux, Android and iOS. Persists vault data and metadata in SQLite by default (PostgreSQL and MySQL optional). AGPL-3.0 license - practical choice for small and medium teams that want a self-hosted vault without the operational footprint of the full Bitwarden server.
Security hardening:
OS hardening (CIS Level 1):
Compliance artifacts:
Credentials are generated at first boot and written to /root/vaultwarden-credentials.txt.
# subscribe once on the AWS Marketplace listing, then:
aws ec2 run-instances \
--image-id resolve:ssm:/aws/service/marketplace/prod-qj6ftlmz3qu3q/latest \
--instance-type t3.micro --key-name my-key --security-group-ids sg-xxxxxxxx# accept the plan terms once, then:
az vm image terms accept --publisher lynxroute --offer vaultwarden --plan payg-gen2
az vm create -g my-rg -n vaultwarden --size Standard_D2s_v3 \
--image lynxroute:vaultwarden:payg-gen2:latest --admin-username azureuser --generate-ssh-keys
The most recent release with notes; the full release history is in product.json.