Application Stack · password-management
Vaultwarden
Run a private password-vault backend for an individual, family or small team while continuing to use compatible Bitwarden clients.
Workflows the agent can manage
- store and sync vault items
- use Bitwarden-compatible clients
- manage users and organisations
- back up encrypted vault data
Agent operability
Editorial agent-readiness estimate: 2/5. This reflects documented interfaces and proposed workflows, not a successful installation or a support promise. Assessment date not recorded; verify upstream documentation before use.
- UI-ONLY — Primary interaction is through Bitwarden-compatible clients and Vaultwarden administration; do not treat the password vault as a general-purpose agent API
Evidence consulted
- Official repository describes Vaultwarden as an unofficial Bitwarden-compatible server and documents container-based self-hosting. [stated; https://github.com/dani-garcia/vaultwarden]
- Upstream Cargo metadata identifies the project licence as AGPL-3.0-only. [stated; https://github.com/dani-garcia/vaultwarden/blob/main/Cargo.toml]
- Upstream deployment guidance stores state under /data and documents reverse-proxy/HTTPS setup for browser and client compatibility. [stated; https://github.com/dani-garcia/vaultwarden/wiki]
Implementation notes
Deploy only with HTTPS for remote access, generate and store administrative secrets through the workspace secret path, restrict sign-ups to the intended policy, and verify backups before relying on it as the primary vault.
Licence / edition: AGPL-3.0-only Vaultwarden is an unofficial Bitwarden server implementation and is not Bitwarden's official server product.
Resources: light class — Vaultwarden is designed as a lightweight server and commonly runs as a single container with persistent /data storage. User count, attachments and database choice affect resource/storage needs; no fixed production RAM promise is recorded here. (inferred)
External prerequisites: TLS/domain configuration for remote use; tested backup destination
Security: Treat HTTPS as mandatory for any remotely reachable deployment; password-vault traffic and administration must not be exposed over plaintext transport. Back up the complete persistent data set and protect administrative secrets; a password manager is a high-impact security workload. Catalogue qualification is not a security certification; inspect current advisories, supported versions and deployment guidance before setup.