Stacks / Auth
Easy
Vaultwarden
Bitwarden-compatible password vault you host. LastPass and 1Password without the seat.
The problem
LastPass and 1Password sell a vault as a subscription. Vaultwarden speaks the Bitwarden client protocol, runs in one container, and stores the ciphertext on your volume.
Replaces
LastPass / 1Password
Estimated SaaS saved
$1,200
per year, small team, before lock-in
Deploy on RailwayPlaceholder: Vaultwarden + a /data volume. Put it behind Tinyauth or the built-in admin token. HTTPS only.
The stack
- Vaultwarden
Unofficial Bitwarden-compatible server
Cost table
| You stop paying | Typical / year | Self-host instead |
|---|---|---|
| 1Password / LastPass team seats | $1,200 | Vaultwarden on a volume |
Agent setup prompt
Replace LastPass or 1Password with Vaultwarden. - One service, persist /data. DOMAIN must be the public HTTPS URL. - Create the first org, invite the team, import a Bitwarden/LastPass CSV. - Disable public signups. Document backup of the volume. This holds secrets — treat the volume like production.
Also as markdown: /stacks/vaultwarden-passwords.md
FAQ
- Is Vaultwarden official Bitwarden?
- No. It is a compatible server. Official Bitwarden can also be self-hosted; Vaultwarden is the small box. Clients are the official Bitwarden apps.