# Vaultwarden

Bitwarden-compatible password vault you host. LastPass and 1Password without the seat.

**Replaces:** LastPass / 1Password

**Tier:** Easy

## Problem

LastPass and 1Password sell a vault as a subscription. Vaultwarden speaks the Bitwarden client protocol, runs in one container, and stores the ciphertext on your volume.

## Stack

- [Vaultwarden](https://github.com/dani-garcia/vaultwarden) — Unofficial Bitwarden-compatible server

## Estimated SaaS cost saved

| You stop paying | Typical / year | Self-host instead |
|---|---:|---|
| 1Password / LastPass team seats | $1,200 | Vaultwarden on a volume |

**About $1,200 / year** on a small team, before you count lock-in.

## Deploy on Railway

Placeholder: Vaultwarden + a /data volume. Put it behind Tinyauth or the built-in admin token. HTTPS only.

## AGENT_PROMPT

```
Replace LastPass or 1Password with Vaultwarden.

- One service, persist /data. DOMAIN must be the public HTTPS URL.
- Create the first org, invite the team, import a Bitwarden/LastPass CSV.
- Disable public signups. Document backup of the volume. This holds secrets — treat the volume like production.
```

## FAQ

### Is Vaultwarden official Bitwarden?

No. It is a compatible server. Official Bitwarden can also be self-hosted; Vaultwarden is the small box. Clients are the official Bitwarden apps.

Source: https://c17.io/stacks/vaultwarden-passwords