Managed Vaultwarden Hosting — production-ready from $15 a month
Lightweight Bitwarden-compatible password manager server. Deployed on your own dedicated instance in AWS, Azure, or GCP, kept patched, backed up, and monitored by ManageStacks — standard Vaultwarden, no lock-in.
Vaultwarden is a lightweight, Rust-based server compatible with all official Bitwarden clients, providing self-hosted password management with organisations, 2FA, file attachments, and Bitwarden Send. ManageStacks deploys Vaultwarden with encrypted backups and managed SSL.
What does Vaultwarden do, and why do teams deploy it?
Vaultwarden (formerly bitwarden_rs) is an unofficial Bitwarden-compatible server written in Rust that implements the Bitwarden API. It works seamlessly with all official Bitwarden clients — browser extensions, desktop apps, mobile apps, and the CLI — while consuming a fraction of the resources that the official .NET server requires.
Despite its small footprint, Vaultwarden supports the full Bitwarden feature set including organisations, collections, password sharing, emergency access, TOTP 2FA, file attachments, Bitwarden Send (encrypted file and text sharing), and admin panel management. It stores credentials in an encrypted SQLite or PostgreSQL database.
ManageStacks deploys Vaultwarden with PostgreSQL for production-grade durability, automated daily encrypted backups, managed TLS certificates, and SMTP for email-based account recovery. Your team's secrets never leave your cloud perimeter.
- Full compatibility with all official Bitwarden clients
- Organisations, collections, and secure password sharing
- TOTP two-factor authentication and U2F/WebAuthn support
- Bitwarden Send for encrypted file and text sharing
- Emergency access and account recovery
- Admin panel for user and organisation management
Lightweight Bitwarden-compatible password manager server
Vaultwarden as a self-hosted alternative to LastPass, 1Password and Bitwarden Cloud
Instead of paying per-seat fees to a SaaS vendor, teams self-host Vaultwarden to keep full control of their data and infrastructure. ManageStacks removes the operational overhead — you get the cost and privacy benefits of open source with the reliability of a managed platform.
What does managed Vaultwarden hosting cost?
Flat per-app pricing, in your chosen AWS, Azure, or GCP region. No per-user pricing — a busy deployment costs the same as a quiet one.
Starter
Staging and internal tools. Dedicated instance, TLS, daily backups, managed upgrades.
Standard
Production workloads. Adds monitoring, staging environment, region choice, priority support.
Business
High-traffic and compliance workloads. Adds a high-availability replica and same-day support.
24×7 SRE retainer
Round-the-clock on-call across every hosted application, for teams that need a pager answered at 3am.
When is self-hosting Vaultwarden the right answer instead?
“Managed hosting is not always the correct call.”
Self-host when a platform team already runs the infrastructure and on-call rotation to operate Vaultwarden at genuinely low marginal cost. Self-host when compliance requires an air-gapped or on-premises deployment that no hosted option can satisfy. And self-host when the deployment depends on heavy customisation with a fast internal build-deploy loop, because an internal release process will beat any managed change process.
For everyone else — teams whose engineers have better things to do than shepherd upgrades — managed hosting is cheaper than the hours it replaces.
Which cloud should Vaultwarden run on — AWS, Azure or GCP?
For most workloads, the choice of cloud matters less than proximity: run Vaultwarden in the same cloud and region as the applications and data it talks to, because every request between them adds a round trip. The underlying compute performs equivalently across AWS, Azure, and GCP.
In practice, an existing cloud footprint decides it. All plans support all three clouds, and moving regions later is a scheduled migration, not a rebuild.
Deepest managed-service catalog, default when there's no existing footprint
Best fit for teams already on Microsoft 365 or Entra ID
Strongest for data/analytics-adjacent workloads
Every plan supports AWS, Azure, and GCP — region choice included.
Common questions about Vaultwarden on ManageStacks
Is Vaultwarden compatible with Bitwarden browser extensions and apps?
Yes. Vaultwarden implements the full Bitwarden API, so all official Bitwarden clients — browser extensions, desktop, mobile, and CLI — work without modification. You just point them at your ManageStacks-hosted Vaultwarden URL.
How secure is Vaultwarden on ManageStacks?
Vaultwarden uses the same end-to-end encryption as Bitwarden — your master password never leaves the client. ManageStacks adds managed TLS, encrypted database backups, and network isolation. Your vault data stays in your chosen cloud region.
Can I migrate from Bitwarden Cloud or LastPass to Vaultwarden?
Yes. Bitwarden clients support standard JSON and CSV export/import. You can export from Bitwarden Cloud, LastPass, 1Password, or any other manager and import directly into your Vaultwarden instance.
Does ManageStacks configure Vaultwarden email notifications?
Yes. ManageStacks provisions SMTP so that account verification, password hints, emergency access notifications, and organisation invites work out of the box.
Other devtools tools on ManageStacks
Run Vaultwarden without carrying the pager
Subscribe through your AWS, Azure, or GCP marketplace. We handle provisioning, SSL, monitoring, backups, updates, and security. From $15/mo.