Vaultwarden hosting: a password vault for your team.

Share passwords without sending them in chat. Vaultwarden works with the official Bitwarden apps, on a server of yours.

Short answer

Vaultwarden is a password vault for teams: shared collections, browser extensions, phone apps, two-factor authentication and secure sharing of single items. It is an independent server that works with the official Bitwarden apps. That server runs with us, in the Netherlands, and we look after it. It can replace 1Password or LastPass.

What you should know before you choose

Vaultwarden is an unofficial project. It is not made by Bitwarden Inc. and not affiliated with that company. It does use the official Bitwarden apps and browser extensions, and it leans on them.

The server has not had an independent security audit. If a purchasing process requires one, you need the official Bitwarden server, and we will help with that advice.

What does hold: passwords are encrypted on the device itself, before they reach the server. The server only stores encrypted vaults.

What your team does with it

Sharing

Shared collections per department or project
Permissions per collection
Sharing a single item securely with someone outside the team

Using

A browser extension that fills in login fields
Apps for iOS and Android
Generating a password when you create a new account

Protecting

Two-factor authentication on the vault
A domain name of your own for the server
Signing in through your existing accounts is an option

Facts about Vaultwarden

Licence: AGPL 3.0. Vaultwarden is a trademark of its maker and Jevana stands apart from the project. Bitwarden is a trademark of Bitwarden Inc.
Replaces: 1Password and LastPass
Apps: The official Bitwarden apps and extensions
Audit: The server has not had an independent security audit
Our part: Installation, updates, a daily backup with a copy elsewhere, and monitoring

Questions

Is Vaultwarden the same as Bitwarden?

No. Vaultwarden is a separate project that rebuilds the server side of Bitwarden and works with the official Bitwarden apps. It does not come from Bitwarden Inc., and that company offers no support for it. It is lighter than the official server and usually has enough features for a small team, but it remains different software.

Can you, as administrator, look into our passwords?

No. The vault is encrypted on the user's device with a key derived from their master password. We only see encrypted data, even when we manage the server and make a backup. The consequence is that we cannot recover a forgotten master password either. We agree on how to handle that beforehand.

Is a vault of our own safer than a paid service?

Not automatically. A paid service has a security team and audits, a server of your own has you and us. What you gain is control: the vault sits in the Netherlands, on hardware we manage, under your own domain name, and you can leave with your data. Whether that outweighs an audit is for you to decide.

How do we bring our passwords over from LastPass or 1Password?

Both can export their vault to a file, and Vaultwarden can read that file. We help with the move and agree that the export file is deleted afterwards, because it holds everything unencrypted. It is sensible to have the most important passwords renewed after the move, administrator accounts above all.

What happens if the Vaultwarden server goes down?

The apps keep an encrypted copy of the vault on the device, so you can still look up passwords, but not share or change them. We monitor the server and restore it from the daily backup if needed. For vaults that a lot depends on you can agree that a copy also sits at a second location.

Goes well with

Tell us what you run.

An introduction costs nothing. You talk straight away to one of the two people who will actually do the work.

Get in touch

or email info@jevana.systems