TL;DR: Running Vaultwarden in 5 minutes

If you are looking for a rapid setup, here are the key takeaways for running Vaultwarden:

• Vaultwarden is a lightweight, Rust-based backend compatible with official Bitwarden clients.
• It requires minimal system resources, making it ideal for cheap VPS hosting.
• Provides all premium Bitwarden features for free, strictly under your control.

To spin it up instantly via Docker, connect to your server and run:

sudo apt update && sudo apt install docker.io docker-compose -y
sudo docker run -d --name vaultwarden -v /vw-data/:/data/ -p 80:80 vaultwarden/server:latest

Recommended Starter Offer: Netcup VPS 1000 G12 Use the following coupons to get a massive discount on your initial setup at netcup.com:

1. Free Month VPS 1000 G12: 5799nc17718015265
2. Alternative VPS 1000 G12 Coupon: 5799nc17718015264
3. General 5 Euro Discount: 36nc17718015542

Introduction

In an era where data breaches are increasingly common, relying on third-party password managers can be a risky compromise. Taking control of your digital identity by self-hosting a password manager is the ultimate step toward complete data privacy. However, enterprise-grade solutions are often resource-heavy and expensive to run.

This is where combining a highly optimized password backend with affordable European hosting creates the perfect synergy. By self-hosting Vaultwarden on a Netcup VPS, you achieve enterprise-level security, complete data sovereignty, and robust performance at a fraction of the traditional cost. This article covers everything you need to know to get your private vault running securely.

What is Vaultwarden?

Vaultwarden is an open-source, alternative implementation of the Bitwarden server API written entirely in Rust. Originally known as Bitwarden_RS, it was built to solve a major problem with the official Bitwarden server: the official version relies on a heavy stack of MSSQL databases and heavily consuming .NET microservices, requiring significant RAM and CPU.

Vaultwarden is designed specifically for self-hosted password management on systems with limited resources. It perfectly mimics the official API, meaning you can use the exact same mobile apps, browser extensions, and desktop applications provided by the official developers, but connected to your private server. Despite its low footprint, it supports advanced features like organization sharing, file attachments, and two-factor authentication via YubiKey or authenticator apps.

How to use the Vaultwarden

Using Vaultwarden is exceptionally straightforward once your backend is configured. Because it acts as a drop-in replacement for the official server, the user experience is identical to the commercial offering.

First, you interact with the built-in Web Vault. By navigating to your server's domain name, you can register your initial administrator account, organize your secure notes, manage passwords, and configure two-factor authentication.

Second, you connect your client devices. Whether you are using a mobile application or a browser extension, simply open the login screen, click the settings gear icon, and enter your custom server URL in the "Self-hosted environment" field. From that point onward, every time you save a new password, sync your vault, or autofill a login form, the client securely communicates directly with your Netcup VPS using end-to-end encryption. Your master password never leaves your device, meaning even if your server was compromised, your data remains fully encrypted.

Quick Start Guide

Follow this step-by-step guide to successfully deploy Vaultwarden securely.

Step 1: Provision your Server and Domain Purchase a reliable server from netcup.com. Once your server is provisioned, point a domain or subdomain A-record (e.g., vault.yourdomain.com) to your server's public IP address.

Step 2: Connect via SSH and Update Access your server using an SSH client and ensure all system packages are up to date.

ssh root@your_server_ip
sudo apt update && sudo apt upgrade -y

Step 3: Install Docker Vaultwarden is best deployed as a Docker container, keeping dependencies isolated.

sudo apt install docker.io -y
sudo systemctl enable --now docker

Step 4: Deploy Vaultwarden Create a directory to store your persistent data, preventing data loss when the container updates.

mkdir -p /opt/vaultwarden
cd /opt/vaultwarden

Run the container on an internal port (e.g., 8080) to prepare it for a reverse proxy.

sudo docker run -d --name vaultwarden \
  -e WEBSOCKET_ENABLED=true \
  -v /opt/vaultwarden/data/:/data/ \
  -p 127.0.0.1:8080:80 \
  -p 127.0.0.1:3012:3012 \
  vaultwarden/server:latest

Step 5: Setup a Reverse Proxy with HTTPS Vaultwarden strictly requires HTTPS to function securely. Install a lightweight reverse proxy like Caddy to handle SSL certificates automatically.

sudo apt install -y debian-keyring debian-archive-keyring apt-transport-https
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list
sudo apt update
sudo apt install caddy -y

Edit the Caddyfile located at /etc/caddy/Caddyfile and add your domain:

vault.yourdomain.com {
    reverse_proxy 127.0.0.1:8080
}

Restart Caddy using sudo systemctl restart caddy. You can now navigate to your domain, register your master user, and begin using your fully functional, secure password vault!

Choosing the Right Netcup Server for Vaultwarden cheap hosting

Because Vaultwarden is incredibly optimized, you do not need an expensive dedicated server. However, having a stable environment with good uptime and fast disks is critical for a password manager. Here is a comparison of ideal Netcup configurations.

Option 1: VPS 1000 G12 (The Budget Champion)

The VPS 1000 G12 is more than sufficient for a family or small team running Vaultwarden. It offers generous RAM and fast SSD storage, guaranteeing immediate database reads when syncing your mobile apps.

• Features: Excellent cost-to-performance ratio, sufficient resources for Vaultwarden and a reverse proxy, unmetered traffic.
• Discount Coupons:
  • Free Month: 5799nc17718015263
  • Free Month Alternative: 5799nc17718015262
  • 5 Euros Off: 36nc17718015541

Option 2: VPS 2000 G12 (The Multi-Tasker)

If you plan to self-host Vaultwarden alongside other services like Nextcloud or a personal blog, upgrading to the VPS 2000 G12 gives you the extra CPU cores and RAM headroom needed to keep everything running smoothly.

• Features: More CPU cores, doubled RAM capacity, optimal for running multiple Docker containers alongside your password manager.
• Discount Coupons:
  • Free Month: 5800nc17718015234
  • Free Month Alternative: 5800nc17718015233
  • 5 Euros Off: 36nc17718015540

Option 3: Root Server 1000 G12 (The Enterprise Choice)

For larger teams, businesses, or extreme enthusiasts, Netcup Root Servers offer dedicated, guaranteed CPU cores. This ensures your cryptography operations and database backups execute without any "noisy neighbor" interference.

• Features: Dedicated CPU cores, massive NVMe storage performance, superior stability for business-critical password infrastructure.
• Discount Coupons:
  • Free Month: 5159nc17718015445
  • Free Month Alternative: 5159nc17718015444
  • 5 Euros Off: 36nc17718015549

Conclusion

Migrating your sensitive credentials to a self-hosted Vaultwarden instance is a highly rewarding project that maximizes your privacy while eliminating subscription fees. Thanks to the Rust-based architecture, the resource requirements are kept incredibly low, making cheap VPS hosting a viable and performant option.

By pairing this powerful software with a reliable Netcup VPS, you ensure 24/7 uptime, incredibly fast sync times, and data sovereignty over your digital life. With the included step-by-step guide and exclusive discount coupons provided above, spinning up your secure environment on netcup.com is both affordable and effortless. Take the final step toward digital independence today!