Why (and how) to self-host your password manager

A password manager is the single most valuable account you have — it holds the keys to everything else. That makes it an unusual candidate for outsourcing, because a compromise there is a compromise everywhere.

**How self-hosting works.** Vaultwarden is a lightweight, Bitwarden-compatible server. You run it on your own VPS, and you point the official Bitwarden apps at your own URL. The clients are unchanged; only the server is yours.

**Why it is safer.** Your vault is encrypted with a key derived from your master password. The server stores ciphertext it cannot read. When you self-host, no company holds even that ciphertext — only you can see your data.

**The one rule you must never break: back up the database.** Your entire vault lives in a small database file. Back it up regularly and keep a copy somewhere else. Losing this file plus losing a device means losing your vault.

**Practical setup notes.** Use a strong master password — server-side encryption cannot protect a weak one. Enable registration only long enough to create your account, then turn it off so nobody else can sign up. Force HTTPS, because modern browsers and the Bitwarden clients require it.

Vaultwarden is famously light: it idles in a few dozen megabytes of RAM, so a small VPS is plenty. The payoff is that the service holding your most sensitive data is one you control end to end.