A password manager is the one service where "who runs the server" is a real question. Vaultwarden — a lightweight, Rust-based, Bitwarden-compatible server — lets you answer it yourself: your encrypted vault lives on a machine you control, synced to the official Bitwarden apps you already use. And because it's tiny, it runs comfortably on the cheapest dedicated-IP box we sell.
Pay in crypto, sign up with an email, and nothing on our side ties the vault to your identity.
What Vaultwarden needs
- Barely any resources. Vaultwarden is a Rust rewrite that sips RAM — Nano-IP ($8/mo — dedicated IP, 1 GB RAM, 15 GB NVMe) comfortably serves a person, a family or a small team.
- A dedicated IP, a domain and HTTPS. The Bitwarden clients require valid TLS to trust your server, and sync is inbound — so you need a dedicated-IPv4 plan. NAT plans don't take inbound web traffic.
- Backups. It's your only copy of every password. Snapshot the data volume, or add our managed-backups option.
Install with Docker + Caddy (Ubuntu 24.04)
# dedicated-IP plan, root shell
apt update && apt install -y docker.io docker-compose-v2
systemctl enable --now docker
mkdir -p /opt/vaultwarden && cd /opt/vaultwarden
cat > docker-compose.yml <<'EOF'
services:
vaultwarden:
image: vaultwarden/server:latest
restart: always
environment:
DOMAIN: "https://vault.yourdomain.com"
SIGNUPS_ALLOWED: "false" # set true only for first signup, then disable
volumes: [ ./vw-data:/data ]
ports: [ "127.0.0.1:8080:80" ]
caddy:
image: caddy:2
restart: always
ports: [ "80:80", "443:443" ]
volumes:
- ./Caddyfile:/etc/caddy/Caddyfile
- ./caddy-data:/data
EOF
cat > Caddyfile <<'EOF'
vault.yourdomain.com {
reverse_proxy vaultwarden:80
}
EOF
docker compose up -d
Point vault.yourdomain.com at your dedicated IP, open it in a browser, create your account, then set SIGNUPS_ALLOWED: "false" and docker compose up -d again to lock further registrations. Install the Bitwarden app on your devices and set the server URL to your domain.
Why EQVPS for Vaultwarden
- From $8/mo dedicated IP — the cheapest way to own your vault's home, with self-service reverse DNS and all ports open.
- EU locations (Germany, Finland) — real data-protection law, clean routes.
- No KYC, crypto payment. Email to sign up, USDC/USDT to pay.
- Root in ~60 seconds, managed-backups add-on so your one copy of everything is safe.
Comments
No comments yet. Be the first.