EQVPS

VPS for Vaultwarden (self-hosted password manager)

Self-host Vaultwarden — a lightweight Bitwarden-compatible password manager — on your own VPS. Your vault, your server, your keys. Crypto payment, no KYC. From $8/mo.

A password manager is the one service where "who runs the server" is a real question. Vaultwarden — a lightweight, Rust-based, Bitwarden-compatible server — lets you answer it yourself: your encrypted vault lives on a machine you control, synced to the official Bitwarden apps you already use. And because it's tiny, it runs comfortably on the cheapest dedicated-IP box we sell.

Pay in crypto, sign up with an email, and nothing on our side ties the vault to your identity.

What Vaultwarden needs

Install with Docker + Caddy (Ubuntu 24.04)

# dedicated-IP plan, root shell
apt update && apt install -y docker.io docker-compose-v2
systemctl enable --now docker

mkdir -p /opt/vaultwarden && cd /opt/vaultwarden
cat > docker-compose.yml <<'EOF'
services:
  vaultwarden:
    image: vaultwarden/server:latest
    restart: always
    environment:
      DOMAIN: "https://vault.yourdomain.com"
      SIGNUPS_ALLOWED: "false"   # set true only for first signup, then disable
    volumes: [ ./vw-data:/data ]
    ports: [ "127.0.0.1:8080:80" ]

  caddy:
    image: caddy:2
    restart: always
    ports: [ "80:80", "443:443" ]
    volumes:
      - ./Caddyfile:/etc/caddy/Caddyfile
      - ./caddy-data:/data
EOF

cat > Caddyfile <<'EOF'
vault.yourdomain.com {
  reverse_proxy vaultwarden:80
}
EOF

docker compose up -d

Point vault.yourdomain.com at your dedicated IP, open it in a browser, create your account, then set SIGNUPS_ALLOWED: "false" and docker compose up -d again to lock further registrations. Install the Bitwarden app on your devices and set the server URL to your domain.

Why EQVPS for Vaultwarden

Full step-by-step setup guide →

Ready to deploy? Pay with crypto, no KYC — live in about a minute.

Deploy now →

FAQ

Which plan does Vaultwarden need?

Vaultwarden is famously light — it's a Rust rewrite of the Bitwarden server that runs happily in well under 1 GB of RAM. Nano-IP ($8/mo — dedicated IP, 1 GB RAM) is enough for a person, a family or a small team. You need a dedicated IP for a domain, HTTPS and inbound sync.

How do I install Vaultwarden?

Run the official container with Docker, put a reverse proxy (Caddy or Nginx) in front for automatic HTTPS, point a domain at your dedicated IP, and open the Bitwarden apps at your URL. Copy-paste steps are below; root in about a minute.

Do I need a dedicated IP?

Yes. A password manager needs a domain and valid HTTPS so the Bitwarden clients trust it, plus inbound sync. That means a dedicated-IPv4 plan (from $8/mo). Our NAT plans don't accept inbound web traffic.

Is self-hosting my vault safe?

Your vault is end-to-end encrypted with your master password before it ever reaches the server, exactly as with Bitwarden. Self-hosting means the encrypted blob lives on a machine you control instead of someone else's cloud. Keep the server updated and take backups (a managed-backups add-on is available).

Do you ask for ID or a card?

No. Email to register, USDC or USDT to pay. No documents, no card, no KYC.

Comments

No comments yet. Be the first.

Leave a comment

Comments are moderated before they appear.