Go to 'SSH keys' and paste your SSH key.

Depending on the amount of users, select at least a CPX21 instance.Click 'Add Server' and select a datacenter which is closest to your users.Click 'New Project +' and create a new project.The attack surface should be as small as possible and any added complexity from other applications will introduce unnecessary uncertainty. SMTP Server (can be any free webmail service if you don't have your own server)ĭo not host Vaultwarden and other applications on the same host if not absolutely required.Control of a publicly resolvable domain.Enabling existing work arounds for this issue undermines many, if not all, security benefits of the applications design.Ĭonfigure Traefik, ModSecurity and Vaultwarden IF YOU LOOSE A USERS MASTER KEY, ALL THEIR DATA IS LOST - FOREVER. Make sure you're comfortable with these security parameters before storing critical data and passwords. In an app, browser extension or inside the web application. The decryption of the users data happens only on the endpoint either The vaultwarden serverside does (when properly configured) not store sensitive data in plain text at any give point in time. The Vaultwarden project, maintained by dani-garcia, mimics the client interfaces to be almost fully compatible with the broad range of Bitwarden clients. Vaultwarden is an alternative implementation of the Bitwarden serverside which itself is not completely open-source and hides features behind a pay-wall. In this tutorial you will learn how to install Vaultwarden via a Docker image.

Bitwarden docker image