Community-run instance. Not affiliated with, endorsed by, or operated by the official Vaultwarden project. Read disclaimer →
Open Vault →
Setup guide

From zero to a secured vault

Everything you need: create an account, connect your devices, turn on 2FA, strengthen encryption, import your old passwords, and keep a backup.

1

Create your account

Open vault.vaultwarden.net/#/signup to get started.

  • Enter your Email address and Name, then select Continue.
  • On the next screen, create a strong, unique master password. It protects the encryption keys for your vault.
  • The operators cannot reset or recover a forgotten master password. Before giving up, check other devices where you may still be signed in and able to unlock the vault, and any recovery option you set up in advance. Keep a recent encrypted export somewhere separate.
  • The Master password hint is optional. Never put the password itself in the hint.
2

Download a Bitwarden client

Vaultwarden is designed to work with most official Bitwarden clients. The upstream project describes its API implementation as nearly complete, so some features or client versions may behave differently. Install a client and test sync before relying on it.

Browser

Chrome, Firefox, Edge, Safari

Mobile

iOS and Android

Desktop

Windows, macOS, Linux

CLI

For scripts and terminals

Alternative client

Want offline-first access? Take a look at Keyguard.

Keyguard is a third-party Bitwarden-compatible client that can connect to this Vaultwarden server. After an initial online sign-in and sync, it keeps a local copy so you can view cached vault items while vaultwarden.net is temporarily offline. Offline editing is also supported, but it is a Premium feature on some distribution builds, including the Google Play Android build. Check the current licensing for the version you install. When offline editing is available, changes stay on your device and sync back when the server is reachable again.

Important: sign in and complete an initial sync while online first. Offline access is limited to data already available on your device; it does not make the server or other devices available during an outage.

Explore Keyguard ↗How offline access works ↗
3

Connect the client to this server

On the login screen, open the Accessing menu and choose self-hosted. Enter the server URL below in the popup. The exact wording varies slightly by app.

  1. Open the extension and click on the Logging in on menu on the login screen.
  2. Select self-hosted from the dropdown list.
  3. A “Self-hosted environment” window will appear. In the Server URL field, enter https://vault.vaultwarden.net.
  4. Click Save.
  5. You can now enter your email address and log in.
  1. On the login or registration screen, open the Logging in on menu.
  2. Select self-hosted.
  3. In the Server URL field, enter https://vault.vaultwarden.net.
  4. Tap Save and sign in.
  1. On the desktop login screen, open the Accessing dropdown.
  2. Choose self-hosted.
  3. In the Server URL field, enter https://vault.vaultwarden.net.
  4. Select Save and log in.

Run this once before logging in: 

bw config server https://vault.vaultwarden.net

Then log in with bw login.

Log in to Bitwarden

Email address (required)
Remember email
Continue
or
Use single sign-on
New to Bitwarden? Create account
Accessing: self-hosted

Self-hosted environment

Server URL
https://vault.vaultwarden.net
Specify the base URL of your on-premises hosted Bitwarden installation. Example: https://bitwarden.company.com
Custom environment
Save
Cancel
4

Secure your account

Two settings make a big difference. Do both on the web vault before you rely on the account.

Enable two-step login (2FA)

Go to Settings → Security → Two-step login. Choose Authenticator app, scan the QR code, and save the recovery code somewhere offline.

Bitwarden’s 2FA guide →

Review your key-derivation settings

In the web vault, open Settings → Security → Keys. Bitwarden supports PBKDF2 SHA-256 and Argon2id. Argon2id is a memory-hard alternative recommended by OWASP; the current default settings are 32 MiB of memory, 6 iterations and 4 threads. PBKDF2's current default is 600,000 iterations. Do not increase parameters blindly: stronger settings can slow sign-in and unlocking on older devices. A strong, unique master password remains the most important protection.

Bitwarden’s KDF guide →
5

Import your data & make a backup

Import from another manager

  1. Export your current passwords as CSV or Bitwarden JSON.
  2. In the vault, open Tools → Import data.
  3. Choose the matching format and upload the file.

Delete the export file after importing — it is often unencrypted.

Export a backup

  1. Open Tools → Export vault.
  2. Choose .json (password protected) so the file is encrypted.
  3. Store it offline — an encrypted USB drive, a safe, or an encrypted cloud folder.

We cannot recover your vault if you lose your master password. Backups are your safety net.

Ready to get started?

Create your account, connect a client, and turn on 2FA in under five minutes.

Create account → Visit support