OPEN-SOURCE MIGRATION BENCHMARK
License: GPL-3.0
★ 40.9k GitHub Stars
Replace 1Password / Doppler Secrets with Self-Hosted Vaultwarden
Ultra-lightweight Rust implementation of the Bitwarden Client API—100% compatible with official Bitwarden apps Stop paying Business ($8/seat/mo) + Doppler ($18/seat/mo) ($80/mo for a 10-person team) and run Vaultwarden on a $4.50/mo Linux VPS with full data sovereignty.
10-Seat Annual Savings
+$906 / yr
vs 1Password / Doppler Secrets standard plan
Container RAM & vCPU
128 MB RAM
0.25 vCPU • Migration: Instant (1-click 1Password/Bitwarden export import)
Recommended Cloud Box
$4.50/mo VPS
Hetzner CX22 (4GB RAM / 2 vCPU)
1-to-100 Seat Total Cost of Ownership (TCO) Table
Comparing 1Password / Doppler Secrets (Business ($8/seat/mo) + Doppler ($18/seat/mo)) vs Vaultwarden on Hetzner CX22 (4GB RAM / 2 vCPU).
| Team Size | 1Password / Doppler Secrets Cost | Vaultwarden VPS | Net Annual Savings |
|---|---|---|---|
| 1 Seat (Solo) | $8.00/mo ($96/yr) | $4.50/mo (CX22) | +$42 / year |
| 5 Seats | $40.00/mo ($480/yr) | $4.50/mo (CX22) | +$426 / year |
| 10 Seats | $80.00/mo ($960/yr) | $4.50/mo (CX22) | +$906 / year |
| 25 Seats | $200.00/mo ($2,400/yr) | $4.50/mo (CX22) | +$2,346 / year |
| 50 Seats | $400.00/mo ($4,800/yr) | $4.50/mo (CX22) | +$4,746 / year |
| 100 Seats | $800.00/mo ($9,600/yr) | $4.50/mo (CX22) | +$9,546 / year |
Production Docker Compose + Caddy Auto-SSL
Copy and run docker compose up -d on any Ubuntu 24.04 server.
# Production Docker Compose: Vaultwarden (Replaces 1Password / Doppler Secrets)
services:
caddy:
image: caddy:2-alpine
restart: unless-stopped
ports:
- "80:80"
- "443:443"
volumes:
- ./Caddyfile:/etc/caddy/Caddyfile:ro
- caddy_data:/data
networks:
- stack_net
vaultwarden:
image: vaultwarden/server:latest
container_name: stack-vaultwarden
restart: unless-stopped
environment:
- "DOMAIN=https://vault.${DOMAIN:-yourdomain.com}"
- "SIGNUPS_ALLOWED=false"
- "WEBSOCKET_ENABLED=true"
volumes:
- vaultwarden_data:/data
networks:
- stack_net
networks:
stack_net:
driver: bridge
volumes:
caddy_data:
vaultwarden_data:
Caddyfile (Automatic HTTPS Reverse Proxy):
# Automatic Let's Encrypt HTTPS for Vaultwarden
vaultwarden.{$DOMAIN:yourdomain.com} {
encode zstd gzip
reverse_proxy vaultwarden:80
}
Why Teams Switch to Vaultwarden
- ✓Uses ~30MB RAM total
- ✓Works with official Bitwarden iOS, Android & Chrome extensions
- ✓Free family/organization vault sharing & TOTP
GitHub Repository
dani-garcia/vaultwarden
Official Website
github.com/dani-garcia/vaultwarden
Docker Image
vaultwarden/server:latest
Database Needed
Built-in / SQLite
1-Click Cloud VPS Hosting
Deploy Vaultwarden in 60 Seconds
Sized automatically for Vaultwarden (128MB container RAM + OS overhead).
PRODUCTION BOILERPLATE ZIP
Get All 16 Pre-Built Production Stacks + Encrypted S3 Backups
Includes pre-tuned docker-compose.yml, Caddy Auto-SSL, AES-256 encrypted nightly S3/R2 Postgres backups, and Ubuntu 24.04 UFW/Fail2ban hardening scripts.