Here's a question most people never ask: when you save a password, who else gets a copy?

With Bitwarden's official cloud, the answer is Bitwarden's servers. With Vaultwarden — the lightweight, self-hosted twin — the answer is only you. Same apps, same browser extensions, same encryption. Different landlord.

Let's compare them honestly, beginner to beginner.

They use the same client apps

This is the part that surprises people. Vaultwarden is an unofficial server that speaks Bitwarden's language. So you install the normal Bitwarden app on your phone, point it at your own server address, and everything just works. No weird forks. No half-broken extensions.

That means switching costs are tiny. You're not learning a new tool — you're changing where the data lives.

Bitwarden Cloud: easy, polished, hosted

Good for: people who want zero maintenance.

  • Setup takes two minutes.
  • Free tier is genuinely usable.
  • Backups, uptime, and security patches are someone else's job.
  • Your encrypted vault sits on their servers.

The catch: even though your vault is encrypted before it leaves your device, you're still trusting a company to stay honest, stay funded, and stay un-breached. Encryption protects the contents — but metadata (when you log in, from where) still lives on their side.

Vaultwarden: tiny, free, yours

Good for: people who want full control and don't mind 30 minutes of setup.

  • Runs on a $5 Raspberry Pi or a cheap VPS.
  • Uses barely any memory — it's written to be light.
  • Unlocks paid Bitwarden features (organizations, 2FA options) at no cost.
  • Your data never touches a third party.

The catch: you are now the IT department. If your server dies and you have no backup, your passwords go with it.

The honest comparison

Bitwarden Cloud Vaultwarden
Setup effort Minutes ~30 minutes
Who holds your vault Bitwarden You
Cost Free / paid tiers Free
Backups Automatic Your job
Premium features Paid Included

Which should you pick?

If passwords stress you out and you just want them safe everywhere, start with Bitwarden Cloud. It's a massive upgrade over reusing the same password on twelve sites.

If you already run a home server — or you've caught the self-hosting bug — Vaultwarden is one of the highest-reward projects you can deploy. Small, stable, and it removes a company from your most sensitive data.

Try it this weekend

Spin up Vaultwarden with Docker:

docker run -d --name vaultwarden \
  -v /vw-data/:/data/ \
  -p 8080:80 \
  vaultwarden/server:latest

Then point the Bitwarden app at your server's address.

One actionable takeaway: Before you trust any vault — cloud or self-hosted — set up a backup. For Vaultwarden, copy that /vw-data/ folder somewhere safe on a schedule. A password manager you can't recover is worse than no password manager at all.