All 79 Dependencies

Every package Vaultwarden depends on, ranked by repo health score.

Vaultwarden is an unofficial, community-built implementation of the Bitwarden server API written in Rust. Every official Bitwarden client — web vault, browser extensions, iOS and Android apps, and desktop applications — connects to it without any modifications. The entire Bitwarden password management experience works as-is; only the server behind it is different, and that difference is the point.

The official Bitwarden self-hosted server is a multi-container system requiring separate services for API, identity, admin, notifications, and more. Vaultwarden compresses all of that into a single Rust binary. It runs on hardware as modest as a Raspberry Pi with SQLite as the database, making self-hosted password management genuinely accessible to individuals and small teams who would find the official server's resource requirements prohibitive.

Feature coverage is nearly complete: personal vaults, organizations with shared collections, multi-factor authentication via TOTP, FIDO2/WebAuthn, YubiKey and Duo, Bitwarden Send for encrypted file and text sharing, emergency access, event logs, directory connector support, and a web-based admin panel. The small set of unimplemented features — Secrets Manager and SCIM provisioning — are explicitly excluded because they require separate licensing in the official implementation that falls outside what an AGPL-licensed reimplementation can cover.

Despite being unofficial, Vaultwarden has over 62,000 GitHub stars and is actively maintained with consistent releases that track the evolving Bitwarden client API. Pre-built Docker images cover AMD64, ARM64, and ARMv7 targets.

25 cookie_store 0.22.1 31 totp-lite 2.0.1 33 pico-args 0.5.0 34 yubico-rs 0.15.0 outdated 35 job_scheduler_ng 2.4.0 36 email_address 0.2.9 37 diesel-derive-newtype 2.1.3 38 grass_compiler 0.13.4 39 fern 0.7.1 39 subtle 2.6.1 41 pastey 0.2.3 42 rpassword 7.5.4 43 cookie 0.18.1 43 num-derive 0.4.2 outdated 43 num-traits 0.2.19 45 semver 1.0.28 47 Chrono-TZ 0.10.4 48 rmp-serde 1.3.1 49 ring 0.17.14 51 svg-hush 0.9.6 52 derive_more 2.1.1 53 mimalloc 0.1.52 54 governor 0.10.4 55 webauthn-rs 0.5.5 outdated 55 webauthn-rs 0.5.5 outdated 55 webauthn-rs 0.5.5 outdated 55 which-rs 8.0.4 56 dotenvy 0.15.7 57 argon2 0.5.3 outdated 57 url 0.3.2 outdated 57 url 2.3.2 57 url 2.5.8 58 html5gum 0.8.4 59 jsonwebtoken 10.4.0 outdated 59 quote 1.0.46 60 openidconnect-rs 4.0.1 61 Moka 0.12.15 62 DashMap 6.2.1 62 data-encoding 2.11.0 64 bytes 1.12.1 65 Chrono 0.4.45 65 Rocket 0.5.1 65 Rocket 0.1.1 outdated 67 dotenv-expand 12.0.3 outdated 69 OTPAuth 9.4.1 outdated 70 lettre 0.11.22 71 bigdecimal-rs 0.4.10 73 serde 1.0.228 74 handlebars-rust 6.4.2 75 rand 0.10.2 76 http 1.4.2 76 regex 1.12.4 77 tracing 0.1.44 78 dotenv 17.2.3 outdated 79 log 0.4.33 79 node-postgres 8.16.3 outdated 81 reqwest 0.13.4 82 cached 2.0.2 outdated 83 futures 0.3.32 84 serde_json 1.0.150 85 rust-openssl 0.10.81 86 opendal-reqsign 3.0.1 86 opendal-reqsign 3.0.1 87 syn 2.0.118 outdated 87 uuid 1.23.4 88 rusqlite 0.37.0 outdated 89 time 0.3.53 91 Diesel 2.3.10 91 Diesel 2.3.2 91 Hickory Proto 0.26.1 92 Playwright 1.56.1 outdated 92 opendal 0.57.0 outdated 93 Tokio 1.52.3 93 Tokio 0.7.18 outdated 93 aws-config 1.8.18 93 aws-config 1.2.14 93 aws-config 1.13.0 94 MySQL2 3.15.3 outdated 94 rustls 0.23.41

Join founders buildingwith open source

Opinionated takes, migration guides, cost-saving tips, and insights from the open source ecosystem.

Subscribe on Substack
Join 750+ subscribers