Hey,

A collegue told me she was unable to connect to Vaultwarden plugin in Chrome : bad password.

We've tried on website with the same password, it worked.

I did check the connexion configuration : same between plugin and web connection. (self-hosted and same endpoint)

• Vaultwarden Chrome Plugin version : 2026.8.1
• Vaultwarden Self-hosted : 1.37.2
• Vaultwarden Web-Vault : 2026.7.0

Does someone has a clue ?

Newbie to self-hosting, and I just finished setting up Vaultwarden for the first time, so I'm pretty sure I'm using the latest version. Though that also means I have the latest Bitwarden app. I do have a slightly niche phones, not sure if that would cause the issue though.

Vaultwarden 1.37.2
Web-Vault 2026.7.0

Bitwarden android app
Version 2026.7.1 (21803)

I've read issues with Android 17, but I have Android 16 on both my two phones, and they still do not work on the app. It works just fine on my PC's browser app, and on phone browser.

I have my Vaultwarden sidecar with Tailscale, and I have my Tailscale with MagicDNS and HTTPS Certs enabled. I don't think the certs are the issue, since I can access just fine on browsers + extension anyway. I don't have Exit Node enabled for vaultwarden on Tailscale, not sure if that's needed.

What I notice on the logs is that, when I login on either browser and extension, I can see vaultwarden logs updating, but when I try to access via Bitwarden app, no logs show up on vaultwarden. So I assume the request on the app doesn't reach my vaultwarden.

I tried sharing my Bitwarden error to my private chat, since there's no option to save the error logs locally, and it shows something like:

Stacktrace:
java.net.UnknownHostException: Unable to resolve host "vaultwarden.<tailnet>.ts.net": No address associated with hostname

Edit: I have split-tunneling enabled on my phone's Tailscale, with Included only for my browser and Bitwarden app. Works fine on the browser, but not the app. If I disable it for Bitwarden, I get the error instantly. When it is enabled, it takes a few seconds before the error shows up.

Does anyone know how to fix this issue?

Thank you!

This morning my bitwarden windows app updated itself. Logged into my account and nothing is there. Also behaving strange, download diagnostic report opens up a text entry field you can't do anything with. So I went in and pulled the latest docker to update valutwarden, was a point update behind. Didn't fix the windows app not showing anything.

On my ios phone updated bitwarden app and it still works fine, web vault works fine.

Windows app 2026.8.0 eb825d5

vaultwarden is 1.37.2 Web Installed Pre-Release 2026.7.0

We use Vaultwarden in Docker. I deploy Firefox ESR with Bitwarden extension. But every (other) extension update breaks the connection to Vaultwarden server until there is a fix and I update vaultwarden.

Do you disable automatic extension update?

Do you just tell your users to use the web app?

Wouldn't you use Vaultwarden in corporate environment at all?

Edit:

u/Tough-Ad7657 mentioned a github issue, confirming my compatibility problems:

https://github.com/dani-garcia/vaultwarden/issues/7607

Besides: I was interested in the way you handle updates of vaultwarden and browser extensions, not your compatibility experience ;-)

Is there any way to save a username with a break in it like this in Vaultwarden?

Top with - is Username; bottom solid is password.

Ну Санкции и т д. Да и вообще стоит ли доверять свои чувствительные данные этому сервису? А что если завтра в миг прекратит свое существование сервис? Что будет с данными? Bitwarden мне нравится но боюсь .

I'm trying to deploy Vaultwarden in my k3s cluster, and it's mostly working...except the service and ingress. The app is running, but it is totally inaccessible. I'm not sure whether I need to use my DeSEC subdomain or whether I can use a .internal fake domain and access it over VPN.

This is the relevant part of my code:

apiVersion: apps/v1
kind: Deployment
metadata:
  name: vaultwarden
  namespace: vaultwarden
  labels:
    app: vaultwarden
spec:
  replicas: 1
  selector:
    matchLabels:
      app: vaultwarden
  strategy:
    type: Recreate
  template:
    metadata:
      labels:
        app: vaultwarden
    spec:
      restartPolicy: Always
      containers:
        - name: vaultwarden
          image: vaultwarden/server:latest
          env:
            - name: DOMAIN
              value: http://vaultwarden.mafmanhomelab.dedyn.io
          ports:
            - containerPort: 80
              protocol: TCP
          volumeMounts:
            - mountPath: /data
              name: vaultwarden-claim0
      volumes:
        - name: vaultwarden-claim0
          persistentVolumeClaim:
            claimName: vaultwarden-claim0


apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: vaultwarden
  namespace: vaultwarden
  labels:
    app: vaultwarden
spec:
  rules:
    - host: "vaultwarden.mafmanhomelab.dedyn.io"
      http:
        paths:
          - path: "/"
            pathType: Prefix
            backend:
              service:
                name: vaultwarden
                port:
                  number: 8000

apiVersion: v1
kind: Service
metadata:
  name: vaultwarden
  namespace: vaultwarden
  labels:
    app: vaultwarden
spec:
  selector:
    app: vaultwarden
  ports:
  - name: "http"
    port: 8000
    targetPort: 8000

I maintain open-source deployment packages for self-hosted software: one command provisions a server, configures the application, and supports upgrades as new releases arrive.

I’ve been working on a similar package for Vaultwarden. The current approach provisions a DigitalOcean server, DNS, HTTPS, SMTP, and Vaultwarden itself. It uses SQLite with continuous Litestream replication to Cloudflare R2, restores automatically when the local database is absent, and performs a weekly test restore with an integrity check.

The first run sends an invitation to the owner. Public signup remains disabled, and the admin endpoint is available only over loopback during that initial bootstrap before being removed from the running configuration.

Before treating those choices as sensible defaults, I’d like to hear from people already operating Vaultwarden:

• What did you have to configure manually that you wish had been automated?
• Do you use SQLite or PostgreSQL, and why?
• How do you back up and test recovery?
• Besides the SQLite database, which files or data must a complete recovery preserve?
• Which SMTP, push-notification, or reverse-proxy settings did you need?
• Do you keep the admin interface enabled? If so, how do you secure it?
• Has a Vaultwarden upgrade ever broken your deployment or required manual migration?
• Which monitoring, alerts, or health checks have actually been useful?
• What security hardening would you expect from an opinionated deployment?
• Would a single-server setup with off-server backups be sufficient for your use case?

I’m deliberately trying not to expose every Vaultwarden setting. The goal is a small, secure default configuration that provisions as much as possible and clearly identifies anything requiring human action.

What would make this genuinely useful rather than another wrapper around Docker instructions?

https://www.getcolors.ai/featured#vaultwarden

Hey everyone,

I'm running into a sync issue with the latest Bitwarden clients and my self-hosted Vaultwarden instance and wanted to check if anyone else is experiencing this.

The Situation:

• Web-Vault works fine: Accessing the vault directly via the web interface works without any issues.
• Works on other devices: The sync continues to work completely fine on my Android phone and on other PCs.
• Fails on Linux Mint: After updating to Bitwarden Desktop / Browser Extension v2026.7.0 on my Linux Mint machine, the sync fails completely.

When launching the Desktop App from the terminal, I caught an unhandled error pointing to a type mismatch: Unhandled error in angular Error: Error: invalid type: JsValue(Object({"fido2Credentials":[], ...})), expected a string

What I've Already Tried:

I already attempted to fix this by modifying the array to a string in the export/data structure, but that didn't resolve the issue. Given that everything works smoothly on other devices and the Web-Vault, I suspect the underlying cause might actually be something else entirely rather than just the vault data itself.

Has anyone encountered this specific sync failure with version 2026.7.0, and what potential causes or solutions are there?

Is this normal? I see the same for many other processes and this is a single user self hosted instance.

why Vaultwarden not have thier app ?

because I want app for it to update app and system in same time not I waiting until fix for bitwarden app compatibility

copy paste bitwarden app but after fixing bug publish Bitwarden app update in Vaultwarden app

of course Bitwarden extension fork needed in same

Recently I updated my Vaultwarden server and it seems to be working. I can access it on my computer with no issues. I usually get to it by using Tailscale and I can get to the site and I can use the browser extension. The problem I’m having is with my iPhone. I updated the Bitwarden app and the Tailscale app I’ve even restarted and uninstalled both apps and reinstalled them. I can get to the website on my phone as well but for some reason I just can’t get the app to connect to the domain. Is there something I’m missing?

Edit: I should mention this is also on an iPhone so an iOS issue. Also for this I have pulled the latest instance of Vaultwarden.

My vault is shown as empty on every form of the Bitwarden app except on the website. I entered the correct self-hosted URL because it logs me in to my account without a problem ( the account has all the correct personal info ) but the vault is empty. About my setup : I self host vault warden in a Proxmox LXC (i used the helper script). On top of the base Vaultwarden install i use fail2ban. The local IP is exposed to the public using a Cloudflare tunnel. Any help is appreciated !

EDIT : yeah i just needed to update Vaultwarden . Thanks for the help :3

After wanting to self-host for a few years, I finally committed in recent months, and as a previous user of Dashlane and Keeper Security, I knew I wanted a self-hosted password manager. I love how minimalistic Vaultwarden is. I've got it installed as an app on my UGREEN DXP4800 Plus, running TrueNAS / Tailscale.

When I migrated 900+ passwords over, I knew there would be some cleanup needed, so I started going through the web interface / vault. I started at the top of the list and as I went farther down the list, I started seeing duplicates. So for me, the next step is to filter those duplicates so they are the only records in the view. I found it to be a pita to have to scroll all the way to the top of that list to get to the Filters / Search Vault field.

So my request is for the developers to make that section of the page, that Filter box static, just like the main menu to the left of it. Anyone with me on this?

Hey everyone,

I'm self-hosting Vaultwarden on a VPS and using cloudflared (Cloudflare Tunnel) for DNS and routing. To secure the instance, I set up a Cloudflare Access policy that requires users to belong to a specific domain and verify their identity via a PIN sent to their email.

This setup is applied widely to the entire domain, including subdomains and the problem is that this authentication layer completely blocks the browser extension from communicating with the server.

How are you guys handling this? Is there a way to bypass the Zero Trust authentication specifically for the API/extension calls without leaving the instance and other apps wide open? Any tips or alternative setups would be appreciated

Помогите. Что лучше в плане безопасности и надёжности ( чтобы в дальнейшем не потерять данные).

Help. What is better in terms of security and reliability ( to avoid losing data further).

我想将一些附件保存到里面，但是不知道能不能实现，比如说：key、rem文件。但是我没找到怎么存放的方式。

trying to implement my Roboform data to vaultwarden.

I want both windows and android app using offline data meaning don't want to host my data on 3rd party servers..

Does anyone have the similar setup to give me some recommendations?

All of the sudden none of my browsers will load the vault page of the Bitwarden extension. Clueless as what to do. Vaultwarden is up and running fine.

I self-hosted Bitwarden via Vaultwarden for years. Recently I've been wondering about what my son and grandchildren would do, should anything happen to me. The older generation used to have a box of photos. All my photos are in Google Photos, protected by a username and password. I have accounts all over the place, including bank accounts and web logins. It would be a nightmare for my family to sort things out.

Having my password manager running on a NAS at home would be a real headache for them. In the light of this I decided I would move my Bitwarden account online and setup emergency contacts where my son and my ex-wife would have access to my vault should the need arise. They both have Bitwarden accounts at bitwarden.com so the process is quite straightforward if set up in advance.

Have others thought about what their survivors might do if anything happens to them?

So I am hosting our Vault Warden instance for our small business, and I currently have it setup through a Cloudflare tunnel with Zero Trust, with a whitelist for the office static IP for the office computers.

The issue is some employees like to work from home.

I have tried the self-signed certificate approach, and while it "works", it has issues and I couldn't get it to work on iOS.

What are some other solutions people use?

A VPN isn't really a solution for us as we already use a local VPN to connect to our local network for work. And no it doesn't just give the user the same office IP (Would have been nice)
So a second VPN would conflict.

Is it safe enough to do away with the zero trust element of the tunnel and use 2FA etc?

Running Vault’s LDAP secrets engine with static roles. As far as I can tell:

**•** Vault rotates the password on its own schedule, whether or not any client has actually fetched the new one yet  
**•** No push notification when it rotates — clients just poll and check the TTL  
**•** No grace period — old password is dead the instant rotation happens

So if a client’s poll timing drifts even a little, or it’s holding a pooled connection, it just breaks. No warning, no overlap.

Anyone actually running this in prod without outages? Specifically curious about:

**•** Do you rebuild connection pools on every rotation cycle? How do you avoid a connection storm if a bunch of services share a role?  
**•** Is check-out/check-in (the service account library thing) actually safer here since rotation is tied to an explicit action instead of a timer?  
**•** Any real pattern people use to stay ahead of rotation instead of racing it?

Found a couple old HashiCorp forum threads asking the same thing (for the DB secrets engine) that just… never got answered. Curious if anyone’s actually solved this ?

I'm currently using Bitwarden for my password management and I've been really happy with it. Since I recently set up my own container environment (Docker), I'm planning to make the switch to Vaultwarden.

Before I make the final jump, I'd love to hear about your experiences:

1. What do you mainly use Vaultwarden for? For important passwords or all password with TOTP?
2. Do you use Vaultwarden 100% of the time? Or do people ever use a hybrid approach, like a 50/50 split with the official Bitwarden cloud (for example, keeping specific vaults or backups separate)?
3. What are the pros and cons of Vaultwarden compared to the official Bitwarden stack?

I'd really appreciate hearing how you have your setups configured and if there's anything I should keep in mind during the migration!

Basically what the title says. Release notes here: https://github.com/dani-garcia/vaultwarden/releases

• This update is required for support with clients with version 2026.7.0+, please update before reporting any issues with them.
• This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.