Vaultwarden

Version1.37.3-patch.2

Source codePublic

Compatible withumbrelOS 0.5 or later

Vaultwarden is an unofficial Bitwarden-compatible server for self-hosting your encrypted password vault on Umbrel. It works with many official Bitwarden clients and provides a lightweight alternative to the official Bitwarden server.

Connecting your devices

Some Bitwarden clients require a secure HTTPS connection. Options include:

Tailscale Serve: A private HTTPS address that works at home and away, with Tailscale connected on your devices.
Local HTTPS: Available on umbrelOS 2.0 or later for connections on your local network. This requires installing and trusting Umbrel's certificate on each device, following the instructions under Settings → Advanced settings.
Another HTTPS reverse proxy: Connect through an HTTPS address you've configured for Vaultwarden.

Use your chosen HTTPS address as the self-hosted server URL in your Bitwarden client.

Features: Vaultwarden supports personal vaults, organizations, attachments, Bitwarden Send, website icons, two-factor authentication, emergency access, and the Vaultwarden admin backend.

Disclaimer: Vaultwarden is not associated with Bitwarden or 8bit Solutions LLC. For Vaultwarden issues, contact Vaultwarden/Umbrel support rather than Bitwarden's official support channels.

What's new

Version 1.37.3-patch.2+Sep 25, 2026

On umbrelOS 2.0 or later, Vaultwarden now opens directly from your Umbrel dashboard over HTTPS, so Tor Browser is no longer needed to create an account.

If you haven't upgraded to umbrelOS 2.0 yet, your existing Bitwarden clients will still work. You can also keep using Tor or an HTTPS connection you've already set up, such as Tailscale Serve.

Version 1.37.3-patch.1+Sep 16, 2026

This update adds support for new storage management and configuration options being introduced with umbrelOS 2.0.

Previous Vaultwarden 1.37.3 release notes:

Important: Bitwarden clients generally require an HTTPS server URL. If you use desktop, mobile, or browser extension clients, use Tailscale Serve or another HTTPS reverse proxy URL instead of http://umbrel.local, a plain Tailscale IP address, or an onion HTTP URL. See the app description for setup steps.

This release includes:

Fixes password changes with newer Web Vault versions
Improves password reset handling when email is disabled
Fixes organization imports when group fields are missing
Adds admin reset 2FA support and a new SSO signup control
Improves security by revoking remembered 2FA tokens after credential or 2FA changes and rate limiting prelogin/auth request endpoints
Fixes iOS registration token responses and archive date updates

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.3

Version 1.37.3+Sep 14, 2026

Important: Bitwarden clients generally require an HTTPS server URL. If you use desktop, mobile, or browser extension clients, use Tailscale Serve or another HTTPS reverse proxy URL instead of http://umbrel.local, a plain Tailscale IP address, or an onion HTTP URL. See the app description for setup steps.

This release includes:

Fixes password changes with newer Web Vault versions
Improves password reset handling when email is disabled
Fixes organization imports when group fields are missing
Adds admin reset 2FA support and a new SSO signup control
Improves security by revoking remembered 2FA tokens after credential or 2FA changes and rate limiting prelogin/auth request endpoints
Fixes iOS registration token responses and archive date updates

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.3

Version 1.37.2+Aug 25, 2026

Important: Bitwarden clients generally require an HTTPS server URL. If you use desktop, mobile, or browser extension clients, use Tailscale Serve or another HTTPS reverse proxy URL instead of http://umbrel.local, a plain Tailscale IP address, or an onion HTTP URL. See the app description for setup steps.

This release includes:

Adds required compatibility support for Bitwarden clients version 2026.8.0 and newer
Fixes sendmail executable permission checks
Includes user email addresses in successful login logs for clearer audit trails
Includes miscellaneous fixes and upstream build/test updates

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.2

Version 1.37.1+Jul 30, 2026

Important: Bitwarden clients generally require an HTTPS server URL. If you use desktop, mobile, or browser extension clients, use Tailscale Serve or another HTTPS reverse proxy URL instead of http://umbrel.local, a plain Tailscale IP address, or an onion HTTP URL. See the app description for setup steps.

This release includes:

Fixed Vaultwarden invitation links so required organization and existing-user information is included correctly
Refreshed upstream Alpine image build tooling to resolve an OpenSSL build issue in Alpine-based container variants

Full release notes are available at https://github.com/dani-garcia/vaultwarden/releases/tag/1.37.1

Related