Deploy Vaultwarden

Deploy and Host Vaultwarden on Railway

Vaultwarden is a lightweight, open-source password manager compatible with Bitwarden clients. Built with Rust, it enables secure storage and synchronization of passwords, secure notes, identities, and payment information across devices. Vaultwarden provides a self-hosted alternative to cloud-based password managers, offering greater control over data privacy, security, and infrastructure.

About Hosting Vaultwarden

Hosting Vaultwarden on Railway provides a convenient way to run your own password management server without managing complex infrastructure. This template deploys Vaultwarden alongside PostgreSQL for persistent database storage, while Railway handles container deployment, private networking, and HTTPS access.

Vaultwarden supports encrypted password vaults, browser extensions, mobile applications, and cross-device synchronization. Persistent storage ensures that important application data remains available across deployments.

Before deployment, users must configure an administrator token to secure the management interface. Public registration is disabled by default to prevent unauthorized account creation. Once deployed, Vaultwarden can be accessed through a browser or compatible Bitwarden applications.

Common Use Cases

• Personal Password Management — Securely store and synchronize passwords, credentials, and sensitive information across devices.
• Team Credential Sharing — Manage shared credentials through organizations and collections with controlled access.
• Private Password Infrastructure — Host an independent password management service with full control over application data and infrastructure.

Dependencies for Vaultwarden Hosting

• Vaultwarden — The lightweight, open-source password management server compatible with Bitwarden clients.
• PostgreSQL — Relational database for persistent storage of accounts, vault metadata, and encrypted vault records.
• Persistent Storage — Stores attachments and other application files that must survive redeployments.

Implementation Details

Administrator Token Configuration

Before deploying, configure the ADMIN_TOKEN variable with an Argon2id password hash.

1. Open the Argon2 Online Generator.
2. Select Argon2id and generate a PHC-encoded hash using a strong administrator password.
3. Enter the generated hash into the ADMIN_TOKEN variable before deployment.
4. Save the original password securely for accessing the administration panel.

For better security, generate the hash locally using Vaultwarden's built-in hash command instead of submitting your password to an online tool.

Initial Account Registration

Public registration is disabled by default.

To create your first account, temporarily enable registration, create your account, and then disable registration again. Alternatively, configure SMTP to support email invitations.

After deployment, access your Vaultwarden instance through its Railway-generated HTTPS domain. The administration panel is available at /admin.

Backup Recommendations

Regularly back up both the PostgreSQL database and Vaultwarden's persistent application files. Store backups securely outside the deployment environment and periodically verify that they can be restored.

Why Use Vaultwarden?

Vaultwarden vs Other Platforms

Why Deploy Vaultwarden on Railway?

Railway is a singular platform to deploy your infrastructure stack. Railway will host your infrastructure so you don't have to deal with configuration, while allowing you to vertically and horizontally scale it.

By deploying Vaultwarden on Railway, you are one step closer to supporting a complete full-stack application with minimal burden. Host your servers, databases, AI agents, and more on Railway.