Password managers
Vaultwarden privacy rating
Open source, lightweight server written in Rust that implements the Bitwarden client API for self-hosting. It works with the official Bitwarden apps and extensions and is not affiliated with Bitwarden.
Summary
Vaultwarden scores 88 out of 100 (grade B) on the password managers criteria. It meets 6 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export. It does not meet independent audit.
Score 88 out of 100. How scoring works
Criteria
- Yes
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No telemetry or analytics in the source code.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Volunteer project funded by donations, with no ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Yes
End-to-end encrypted vault Weight 3 of 3
Is the vault encrypted on the device before it is synced, with a key the provider does not hold?
Vault data is encrypted by the Bitwarden clients before it reaches the server.
-
Yes
Local or self-hosted option Weight 2 of 3
Can the vault be kept locally or on your own server?
The server is designed to be self-hosted.
-
Yes
Full export Weight 1 of 3
Can every item be exported in an open format?
The Bitwarden clients export to JSON (plain or encrypted), CSV, and ZIP with attachments.