{"full_name":"dani-garcia/vaultwarden","owner":"dani-garcia","name":"vaultwarden","url":"https://github.com/dani-garcia/vaultwarden","description":"Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs","homepage":"","topics":[],"language":"Rust","license":"AGPL-3.0","avatar":"https://avatars.githubusercontent.com/u/725423?v=4","created_at":"2018-02-17T22:40:20Z","pushed_at":"2026-11-04T21:17:55Z","metrics":{"stars":70510,"forks":3437,"watchers":316,"issues":2843,"prs":1595,"releases":89,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":3287},"growth":{"day":{"stars":52,"forks":-2,"base_day":"2026-11-09"},"week":{"stars":385,"forks":37,"base_day":"2026-11-03"},"month":{"stars":1961,"forks":154,"base_day":"2026-10-11"}},"history":{"dates":["2026-09-06","2026-09-07","2026-09-08","2026-09-09","2026-09-10","2026-09-11","2026-09-12","2026-09-13","2026-09-14","2026-09-15","2026-09-16","2026-09-17","2026-09-18","2026-09-19","2026-09-20","2026-09-21","2026-09-22","2026-09-23","2026-09-24","2026-09-25","2026-09-26","2026-09-27","2026-09-28","2026-09-29","2026-09-30","2026-10-01","2026-10-02","2026-10-03","2026-10-04","2026-10-05","2026-10-06","2026-10-07","2026-10-08","2026-10-09","2026-10-10","2026-10-11","2026-10-12","2026-10-13","2026-10-14","2026-10-15","2026-10-16","2026-10-17","2026-10-18","2026-10-19","2026-10-20","2026-10-21","2026-10-22","2026-10-23","2026-10-24","2026-10-25","2026-10-26","2026-10-27","2026-10-28","2026-10-29","2026-10-30","2026-10-31","2026-11-01","2026-11-02","2026-11-03","2026-11-04","2026-11-09","2026-11-10"],"stars":[66101,66238,66305,66372,66401,66422,66469,66621,66683,66774,66838,66889,66979,67031,67069,67127,67183,67212,67486,67652,67776,67763,67824,67860,67973,68019,68068,68113,68153,68192,68258,68305,68386,68426,68467,68549,68613,68659,68698,68754,68798,68911,68977,69044,69102,69171,69202,69308,69351,69412,69474,69535,69595,69715,69772,69841,69890,69953,70125,70174,70458,70510],"forks":[3138,3153,3156,3158,3160,3161,3163,3173,3175,3176,3182,3186,3192,3193,3191,3192,3193,3195,3207,3217,3222,3226,3227,3230,3234,3240,3240,3243,3246,3253,3260,3263,3275,3277,3278,3283,3286,3287,3291,3295,3296,3311,3319,3324,3328,3332,3338,3349,3352,3358,3362,3364,3366,3371,3377,3381,3385,3384,3400,3405,3439,3437],"watchers":[304,307,308,312,311,310,311,317,318,316,316,317,319,317,317,317,317,316,317,317,317,317,317,317,317,317,317,318,316,316,318,317,317,317,317,316,316,317,317,318,319,321,321,321,320,319,319,319,319,319,318,318,314,314,314,314,315,315,313,314,316,316],"issues_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"prs_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null]},"boards":{},"same_owner":[],"issues":[{"number":246,"title":"[META] Feature Requests","comments":248,"created_at":"2018-11-09T15:55:03Z"},{"number":5856,"title":"New device registration awaits SMTP which results in bitwarden client timeouts.","comments":19,"created_at":"2025-05-15T08:01:41Z"},{"number":7371,"title":"iOS Bitwarden login fails during SSO re-auth when push is enabled (vaultwarden::api::push: Unexpected push token)","comments":10,"created_at":"2026-06-23T15:33:34Z"},{"number":7437,"title":"WebAuthn times out with PIN-configured CTAP 2.1 authenticator when user verification is discouraged","comments":9,"created_at":"2026-07-17T18:13:32Z"},{"number":7345,"title":"User enumeration possibility","comments":9,"created_at":"2026-06-17T15:29:10Z"},{"number":7927,"title":"After an account key rotation, new items are refused with 422 \"Invalid key cipher\" (users.key_id keeps the old id)","comments":6,"created_at":"2026-11-02T15:28:21Z"},{"number":6415,"title":"Incoherent user \"enabled\" status across admin interfaces","comments":5,"created_at":"2025-10-30T15:03:46Z"},{"number":7514,"title":"SSH key cipher with `null` members in `sshKey` is accepted and silently discarded (Bitwarden cloud rejects the same request)","comments":4,"created_at":"2026-07-29T23:48:59Z"}],"discussions":[{"number":7944,"title":"Bitwarden issues and Vaultwarden","comments":1,"category":"General","created_at":"2026-11-07T19:52:20Z"},{"number":7941,"title":"Send text/file Private note","comments":1,"category":"Bitwarden Clients Q&A","created_at":"2026-11-06T09:47:35Z"},{"number":7939,"title":"Triwarden — a native macOS client for Vaultwarden, built with SwiftUI","comments":0,"category":"Show and tell","created_at":"2026-11-06T07:13:37Z"},{"number":7934,"title":"Support for Bitwarden \"Share via link\" (email-verified Send)","comments":3,"category":"Ideas","created_at":"2026-11-04T07:50:06Z"},{"number":7932,"title":"Web vault on Firefox: mouse click on Log in / Continue does nothing (Enter key works)","comments":1,"category":"Bitwarden Clients Q&A","created_at":"2026-11-03T12:03:56Z"},{"number":7926,"title":"Add a env variable during compilation or something similar for packaging hints? (E.g. listed in support string)","comments":1,"category":"Ideas","created_at":"2026-11-02T14:10:56Z"},{"number":7924,"title":"Support macos-native-credential-sync feature flag, similar to Windows","comments":0,"category":"Ideas","created_at":"2026-11-02T08:47:48Z"},{"number":7923,"title":"Enroll vaultwarden in anthropics/oss-scanner","comments":1,"category":"General","created_at":"2026-11-01T23:01:42Z"}],"latest_release":{"name":"1.37.5","tag":"1.37.5","published_at":"2026-11-01T22:16:50Z","body":"## Security Fixes\r\nThis release contains security fixes for the following advisories. We strongly advise updating as soon as possible.\r\n- Website icons [[GHSA-x9cq-f669-vrr4]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-x9cq-f669-vrr4) (**Medium**, 5.3)\r\n- Emergency access [[GHSA-9pjj-f9g5-3x4c]](https://github.com/dani-garcia/vaultwarden/security/advisories/GHSA-9pjj-f9g5-3x4c) (**Medium**, 4.3)\r\n\r\nThese are private for now, pending CVE assignment and publishing at a later date.\r\n\r\n## Note\r\nThis update is required for web vault 2026.7.1+ to turn two-step login methods on or off, and for 2026.9.0+ to take over an account through emergency access. Please update before reporting any issues with them.\r\n\r\n## Upgrade notes\r\n- **Web vault:** the bundled web vault is now v2026.10.1. If you serve your own web vault older than v2026.7.1, you might have compatibility issues.\r\n- **Configuration:** invalid values now stop startup with an error. Numeric options have tighter types, so negative or too large values are rejected, for example above 65535 for `LOGIN_RATELIMIT_MAX_BURST`, `TRASH_AUTO_DELETE_DAYS`, `EVENTS_DAYS_RETAIN` or `SMTP_TIMEOUT`, or above 255 for `EMAIL_ATTEMPTS_LIMIT`. The rate limit `*_SECONDS` and `*_MAX_BURST` options, `DATABASE_TIMEOUT` and `DATABASE_IDLE_TIMEOUT` must be at least 1, `DATABASE_MIN_CONNS` can't be larger than `DATABASE_MAX_CONNS`, and `DUO_CONTEXT_PURGE_SCHEDULE` and `PURGE_INCOMPLETE_SSO_AUTH` must be empty or a valid cron expression.\r\n\r\n## What's Changed\r\n* Close WebSocket connections that stop responding by @Cassian433 in https://github.com/dani-garcia/vaultwarden/pull/7807\r\n* Validate the Duo and SSO purge schedules on startup by @NotAFlightRisk in https://github.com/dani-garcia/vaultwarden/pull/7819\r\n* docs: fix \"runnning\" typo in playwright README by @ump45nose in https://github.com/dani-garcia/vaultwarden/pull/7787\r\n* docs: fix Playwright test env link by @dajiaohuang in https://github.com/dani-garcia/vaultwarden/pull/7739\r\n* Fix group import to update groups on data change by @Jogius in https://github.com/dani-garcia/vaultwarden/pull/7671\r\n* [Web 2026.9.0] Support new Emergency Access password payload by @tom27052006 in https://github.com/dani-garcia/vaultwarden/pull/7746\r\n* [Web 2026.9.0] Support new account recovery password payload by @tom27052006 in https://github.com/dani-garcia/vaultwarden/pull/7747\r\n* [web-v2026.7.1] 2FA userVerificationToken for Authenticator, Email and Duo by @Timshel in https://github.com/dani-garcia/vaultwarden/pull/7563\r\n* Fix email 2FA for SSO logins on iOS and Android by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/7827\r\n* Update web-vault to v2026.8.0 by @dani-garcia in https://github.com/dani-garcia/vaultwarden/pull/7828\r\n* Add revision_date to org policies by @will-lottkowitz-prism in https://github.com/dani-garcia/vaultwarden/pull/7571\r\n* Add Windows desktop Autotype feature flags and policy support by @tom27052006 in https://github.com/dani-garcia/vaultwarden/pull/7808\r\n* Add `biometrics-sdk-ipc` feature flag (closes #7812) by @cad0p in https://github.com/dani-garcia/vaultwarden/pull/7813\r\n* Delete auth requests when deleting a user by @Cassian433 in https://github.com/dani-garcia/vaultwarden/pull/7837\r\n* Add unsupported riscv64 architecture by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/7859\r\n* api/icons: fix typos in the minimum PNG size comment by @ump45nose in https://github.com/dani-garcia/vaultwarden/pull/7867\r\n* docs: fix connect-src description grammar by @ump45nose in https://github.com/dani-garcia/vaultwarden/pull/7866\r\n* Update dependencies by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/7882\r\n* Misc fixes regarding jobs and config by @BlackDex in https://github.com/dani-garcia/vaultwarden/pull/7858\r\n* Send null org key for unconfirmed members in sync by @minchinweb in https://github.com/dani-garcia/vaultwarden/pull/7850\r\n* Return stored manage flag for groups in collection"},"readme":true,"readme_zh":false,"news":[{"title":"Bitwarden compatible server written in Rust","url":"https://github.com/dani-garcia/vaultwarden","hn":"https://news.ycombinator.com/item?id=29662418","source":"Hacker News","lang":"en","date":"2021-12-23","points":193,"comments":114},{"title":"Vaultwarden commit introduces SSO using OpenID Connect","url":"https://github.com/dani-garcia/vaultwarden/pull/3899","hn":"https://news.ycombinator.com/item?id=44911560","source":"Hacker News","lang":"en","date":"2025-08-15","points":186,"comments":98},{"title":"Vaultwarden: Unofficial Bitwarden compatible server written in Rust","url":"https://github.com/dani-garcia/vaultwarden","hn":"https://news.ycombinator.com/item?id=41243147","source":"Hacker News","lang":"en","date":"2024-08-14","points":153,"comments":116},{"title":"Re-License Vaultwarden to AGPLv3","url":"https://github.com/dani-garcia/vaultwarden/pull/2561","hn":"https://news.ycombinator.com/item?id=34768668","source":"Hacker News","lang":"en","date":"2023-02-13","points":129,"comments":188},{"title":"Vaultwarden: Alternative implementation of the Bitwarden server API in Rust","url":"https://github.com/dani-garcia/vaultwarden","hn":"https://news.ycombinator.com/item?id=36922433","source":"Hacker News","lang":"en","date":"2023-07-29","points":19,"comments":6},{"title":"Vaultwarden – Unofficial Bitwarden compatible server, formerly bitwarden_rs","url":"https://github.com/dani-garcia/vaultwarden","hn":"https://news.ycombinator.com/item?id=46536783","source":"Hacker News","lang":"en","date":"2026-01-08","points":8,"comments":0},{"title":"Ask HN: Just got a brand new server, what do I do first?","url":"https://news.ycombinator.com/item?id=34607898","hn":"https://news.ycombinator.com/item?id=34607898","source":"Hacker News","lang":"en","date":"2023-02-01","points":5,"comments":5},{"title":"VaultWarden 1.32.4 – Security Fixes","url":"https://github.com/dani-garcia/vaultwarden/releases/tag/1.32.4","hn":"https://news.ycombinator.com/item?id=42104261","source":"Hacker News","lang":"en","date":"2024-11-11","points":4,"comments":0},{"title":"I ditched Bitwarden's subscription for a $35 Raspberry Pi running Vaultwarden","url":"https://www.msn.com/en-us/technology/software/i-ditched-bitwarden-s-subscription-for-a-35-raspberry-pi-running-vaultwarden/ar-AA28lV7v","source":"MSN","lang":"en","date":"2026-07-20"},{"title":"Vaultwarden has been running on a Raspberry Pi Zero in a drawer for a year, and it's the most underrated thing I host","url":"https://www.msn.com/en-us/news/technology/vaultwarden-has-been-running-on-a-raspberry-pi-zero-in-a-drawer-for-a-year-and-its-the-most-underrated-thing-i-host/ar-AA26vAqC","source":"MSN","lang":"en","date":"2026-06-24"},{"title":"Vaultwarden：轻量级Bitwarden兼容服务端深度解析","url":"https://news.google.com/rss/articles/CBMiX0FVX3lxTFBsZ1c5ZFZDdzF1ZTR4TWpCTDUtSUsySWhsVTNMaWc5UTVZT1JxSHR5ZmZPeDVQczk3T2ljUTU0aHdnTHNrRlgtUHFVVHNSZW9tVjB3YndZTkRQbGNzd0Rv?oc=5","source":"CSDN","lang":"zh","date":"2026-11-09"},{"title":"Vaultwarden：Rust 实现的轻量级 Bitwarden 兼容密码服务","url":"https://news.google.com/rss/articles/CBMiX0FVX3lxTE5hVldJU3NmX21TTF9oeTJmRHJmREVUSEU3MVRkNGxzTnZMNkJoNi1WU0hVN2tLZmxGeEZkdWtMWG93V21RQ1QyTDExQkJfSDRLMEpZZUhNc1NLOEh5S0Fz?oc=5","source":"CSDN","lang":"zh","date":"2026-11-09"},{"title":"vaultwarden自托管密码管理：Rust实现的轻量高可用方案","url":"https://news.google.com/rss/articles/CBMiX0FVX3lxTFB0TmU0SDVFRENucTI1WVZxcTRTOS1LMHZIcHRzNWh5VGdvd19lTHhJQ29OQnJnQVJmQTlpVE5yeFI1MlJNTjdvV3dla2RkcU5Tc1EwNTRDdFk4UzcxdW93?oc=5","source":"CSDN","lang":"zh","date":"2026-11-09"},{"title":"vaultwarden：Rust 实现的 Bitwarden 兼容密码服务协议栈","url":"https://news.google.com/rss/articles/CBMiX0FVX3lxTE9LNUpxbXVCQ0JBb2NmTk15U1A0aEhOcHVCSHhFQzJyY0lBNnJnT1FuRnp6RHpOQ3I3OHlzY1lYUjBPQTdSeXdMR1FTQTRnSkdydTdPZXQ0UzZDZ3BadHlr?oc=5","source":"CSDN","lang":"zh","date":"2026-11-08"},{"title":"GitHub 上 25 个热门自托管项目","url":"https://news.google.com/rss/articles/CBMiU0FVX3lxTE9hWl9WZmpTbjlJS0k5OHM5SzNWZXRoenNYVXNoMktxNmtILVo0ZTZabUstaC1FaUJhQXhBckxSM01GRFhyVWlmMGN5TDJUVEYtYTlv?oc=5","source":"51CTO","lang":"zh","date":"2026-06-09"}],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}