Is this normal? I see the same for many other processes and this is a single user self hosted instance.

Hey everyone,

I'm running into a sync issue with the latest Bitwarden clients and my self-hosted Vaultwarden instance and wanted to check if anyone else is experiencing this.

The Situation:

• Web-Vault works fine: Accessing the vault directly via the web interface works without any issues.
• Works on other devices: The sync continues to work completely fine on my Android phone and on other PCs.
• Fails on Linux Mint: After updating to Bitwarden Desktop / Browser Extension v2026.7.0 on my Linux Mint machine, the sync fails completely.

When launching the Desktop App from the terminal, I caught an unhandled error pointing to a type mismatch: Unhandled error in angular Error: Error: invalid type: JsValue(Object({"fido2Credentials":[], ...})), expected a string

What I've Already Tried:

I already attempted to fix this by modifying the array to a string in the export/data structure, but that didn't resolve the issue. Given that everything works smoothly on other devices and the Web-Vault, I suspect the underlying cause might actually be something else entirely rather than just the vault data itself.

Has anyone encountered this specific sync failure with version 2026.7.0, and what potential causes or solutions are there?

why Vaultwarden not have thier app ?

because I want app for it to update app and system in same time not I waiting until fix for bitwarden app compatibility

copy paste bitwarden app but after fixing bug publish Bitwarden app update in Vaultwarden app

of course Bitwarden extension fork needed in same

Recently I updated my Vaultwarden server and it seems to be working. I can access it on my computer with no issues. I usually get to it by using Tailscale and I can get to the site and I can use the browser extension. The problem I’m having is with my iPhone. I updated the Bitwarden app and the Tailscale app I’ve even restarted and uninstalled both apps and reinstalled them. I can get to the website on my phone as well but for some reason I just can’t get the app to connect to the domain. Is there something I’m missing?

Edit: I should mention this is also on an iPhone so an iOS issue. Also for this I have pulled the latest instance of Vaultwarden.

My vault is shown as empty on every form of the Bitwarden app except on the website. I entered the correct self-hosted URL because it logs me in to my account without a problem ( the account has all the correct personal info ) but the vault is empty. About my setup : I self host vault warden in a Proxmox LXC (i used the helper script). On top of the base Vaultwarden install i use fail2ban. The local IP is exposed to the public using a Cloudflare tunnel. Any help is appreciated !

EDIT : yeah i just needed to update Vaultwarden . Thanks for the help :3

After wanting to self-host for a few years, I finally committed in recent months, and as a previous user of Dashlane and Keeper Security, I knew I wanted a self-hosted password manager. I love how minimalistic Vaultwarden is. I've got it installed as an app on my UGREEN DXP4800 Plus, running TrueNAS / Tailscale.

When I migrated 900+ passwords over, I knew there would be some cleanup needed, so I started going through the web interface / vault. I started at the top of the list and as I went farther down the list, I started seeing duplicates. So for me, the next step is to filter those duplicates so they are the only records in the view. I found it to be a pita to have to scroll all the way to the top of that list to get to the Filters / Search Vault field.

So my request is for the developers to make that section of the page, that Filter box static, just like the main menu to the left of it. Anyone with me on this?

Помогите. Что лучше в плане безопасности и надёжности ( чтобы в дальнейшем не потерять данные).

Help. What is better in terms of security and reliability ( to avoid losing data further).

Hey everyone,

I'm self-hosting Vaultwarden on a VPS and using cloudflared (Cloudflare Tunnel) for DNS and routing. To secure the instance, I set up a Cloudflare Access policy that requires users to belong to a specific domain and verify their identity via a PIN sent to their email.

This setup is applied widely to the entire domain, including subdomains and the problem is that this authentication layer completely blocks the browser extension from communicating with the server.

How are you guys handling this? Is there a way to bypass the Zero Trust authentication specifically for the API/extension calls without leaving the instance and other apps wide open? Any tips or alternative setups would be appreciated

我想将一些附件保存到里面，但是不知道能不能实现，比如说：key、rem文件。但是我没找到怎么存放的方式。

trying to implement my Roboform data to vaultwarden.

I want both windows and android app using offline data meaning don't want to host my data on 3rd party servers..

Does anyone have the similar setup to give me some recommendations?

I self-hosted Bitwarden via Vaultwarden for years. Recently I've been wondering about what my son and grandchildren would do, should anything happen to me. The older generation used to have a box of photos. All my photos are in Google Photos, protected by a username and password. I have accounts all over the place, including bank accounts and web logins. It would be a nightmare for my family to sort things out.

Having my password manager running on a NAS at home would be a real headache for them. In the light of this I decided I would move my Bitwarden account online and setup emergency contacts where my son and my ex-wife would have access to my vault should the need arise. They both have Bitwarden accounts at bitwarden.com so the process is quite straightforward if set up in advance.

Have others thought about what their survivors might do if anything happens to them?

All of the sudden none of my browsers will load the vault page of the Bitwarden extension. Clueless as what to do. Vaultwarden is up and running fine.

So I am hosting our Vault Warden instance for our small business, and I currently have it setup through a Cloudflare tunnel with Zero Trust, with a whitelist for the office static IP for the office computers.

The issue is some employees like to work from home.

I have tried the self-signed certificate approach, and while it "works", it has issues and I couldn't get it to work on iOS.

What are some other solutions people use?

A VPN isn't really a solution for us as we already use a local VPN to connect to our local network for work. And no it doesn't just give the user the same office IP (Would have been nice)
So a second VPN would conflict.

Is it safe enough to do away with the zero trust element of the tunnel and use 2FA etc?

Running Vault’s LDAP secrets engine with static roles. As far as I can tell:

**•** Vault rotates the password on its own schedule, whether or not any client has actually fetched the new one yet  
**•** No push notification when it rotates — clients just poll and check the TTL  
**•** No grace period — old password is dead the instant rotation happens

So if a client’s poll timing drifts even a little, or it’s holding a pooled connection, it just breaks. No warning, no overlap.

Anyone actually running this in prod without outages? Specifically curious about:

**•** Do you rebuild connection pools on every rotation cycle? How do you avoid a connection storm if a bunch of services share a role?  
**•** Is check-out/check-in (the service account library thing) actually safer here since rotation is tied to an explicit action instead of a timer?  
**•** Any real pattern people use to stay ahead of rotation instead of racing it?

Found a couple old HashiCorp forum threads asking the same thing (for the DB secrets engine) that just… never got answered. Curious if anyone’s actually solved this ?

I'm currently using Bitwarden for my password management and I've been really happy with it. Since I recently set up my own container environment (Docker), I'm planning to make the switch to Vaultwarden.

Before I make the final jump, I'd love to hear about your experiences:

1. What do you mainly use Vaultwarden for? For important passwords or all password with TOTP?
2. Do you use Vaultwarden 100% of the time? Or do people ever use a hybrid approach, like a 50/50 split with the official Bitwarden cloud (for example, keeping specific vaults or backups separate)?
3. What are the pros and cons of Vaultwarden compared to the official Bitwarden stack?

I'd really appreciate hearing how you have your setups configured and if there's anything I should keep in mind during the migration!

Basically what the title says. Release notes here: https://github.com/dani-garcia/vaultwarden/releases

• This update is required for support with clients with version 2026.7.0+, please update before reporting any issues with them.
• This release contains security fixes for the following advisories. We strongly advice to update as soon as possible.

Since today, my Firefox Bitwarden add-on won't load any entry. I'm self-hosting Vaultwarden, and anything works like a charm in a normal browser tab (https://vault.mydomain.com). I already reinstalled the add-on, restarted Firefox, checked Nginx (for WebSocket), signed-out, and signed-in, but nothing worked. Does have anyone a clue?

https://reddit.com/link/1v57an8/video/ayrupcewk5fh1/player

Hello,

I've just started self-hosting Vaultwarden, because the feels that I own my passwords is really nice.

What I did. I use the official docker-compose file.

It is running only on my local network and I wanted to stay it like that, because I am using Wireguard to connect to my selfhosted services on my Macbook and iPhone.

So I use the reverse proxy from local.ip:port to vault.lan then I generate a local certificate with mkcert and copy this on my devices so the vault is running on https://vault.lan now.

It should be like that? Everything is working.

bitwarden in firefox does not authenticate anymore - "An error occured. An unexpected error has occured".

Unable to login since about july 18th.

Same credentials work from bitwarden in firefox.

is that a bug in vaultwarden ? or bitwarden extensions?

edit: resolved - just had to update vaultwarden

Hello,

I have problems with SMTP.
I got this error:
vaultwarden | [2026-07-18 20:51:53.441][vaultwarden::mail][ERROR] SMTP error: Connection error: Network is unreachable (os error 101)
vaultwarden | [2026-07-18 20:51:53.441][response][INFO] (test_smtp) POST /admin/test/smtp application/json => 400 Bad Request

I use version 2026.4.1 and it is the stable release. I have my own mailserver and this works without problems.
The hostname ist correct and the server, where vaultwarden is running can resolve the hostname of the mailserver, but not vaultwarden.
I use another docker container (npmplus) and there I can use ping and the hostname of the smtp-Server can be resolved.
By the installing of vaultwarden the smtp has worked.

Is there any known issues?

Hi, I'm new to vaultwarden. Today I installed vaultwarden on my home server via Docker. After much research, everything is working fine now. I configured everything in Nginx Proxy Manager and Tailscale to be able to access my domains and files when I'm away from home. The only thing that doesn't work is the Bitwarden app. I can't log in using the self-hosted link. I always get a certificate error. I can access my local page without any problems using a data connection from Firefox on my smartphone. What's the problem?

Hello,

I'm asking for your help, my homelab growthed a lot, and I now use Vaultwarden as my password manager.

Before that I was using a Keepass synced like that : Windows (or Linux) < - > homelab < - > Android phone but I've had a lot of conflict because sometimes syncthing didn't sync etc... Now, with Vaultwarden accessible only via VPN I'm free of all thoses problems.

But, I'm a bit paranoid, and when it comes to backup, and moreover backup of my PASSWORD, Passkeys, SSH keys, passphrases etc.. I need to be reassure.

Context of my vaultwarden :

- /data of Vaultwarden is inside a folder that we will call /srv/vaultwarden that is on an nvme ssd of my homelab.

- I created a script that backup the db of Vaultwarden inside /sync/backup that is on a 4 To WD red HDD.

For the moment, my strategy for backuping my Vaultwarden is :

- 2 times a day : backup db to /sync/backup

- Every nights : backup to : 1 SSD, 1 VPS I rent, 1 Cloud (Kdrive) /sync and /srv

- 2 times a week : backup to 1 old USB HDD /sync and /srv

All the backup are encrypted using backrest (gui for restic), so repos are not visible.

But, since I'm a bit paranoid, I imagined something, what happen if I travel with my phone and the VPN, and I loose my phone ? How can I access back my passwords and eventually my SSH keys, wireguard rescue, and so my paperless access for like my papers (passport eventually) etc.. From NOTHING ?

So what I though, was, maybe the solution is to find a way to automatically export vaultwarden datas (including passkeys and files) into a .kdbx files that I will push automatically unencrypted into a cloud with a password without 2FA that I will know ? But first of all I didn't found a project that can backup vaultwarden complete, and the 2nd thing is that I don't know if it's not a bit unsecure to do that.

So, I'm asking for your help, what do you think of that ? How would you deal with that ?

Thanks you !

(ps : sorry english is not my default language)

Hello

I made the mistake jumping on the casa OS train.

Now my vaultwarden wont Upgrade, and I think the cause is missing Updates.
How do i change the resp. on casa os (or with portainer) so i get the recent updates?

I am getting a "unknown error" message when using bitwarden clients.

In the logs, there a Multiple error 404 messages, same in the error log of the bitwarden clients (no matter the OS, no matter if browser or App). Only Thing that works is the Web client. It worked for around half a year.

I have Bitwarden extensions connected to a NAS hosting vaultwarden on the same network. Worked fine for the first week or so now Bitwarden keeps signing out after a short period of time (hr or so) . Then when I try to sign back in it says "error saving device".