This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Vaultwarden 1.37.4 password manager server. Keep your team's passwords, notes and cards in your own encrypted vault, served over HTTPS with sign-ups closed by default and unique credentials for every instance.
Vaultwarden is a lightweight open source password manager server. It stores passwords, secure notes, cards and identities in an end-to-end encrypted vault, and supports organizations and collections for sharing logins inside a team. It is compatible with the Bitwarden client apps. This image gives families, small businesses and IT teams their own password manager in minutes, with the data kept on a server they control.
What is included: Vaultwarden 1.37.4 with web vault 2026.7.0 on Ubuntu 24.04 LTS, nginx serving the vault over HTTPS only (plain HTTP redirects) with live sync, and Webmin 2.670 for server administration. The image ships an empty data folder. Security is on by default: no password ships in the image. On first boot every instance creates its own vault database, server signing key, admin token (stored as an Argon2id hash) and HTTPS certificate, and sets its own Webmin password. Sign-ups are closed, so only addresses you invite from the admin page can create an account. Vaultwarden runs as its own restricted user, and SSH accepts key-based login only.
What you get on top of the free software: a pre-built and tested image that is ready in minutes, a unique security setup for every server, simple scripts for changing passwords, regular image updates, and help by email whenever you need it. Vaultwarden is open source software licensed under AGPL-3.0. Vaultwarden is an independent project and is not associated with Bitwarden, Inc.; Bitwarden is a trademark of Bitwarden, Inc. This image is an independent build by ProvenCloud.
Highlights
Ready in minutes: launch the instance, open its admin page over HTTPS and invite your users. Vaultwarden, the web vault, nginx with HTTPS and Webmin are already installed and configured.
Secure by default: sign-ups are closed and only invited addresses can register. Every instance creates its own admin token, vault database, signing key and HTTPS certificate on first boot, and SSH is key-only.
Your passwords on your own server: share logins with your team through organizations and collections, use the browser extensions and mobile apps, and back up the whole vault with one command.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
You pay by the hour for the EC2 instance running this pre-built Ubuntu machine image. The software itself carries no license fee; you pay only for compute use. The many dimensions are AWS EC2 instance types, not feature tiers. They span families built for general purpose, compute, memory, storage, GPU, and machine learning workloads. Within each family, sizes range from large up to larger multi-xlarge and metal options. Your hourly rate rises as the instance adds CPU, memory, or specialized hardware. Choose the instance type that fits your needs, then billing follows the hours you run it.
Top-of-mind questions for buyers
What exactly am I paying for, and does the password manager software add a license fee?
You pay the hourly rate for the EC2 instance running this pre-built Ubuntu machine image. The software bundled in the image is open-source and needs no license key. You pay your cloud provider only for the compute and storage the instance uses.
Am I charged when the instance is stopped or powered off?
Hourly software charges meter running time, so a fully stopped instance stops accruing those charges. Stopped instances may still incur underlying AWS storage fees for the attached disk. Billing follows the hours the instance actually runs.
Which instance type should I pick, and how does my hourly rate change between them?
The dimensions are AWS EC2 instance types across general purpose, compute, memory, storage, GPU, and machine learning families. Your hourly rate rises as the instance adds CPU, memory, or specialized hardware. A password manager is a light workload, so a smaller general-purpose type usually fits.
www.provencloud.io
Helpful?
Vendor refund policy
Software charges are billed hourly, only while your instance runs. You can stop charges at any time by terminating the instance or cancelling your subscription. Charges already incurred are not refundable.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest stable release on AWS Marketplace.
Vaultwarden 1.37.4 with web vault 2026.7.0 on Ubuntu 24.04 LTS with nginx (HTTPS only) and Webmin 2.670.
Sign-ups closed by default; a unique admin token, vault database, signing key and HTTPS certificate are created for every instance on first boot.
Includes helper scripts in /home/ubuntu/iscripts for changing passwords.
Additional details
Usage instructions
Once the instance is running, wait for the instance health checks to pass, then allow about three minutes for the first-boot setup to finish. Open https://<instance-public-ip>/admin in your browser and accept the one-time warning for the server's self-signed certificate. Enter your instance ID as the admin token.
Sign-ups are closed by default, so on the Users page, under Invite User, invite the email address you want to use. No email server is needed: the invited address can register straight away. Then open https://<instance-public-ip>/, choose Create account and register with that invited address and a strong master password. Addresses you have not invited cannot register.
In the client apps and browser extensions, choose the self-hosted server option and enter https://<instance-public-ip>. Some mobile and desktop apps do not accept a self-signed certificate: for those, point your own domain at the instance and install a trusted certificate. You can access the Webmin page at port 8000, so your URL will be http://<instance-public-ip>:8000 and use admin as username and your instance ID as password. You can also access your instance via SSH using the username ubuntu and your Amazon private key.
Required inbound ports: 22 (SSH), 80 and 443 (the vault; port 80 only redirects to HTTPS) and 8000 (Webmin). For security, allow ports 22 and 8000 only from your own IP address.
Your instance ID is shown in the EC2 console, for example i-0123456789abcdef0. Allow about three minutes after launch for the first-boot setup to finish before you sign in. Every instance sets its own passwords on first boot, so no two instances share a password.
After the first sign-in, connect over SSH and run sudo bash /home/ubuntu/iscripts/pass_vw_admin.sh to change the admin token or pass_webmin.sh for Webmin. Back up the whole vault with sudo bash /home/ubuntu/iscripts/vaultwarden_backup.sh.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use WireGuard-protocol VPN server with the wg-easy 15.5.0 web admin panel. Create VPN users in your browser and connect phones and laptops with a QR code or config file, with unique keys and passwords for every instance.
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Squid 6.14 caching web proxy. Control and speed up web access for your team or servers with a proxy that requires a login for every request, with unique passwords for every instance.
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use LEMP stack with Nginx, MySQL, PHP 8.5, phpMyAdmin and Webmin. Run fast PHP websites and apps from day one, with unique passwords for every instance.
This is a repackaged open source software product wherein additional charges apply for a secure, ready-to-use Linux desktop in your web browser. Use a full XFCE desktop with Firefox, a file manager, terminal and text editor from any computer over HTTPS, with no client software to install and unique passwords for every instance.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.