Overview
Bitwarden Password Manager
Deploy Bitwarden across your business. Access the vault through browser extensions, mobile apps, CLI, and a desktop application.
Bitwarden Password Manager
Safely store passwords and sensitive information
Self-host on your own servers
A complete enterprise solution
Tested and trusted
Bitwarden for Business
Deploy and manage your own Bitwarden password management server on AWS. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide to securely store and share sensitive information.
Why self-host Bitwarden?
- Full data control - Your vault data stays on your infrastructure, in your AWS account, under your governance policies
- Compliance - Meet data residency and regulatory requirements by keeping credentials within your environment
- Customization - Configure SSO, directory sync, policies, and other enterprise features on your terms
- Air-gapped deployments - Run Bitwarden in network-restricted environments where cloud services are not permitted
What's included in this image
This pre-configured Ubuntu 22.04 LTS AMI includes everything needed to get a Bitwarden server running:
- Docker Engine and Docker Compose (required runtime for Bitwarden services)
- Bitwarden setup container and installation script
- UFW firewall pre-configured for HTTPS (443) and HTTP (80)
- Automatic first-login installation wizard - just SSH in and follow the prompts
- Weekly automatic update cron job to keep your server current
Getting started
- Launch this AMI from the AWS Marketplace
- Ensure ports 80 and 443 are open in your Security Group
- SSH into your instance - the Bitwarden installer runs automatically on first login
- Follow the interactive prompts to configure your domain, SSL certificate, and database
- Access your Bitwarden web vault at your configured domain
Recommended instance type: t3.medium (2 vCPUs, 4 GB RAM) or larger
Requirements
- A registered domain name pointed to your instance's public IP address
- An SSL certificate (Let's Encrypt is supported and free) or your own certificate
- A Bitwarden installation ID and key (free at bitwarden.com/host )
Support and documentation
About Bitwarden
Bitwarden is the trusted open source password manager for businesses and individuals. With end-to-end encryption, cross-platform apps, and enterprise features like SSO and directory sync, Bitwarden helps organizations secure their credentials at scale. More at bitwarden.com . Source code is available at github.com/bitwarden .
Highlights
- Complete self-hosted password management. Deploy Bitwarden on your own AWS infrastructure with full control over your vault data. Meet data residency, compliance, and regulatory requirements by keeping credentials within your environment. Supports air-gapped and network-restricted deployments where cloud-hosted password management is not permitted.
- Pre-configured and ready to launch. This AMI includes Docker, the Bitwarden installation script, firewall rules, and SSH protection out of the box. An automated first-run setup wizard walks you through domain, SSL, and database configuration. Bitwarden services start immediately after setup - go from launch to a running password manager in minutes.
- Enterprise features and open source transparency. Bitwarden supports SSO, directory sync, organization policies, role-based access control, and event logging. End-to-end encryption protects all vault data. Bitwarden's source code is publicly available at https://github.com/bitwarden, enabling independent security audits and full transparency.
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Vendor refund policy
Contact support at https://bitwarden.com/help/
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Initial release on AWS
Additional details
Usage instructions
Before you begin with your Bitwarden VM, you will need to obtain:
- A hostname (domain or subdomain) where you can create a DNS record pointing to your VM's IP address
- A Bitwarden installation ID and key from https://bitwarden.com/host/ . Bitwarden requires at least 2GB of RAM, so make sure to choose a plan with enough memory during creation. After you create your Bitwarden VM, Bitwarden's dependencies and installation scripts will be preinstalled and ready for you to use. You will need to connect to the VM via SSH to complete the setup.
ssh ubuntu@your_vm_ip
Once you connect, you'll be prompted to complete Bitwarden's installation. Provide the hostname that you will use (be sure you have setup the DNS record), your installation ID and key, and answer the questions about how you will configure SSL with your Bitwarden installation. Bitwarden requires a secure HTTPS connection to operate. The installer can generate a self-signed certificate for you if you do not have one.
After you have completed the installation, you can visit your Bitwarden domain in a web browser, register a Bitwarden user account, and log in.
Your Bitwarden VM has also been preconfigured with automatic updates so you won't need to worry about keeping the Bitwarden server application up to date. Update checks will occur weekly.
Finally, application settings (such as a SMTP mail server) can be configured in /home/bitwarden/bwdata/env/global.override.env. If you need to make changes to your server's installation settings, you can do so in /home/bitwarden/bitwarden/bwdata/config.yml.
More information on managing your Bitwarden server can be found at https://help.bitwarden.com/hosting/ .
Support
Vendor support
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.