Password managers you can self-host

Self-hosting a password manager means running the server on infrastructure you control — a home server, a VPS, or an on-premises machine — instead of syncing your vault to a third-party cloud. The appeal is that you remove the provider from the trust chain entirely: there is no company whose servers can be breached, no jurisdiction whose courts can compel disclosure, no pricing change that affects your data access.

Self-hosting is the strongest available privacy posture for a password manager. It is also not free. It introduces operational responsibilities: maintaining the server, managing updates, configuring backups, and ensuring availability. For users who are comfortable with this trade-off, it is a coherent choice. For users who are not, zero-knowledge cloud storage is a reasonable second option.

Quick answer

You want the only mainstream self-hosted password manager

Bitwarden — official self-hosted deployment via Docker; Vaultwarden as a community lightweight alternative

When it matters

Server infrastructure — a VPS ($5–$10/month) or a home server running Docker. The Bitwarden official stack requires more RAM than Vaultwarden; Vaultwarden runs on a Raspberry Pi
Docker and basic system administration — installing Docker, running docker-compose, managing environment variables, configuring reverse proxy (nginx or Caddy) for HTTPS
Backup discipline — your self-hosted vault is only as safe as your backup strategy. Database exports and off-site copies are your responsibility
Update management — you own the patch cycle. Critical security updates need to be applied without the cloud provider doing it automatically

Bitwarden is the only manager in this comparison with a documented, supported self-hosted deployment path. No other provider in this comparison offers self-hosting for personal use.

When it fails

A poorly secured self-hosted instance may be less safe than a well-maintained cloud provider — exposed admin ports, outdated containers, or weak server credentials create vulnerabilities that Bitwarden's cloud doesn't have
Home server availability — if your server goes down while you're abroad and need a password, you have no fallback. Cloud deployments handle availability; self-hosted deployments require planning for it
Bitwarden's self-hosted licence requires a key from Bitwarden for Premium features — you are not entirely free from the vendor relationship even when self-hosting

How providers fit

Bitwarden is the only provider in this comparison with a supported self-hosted deployment. The official stack uses Docker and docker-compose; documentation is thorough. Vaultwarden (an unofficial but widely used alternative server) reduces resource requirements significantly and runs on minimal hardware. Self-hosting is free; Premium features require a licence key from Bitwarden.

Bottom line

Bitwarden is the self-hosting choice in this comparison — no other provider offers it for personal use. If self-hosting is a hard requirement, Bitwarden is the answer. If you want the privacy benefits of self-hosting but not the operational overhead, the EU data region on Bitwarden (bitwarden.eu) or Swiss-based Proton Pass are the closest cloud alternatives.

Open-source password managers Privacy-focused password managers Password managers by jurisdiction