Cloud VPS 6 GB
Most popularA private vault for you or your household.
$24.99per month
- 6 GB RAM
- 4 vCPU cores
- 100 GB NVMe SSD
- 30 TB
- Unlimited
AliasVault hosting on xCloud gives you a self-hosted password and email alias manager, end-to-end encrypted, on a server you control. Deploy AliasVault from the OneClick catalog and xCloud starts the pinned all-in-one image with its PostgreSQL, generates the admin password, mounts four persistent volumes and publishes the web app, API and admin panel over HTTPS. This is your own server, not AliasVault's cloud service.
AliasVault is a privacy-first password and email alias manager. Its README says you create unique identities, strong passwords and random email aliases for every website, with fully end-to-end encrypted vaults, a built-in email server and zero third-party dependencies. Self-hosted AliasVault is a self-hosted password and email alias manager you run yourself, a privacy-first alternative to closed-source password managers. It is licensed under AGPL-3.0.
On xCloud this template deploys AliasVault 0.30.7 as the upstream all-in-one image, pinned by digest, serving the web app, API and admin panel on one HTTPS address. Four volumes hold the database, secrets, logs and certificates. Inbound SMTP ports 25 and 587 are not published, so private email domains cannot receive mail, and registration is open until you disable it.
Running AliasVault yourself means the app, a database, secrets, an admin account, a domain and a certificate before the first vault is created. Here the install form has no fields at all.
Step 01
Create your xCloud account and pick AliasVault from the OneClick catalog. Choose your domain and server; there are no other fields, because xCloud generates the admin password for you.
Step 02
One click. We start the pinned AliasVault 0.30.7 all-in-one image, mount aliasvault_database, aliasvault_secrets, aliasvault_logs and aliasvault_certificates, write the admin password hash once, and publish it over HTTPS. First boot takes about two minutes.
Step 03
Open your domain, choose Create account, and register. Then set PUBLIC_REGISTRATION_ENABLED=false in the Environment editor and redeploy. Point the apps and browser extension at your domain under their server URL setting.
This template runs the upstream all-in-one AliasVault image, which bundles PostgreSQL, the API, the web app, the admin panel, an SMTP service and a task runner in one container.
Upstream says vaults are encrypted on your device before they reach the server, your master password never leaves it, and the server has no access to unencrypted data.
Create unique identities, strong passwords and random email aliases for each website, managed together in one vault.
Upstream ships browser extensions and native iOS and Android apps, which you point at your own server address in their settings.
An admin panel at /admin manages the instance. Set ADMIN_IP_ALLOWLIST to private or a list of addresses to restrict it, because the password alone protects it.
The app, API, admin panel, PostgreSQL, SMTP service and task runner share one container, so there is no separate database service to run.
The database and its encryption keys live on separate volumes that must be backed up together, because the database is unreadable without the secrets.
Dedicated server hosting for AliasVault, so the machine under it is not your problem.
An individual hosts a vault of logins and email aliases on a server they rent, using the browser extension and mobile apps pointed at their own domain.
A family creates a few accounts, then closes public registration, so only the people they invited use the server and every vault is encrypted on the device.
Someone leaving a closed-source password manager moves to a self-hosted vault they control, and checks the import options in upstream's docs before switching.
An admin sets ADMIN_IP_ALLOWLIST so /admin is reachable only from private addresses, while the apps keep using /api on the same domain.
Dedicated Cloud VPS sizes, pre-configured for AliasVault hosting. Pick the one that fits, and resize any time.
A private vault for you or your household.
$24.99per month
More accounts and attachments.
$59.99per month
Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. AliasVault is licensed by its maintainers under AGPL-3.0.
Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy AliasVault on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.
Start your journey without cost.
$0forever
Your rate with 2–5 servers connected.
$5per server / month
The same platform, discounted at 6–10 servers.
$4per server / month
The same platform, discounted at 11+ servers.
$3per server / month
Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.
AliasVault on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore, with the data left in your hands.
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
From Server creation to application deployment, everything can be managed from our intuitive control panel.
See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.
xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!
Brian GeovannyI've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.
Kevin PinedaI'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting
Leo KooHow Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud
Ed EllinghamxCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.
Dumitru ButucelxCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.
Waqar AhmedTrust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍
Rahul SinghSo far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.
Massimo VillaCame from cloudways then to runcloud then to xcloud. Looks like I'm staying here.
Gerson ElI've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.
Tony LewisI came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.
Jared McDowellI like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose
David McCanHow Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently
Kevin HeinrichsI had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.
Dan SpinozaDear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.
Rahil MaknojiaCame from runcloud. Tried xcloud and never came back.
Karl FanegaHow Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites
Gary MoodyxCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.
Jorge de los Reyes MartínezI use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.
Jay PaganoHow Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud
Lori NewmanI too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps
John ApertureI went from Cloudways to xCloud. No intention on switching in the foreseeable future.
Blaine MooreFeel free to contact us with any questions or concerns you may have.
Yes. AliasVault is open source under AGPL-3.0, and its licence file at the pinned 0.30.7 tag is linked here. xCloud bills for the Cloud VPS under it, not for AliasVault. Upstream also runs a separate cloud service, which this install is not and has no affiliation with.
Yes, and this AliasVault Docker hosting template does it for you: the upstream all-in-one image, pinned by digest and built for amd64 and arm64, runs under Docker Compose on your own server, not in the AliasVault cloud, with the web app at / , the API at /api and the admin panel at /admin.
The manifest floor is 16 GB disk, 1024 MB RAM and one CPU core, which matches upstream's stated minimum. More accounts and stored attachments need more disk. The 6 GB tier sold here gives the bundled PostgreSQL room.
Upstream says all sensitive user data is encrypted end-to-end, including vault contents and received emails, that your master password never leaves your device, and that the server never holds unencrypted data. This page makes no further security claim, and backups are highly sensitive, so protect them.
Not with this template. Inbound SMTP ports 25 and 587 are not published, so private email domains cannot receive mail here. The vault, passwords and passkeys work, but incoming alias mail does not, so plan another route if aliases are central to how you will use it.
Yes. Upstream's README lists browser extensions for Chrome, Firefox, Edge and Safari and native iOS and Android apps. Point each at your own domain under its server URL setting. This page does not test them against this install, so confirm sign-in on your devices.
ADMIN_PASSWORD is written once on the first start, so editing it later does nothing. Run reset-admin-password -y inside the container, note the printed password, and restart the app. Sign in as admin at /admin, and consider ADMIN_IP_ALLOWLIST to restrict who can reach it.
Include aliasvault_database and aliasvault_secrets in the same backup, because the database is unreadable without the keys in the secrets volume. Both hold your users' encrypted vaults and credentials, so treat backups as highly sensitive, store them off the server, and test a restore.
Upgrades are not automatic. The template pins 0.30.7 and its multi-architecture digest, and an existing install is unaffected by catalog changes. Back up both volumes, review the upstream release, then adopt a newer template version when one is published, keeping both volumes.
Yes, until you close it: public registration is open on a fresh install, and each account uses disk space even though vaults are encrypted. Create your accounts, then set PUBLIC_REGISTRATION_ENABLED=false in the Environment editor and redeploy. Site-wide Basic Auth is not recommended, since the apps call /api.
PostgreSQL, the API, the web app, the admin panel, an SMTP service and a task runner, all in one container behind a single HTTP port. Only that port is proxied, over HTTPS, and the healthcheck calls /api, which answers 200 only when the database is reachable and migrated.
Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.
Connect your first server in minutes. No plan you have to grow into.