Vaultwarden runs in under 50 MB of RAM. That single fact makes hosting it feel like a solved problem, and it is why most “best hosting” lists for it are just a ranked list of cheap VPS providers.


Here is the catch nobody talks about: a password vault is the one service where the cheapest option is almost never the right one. Everything else you self-host can go down for a day and cost you an afternoon. If your vault dies and the backup was never tested, you lose access to every account you own.
So this list ranks on the things that actually matter for a credential store: who applies the security patches, who takes the backups, whether you can restore them, and what happens at 2 a.m. when it stops responding. Price matters too, and we have not hidden it.
New to the software itself? Start with what Vaultwarden is and whether it is safe to self-host, then come back.

Quick Summary
| If you want to… | Use this | Best for | Setup time |
|---|---|---|---|
| Hand the whole job to someone else | xCloud | Teams, agencies, businesses | ~5 min |
| Pay as little as possible, managed | PikaPods | Solo users, families | ~3 min |
| Get the most server per dollar | Hetzner | Confident Linux users | 30–60 min |
| Fully managed on your chosen cloud | Elestio | Teams with a cloud preference | ~10 min |
| Learn while you build | DigitalOcean | First-time self-hosters | 45–90 min |
| Host near users anywhere | Vultr | Global or APAC audiences | 45–90 min |
| Run many apps with one admin UI | Cloudron | Homelab power users | 30–60 min |
| Spend nothing on software | Coolify | Developers who enjoy ops | 30–60 min |
| Spend nothing at all | Oracle Always Free | Labs and experiments | 60–120 min |
Best for teams and agencies: xCloud, because nobody gets billed per seat and the patching stops being your problem. Best for one person on a budget: PikaPods, and it is not close on price. Best if you genuinely enjoy running servers: Hetzner, at roughly $5 a month.
What Vaultwarden Hosting Actually Needs
Vaultwarden’s resource demands are trivial. Its operational demands are not, and that gap is where people get hurt.
| Requirement | Why it matters |
|---|---|
| Valid HTTPS | Bitwarden mobile and desktop clients refuse to sync without it. Non-negotiable. |
| Prompt security patching | Vaultwarden’s advisory history includes admin-panel RCE and cross-org data access bugs. Unpatched is the real risk. |
| Tested off-server backups | A vault backup you have never restored is not a backup. |
| Persistent storage | The /data directory holds the database, attachments, and RSA keys. Ephemeral containers lose vaults. |
| Uptime you can rely on | You will need a password on your phone, in an airport, at the worst possible moment. |
| 1 GB RAM, 1 vCPU | Genuinely enough. Do not overspend on compute. |
Notice that only the last row is about specs. The other five are about operations, which is what you are really shopping for.
The Four Categories You Are Choosing Between
| Category | What you get | What you still own | Typical cost |
|---|---|---|---|
| Managed pod | A running app, SSL, backups | Nothing | $1.20–4/mo |
| Managed server | A dedicated VPS, patched and backed up | Your data and users | $11–25/mo |
| Panel + your VPS | A control panel over a server you rent | OS updates, the panel, everything | $5–22/mo + VPS |
| Raw VPS | A blank Ubuntu box | All of it | $5–24/mo |
The jump from managed pod to managed server is the one worth understanding. A pod is a sealed container on shared infrastructure; a managed server is a whole machine that happens to be maintained for you. For a vault holding a company’s credentials, that distinction gets more important as the team grows.
How We Ranked These
- Who patches Vaultwarden — automatic updates score highest, since unpatched instances are the top failure mode
- Backup quality — automated, off-server, and restorable beats a snapshot you have to remember
- SSL handling — provisioned and auto-renewed, or manual
- Time to a working vault — measured from signup, not from “server ready”
- Support you can escalate to — a forum thread is not the same as a ticket
- Honest total cost — including bandwidth, backup add-ons, and your own hours
Pricing verified on August 27, 2026. Cloud pricing moves, so check before you commit — Hetzner adjusted prices in April 2026, and Bitwarden raised Premium in January 2026.
Master Comparison Table
| Rank | Provider | Category | From | Setup | Best for |
|---|---|---|---|---|---|
| 🥇 1 | xCloud | Managed server | $24.99/mo | ~5 min | Teams and agencies |
| 🥈 2 | PikaPods | Managed pod | ~$1.20–2.50/mo | ~3 min | Solo users and families |
| 🥉 3 | Hetzner | Raw VPS | ~$5/mo | 30–60 min | Best specs per dollar |
| 4 | Elestio | Managed server | ~$11/mo | ~10 min | Choice of underlying cloud |
| 5 | DigitalOcean | Raw VPS | ~$6/mo | 45–90 min | Learning and docs |
| 6 | Vultr | Raw VPS | ~$6/mo | 45–90 min | 32 global locations |
| 7 | Cloudron | Panel + VPS | ~€15/mo + VPS | 30–60 min | Multi-app homelabs |
| 8 | Coolify | Panel + VPS | Free + VPS | 30–60 min | Developers who like ops |
| 9 | Oracle Always Free | Raw VPS | $0 | 60–120 min | Labs, not production |
🥇 1. xCloud — Best Managed Vaultwarden Hosting for Teams
xCloud deploys Vaultwarden as a one-click app onto a dedicated Cloud VPS, then keeps that server patched, backed up, and monitored. There is no terminal step and no compose file to write.
The distinction that earns it the top spot is the word “dedicated.” Cheaper managed options put your vault in a metered container on shared infrastructure. Here it is a whole machine, which matters when the thing inside is your company’s credentials.
Key Features
- One-click deploy with a live vault in roughly five minutes
- Free SSL provisioned and auto-renewed, satisfying the client requirement automatically
- Security updates applied for you, closing the biggest self-hosting failure mode
- Automatic scheduled backups across 30+ server locations
- Organizations enabled for shared collections, with no per-seat billing
- 24/7 human support, plus cancel-anytime with unused balance refunded
How to Deploy
- Create an xCloud account and pick a Cloud VPS size
- Choose Vaultwarden from the one-click app catalog
- Wait about five minutes for provisioning and SSL
- Open any official Bitwarden client and point it at your new URL
- Import your existing vault from a JSON or CSV export
| ✅ Pros | ❌ Cons |
|---|---|
| Dedicated VPS, not a shared pod | Far pricier than pod hosts at this tier |
| Patching and backups handled | Overpowered for a single-user vault |
| No per-user pricing as the team grows | You still own the restore test |
| Room for other apps on the same box | Not the cheapest way to run one small app |
| 14-day money-back guarantee |
Honest note on price: the 6 GB tier starts at $24.99/month, which is ten to twenty times what a pod host charges. Vaultwarden will never use those resources. You are buying the operations work and the dedicated machine, not the compute — and if you are one person securing personal logins, PikaPods below is the better-value pick and we would rather say so.
Where the math flips is teams. At $24.99/month you are near Bitwarden Teams for six seats or Enterprise for four, except nobody meters you per user and the same VPS hosts the rest of your stack.
Best for: agencies, startups, and businesses who want a vault nobody has to babysit.
🥈 2. PikaPods — Best Budget Managed Vaultwarden
PikaPods, built by the team behind BorgBase, hosts open-source apps as managed pods with resource-slider pricing. Vaultwarden runs there for roughly $1.20 to $2.50 a month depending on how you set those sliders.
It also does something worth applauding: PikaPods shares a portion of revenue with the open-source projects it hosts, Vaultwarden included. Paying them is one of the few hosting decisions that funds the software you are running.
Key Features
- Deploy in about three minutes with zero configuration
- Custom domain support with automatic SSL
- Daily automated backups included
- $5 welcome credit, which is months of runtime for Vaultwarden
- 200+ app catalog if you want more than a vault
- Revenue sharing with the projects hosted
| ✅ Pros | ❌ Cons |
|---|---|
| Genuinely the cheapest managed route | No SSH access to the underlying box |
| Zero maintenance whatsoever | Limited configuration vs a real server |
| Funds the Vaultwarden project | Shared infrastructure, not dedicated |
| Excellent track record | Metered billing needs topping up |
Best for: individuals and families who want a managed vault for the price of a coffee per quarter.
🥉 3. Hetzner Cloud — Best Value for DIY
Hetzner has earned its reputation. A CX22 at roughly $5/month gets you 2 vCPU, 4 GB RAM, 40 GB NVMe, and 20 TB of egress, which is absurd value and several times cheaper than equivalent US providers.
For Vaultwarden this is enormous overkill, and that is fine, because you will run other things beside it. The trade is that everything on the ops checklist is yours.
Key Features
- Best raw specs per dollar in the market
- 20 TB egress included, so bandwidth is a non-issue
- NVMe storage that outperforms pricier competitors
- Hourly billing, EU and US regions
- GDPR-friendly German and Finnish data centers
| ✅ Pros | ❌ Cons |
|---|---|
| Unbeatable price for real infrastructure | You own patching, SSL, and backups entirely |
| Excellent, consistent performance | Only 6 regions |
| Hourly billing | No free trial credit |
| Prices rose in April 2026 |
Pair it with xCloud self-managed hosting if you want a control panel over the top without giving up the cheap box.
Best for: people who are comfortable in a terminal and want maximum server for minimum money.
4. Elestio — Best Fully Managed on Your Choice of Cloud
Elestio deploys Vaultwarden on a dedicated VM with your pick of nine cloud providers and 100+ regions, then handles updates, SSL, backups, and monitoring. Pricing starts around $11/month and rises with the underlying instance.
Its catalog runs to 350+ open-source services, so if you are standardizing several self-hosted tools under one managed vendor, that breadth is the draw.
| ✅ Pros | ❌ Cons |
|---|---|
| True hands-off management | Costs several times a pod host |
| Choose the underlying cloud and region | Per-app VM pricing adds up fast |
| Huge app catalog | Overkill for one small service |
| Dedicated VM per service |
Best for: teams who want managed hosting but insist on choosing the cloud underneath it.
5. DigitalOcean — Best for Learning
Droplets start around $6/month, and new accounts get $200 in credit. What you are really buying is the documentation, which remains the best onboarding material in the industry.
If this is your first self-hosted service, working through a DigitalOcean tutorial teaches you things a one-click deploy never will. Note that automated backups add roughly 20% to the droplet cost.
| ✅ Pros | ❌ Cons |
|---|---|
| Outstanding documentation | 3–5x Hetzner for equivalent specs |
| $200 new-account credit | Backups cost extra |
| 15 global regions | Full ops burden is yours |
| Mature managed-service ecosystem | Bandwidth overages after the free tier |
Best for: first-time self-hosters who want to understand the stack.
6. Vultr — Best Global Coverage
Vultr’s advantage is geography: 32 datacenter locations, including Seoul, São Paulo, and Mumbai. If your team is in a region Hetzner does not serve, this is usually the answer. Entry plans start near $6/month with NVMe storage.
| ✅ Pros | ❌ Cons |
|---|---|
| 32 locations worldwide | Pricier than Hetzner for the same specs |
| Reliable NVMe performance | Self-managed, infrastructure-only support |
| New-account credit available | Same DIY ops checklist |
Best for: distributed teams, or anyone who needs the vault close to APAC or South American users.
7. Cloudron — Best Multi-App Admin Experience
Cloudron is a platform you install on your own VPS that turns app deployment into an app-store click, with built-in user management and SSO across every app it runs. The license runs about €15/month on top of your server.
For a homelab running Vaultwarden alongside Nextcloud and a wiki, the centralized user management is genuinely excellent and hard to replicate by hand.
| ✅ Pros | ❌ Cons |
|---|---|
| Best admin UX in this category | License fee on top of the VPS |
| Built-in SSO and user management | You still maintain the host OS |
| Automated app updates and backups | Expensive for a single app |
Best for: homelab operators running five or more self-hosted services.
8. Coolify — Best Free Self-Hosted Platform
Coolify is an open-source, self-hostable PaaS with 280+ one-click apps that connects to servers you already own over SSH. The software is free, actively maintained, and gives you a modern deployment UI without a license.
The honest trade: you are now maintaining Coolify itself in addition to the server and the app. That is one more thing in the patching rotation.
| ✅ Pros | ❌ Cons |
|---|---|
| Free and actively developed | You maintain the platform too |
| Modern UI, 280+ apps | No support contract |
| Works with any VPS you own | Learning curve up front |
Best for: developers who want a deployment platform and do not mind owning it.
9. Oracle Cloud Always Free — Cheapest, With a Real Warning
Oracle’s Always Free ARM tier offers up to 4 OCPUs and 24 GB of RAM at no cost, which is comically overpowered for a service that needs 50 MB.
Now the warning, and it is a serious one. Oracle has a documented habit of reclaiming idle free-tier instances, sometimes without meaningful notice. If that happens and your /data directory is not backed up off the machine, your vault is gone permanently.
| ✅ Pros | ❌ Cons |
|---|---|
| Genuinely free, generous specs | Instances can be reclaimed |
| Real VM with full control | Notoriously awkward console |
| ARM performance is solid | Not appropriate for a production vault |
Best for: testing and labs. Use it to learn Vaultwarden, not to store the passwords you cannot afford to lose.
Cost Breakdown: What You Will Actually Pay

| Option | Year 1 cash | Setup hours | Ongoing hours/yr | Real cost at $50/hr |
|---|---|---|---|---|
| PikaPods | ~$30 | 0.1 | ~0.5 | ~$60 |
| Hetzner DIY | ~$60 | 1.0 | ~6 | ~$410 |
| DigitalOcean DIY | ~$72 | 1.5 | ~6 | ~$447 |
| Coolify + Hetzner | ~$60 | 1.5 | ~8 | ~$535 |
| Cloudron + VPS | ~$240 | 1.0 | ~4 | ~$490 |
| Elestio | ~$132 | 0.2 | ~1 | ~$192 |
| xCloud | ~$300 | 0.1 | ~1 | ~$355 |
| Oracle Free | $0 | 2.0 | ~8 | ~$500 |
That fourth column is the line item people forget. Six hours a year is not a pessimistic estimate for a DIY vault once you count update checks, certificate troubleshooting, and one restore test. Adjust the hourly rate to your own and the ranking shifts, which is the point.
Common Mistakes to Avoid
- Treating the free tier as production. Oracle reclaiming an instance has cost people their vaults. Free is for labs.
- Never testing the restore. A backup job that runs nightly and has never been restored is a job, not a backup.
- Leaving the admin panel enabled. Vaultwarden’s
ADMIN_TOKENpanel is the recurring source of its highest-severity advisories. Leave it unset. - Forgetting to disable signups. Vaultwarden ships with registration on. Create your account, set
SIGNUPS_ALLOWED=false, restart. - Backing up only the database file. The
/datadirectory also holds attachments and RSA keys. Take all of it. - Choosing on price alone. Saving $20 a month is a bad trade against losing every credential you own.
Which One Is Right for You?
| If you are… | Best choice | Why |
|---|---|---|
| One person securing personal logins | PikaPods | Managed, ~$2/mo, nothing to learn |
| A family of four to six | PikaPods or xCloud | Organizations included either way |
| A 5–25 person agency or startup | xCloud | No per-seat cost, real support, dedicated VPS |
| A developer who enjoys servers | Hetzner | Best specs per dollar, full control |
| Running 5+ self-hosted apps | Cloudron or xCloud | One panel for everything |
| Standardizing on one managed vendor | Elestio | Broadest managed catalog |
| Learning self-hosting from scratch | DigitalOcean | The documentation is the product |
| Just experimenting | Oracle Free | Free, and nothing important is at stake |
Deploy Your Vault This Week
Most people reading this will land in one of two places. If you are one person, PikaPods at a couple of dollars a month is the sensible answer and we are not going to pretend otherwise.
If you are a team, the calculation is different. Per-seat password manager pricing scales badly, community support is not an escalation path, and somebody has to own the patching. That is where xCloud’s Managed Vaultwarden Hosting earns its price: a dedicated Cloud VPS, SSL and updates and backups handled, no per-user meter, and support that answers.
What to do this week: pick your tier, deploy the vault, disable open signups, leave the admin token unset, import your existing passwords from a JSON export, then do the step everyone skips and restore a backup onto a throwaway instance to prove it works. That last hour is the difference between self-hosting and gambling.
Prefer to run it on your own box? Bring any VPS to xCloud self-managed hosting and deploy through Custom Docker 👉, or read self-managed vs managed hosting if you are still weighing it up.
Deploy Vaultwarden on xCloud and have a live, managed vault in about five minutes.

If you have found this blog helpful, feel free to subscribe to our blogs for valuable tutorials, guides, knowledge, and tips on web hosting and server management. You can also join our Facebook community to share insights and engage in discussions.
Frequently Asked Questions
What is the cheapest way to host Vaultwarden?
Managed pod hosting on PikaPods, at roughly $1.20 to $2.50 a month depending on your resource settings. A self-managed Hetzner VPS at about $5 a month is cheaper than most alternatives if you already run servers, but the DIY route costs you hours instead of dollars.
Can I host Vaultwarden for free?
Technically yes, on Oracle Cloud’s Always Free tier or on hardware you already own like a Raspberry Pi. Oracle is risky for production because instances can be reclaimed, so if you go that route, back the /data directory up to somewhere else automatically.
How much RAM does Vaultwarden need?
Under 50 MB in typical use, and it runs comfortably on a 512 MB instance. Compute is never the constraint, so do not let specs drive your hosting decision. Choose on who handles patching and backups instead.
Do I need a domain name for Vaultwarden?
Effectively yes. Bitwarden’s mobile and desktop clients require valid HTTPS, which needs a real domain and certificate. Most managed hosts give you a subdomain to start with and let you attach your own later.
Is managed Vaultwarden hosting worth it over a $5 VPS?
For a solo user with server experience, usually not. For a team, generally yes, because the recurring cost of an unpatched or unbacked-up vault is far higher than the monthly difference. Our Vaultwarden vs Bitwarden comparison breaks the same trade-off down further.
Can I move my Vaultwarden instance to a different host later?
Yes. Back up the /data directory, deploy Vaultwarden on the new host, restore the directory, and repoint your DNS. If the source host does not give you file access, export your vault to JSON from the web interface and import it on the new instance.
Does hosting Vaultwarden myself mean the provider can read my passwords?
No. Vaultwarden encrypts your vault on your device before it reaches the server, so any host, managed or not, only ever stores ciphertext. That said, a dedicated VPS still gives you a stronger isolation story than a shared container.
How many users can one Vaultwarden instance handle?
Far more than most people expect. A 1 GB instance comfortably serves a small team, and organizations with shared collections are included at no per-seat cost. Bandwidth and storage for attachments will hit limits long before CPU does.
Which host is best for an agency managing client credentials?
xCloud, for the combination of a dedicated VPS, no per-seat pricing, handled patching, and support you can escalate to. Client credentials raise the stakes on every operational failure mode, which is exactly what managed hosting exists to absorb.

















































