Last Wednesday at 3 AM, Lao Zhou called and woke me up
"Hey, aren't our client passwords stored in that password app?" Yeah, I said — and he told me that company got hacked. User passwords leaked in plaintext.
That night I couldn't sleep. I had 80+ client accounts sitting on some third-party company's hard drive: server logins, payment API keys — completely out of my reach.
What is Vaultwarden + Keyguard? Who's using it?
Vaultwarden looks almost identical to Bitwarden (a popular password manager app), but here's the difference: it runs on your own computer or server. Data never touches any third party. To steal it, a hacker has to break into YOUR machine first.
Keyguard is its phone/desktop client — open source (code is public, anyone can audit for backdoors), and it works pretty much like the official Bitwarden app.
Who's actually using this? A reader of mine named "A-Liang" runs cross-border e-commerce. Last year he had 300+ accounts in LastPass (another foreign password tool), got hacked twice. He spent two days migrating to Vaultwarden — monthly fee dropped from $9 to $4 (just the server cost).
What does it cost to replicate today?
Money: $0 (use an old PC as server) or $4-7/mo (cloud server). Optional domain: $1-9/year.
Time: 4-8 hours for first setup. I personally got stuck for three days on HTTPS certificates (the thing that makes browsers show the little green lock). Lots of swearing and Googling. Grab a tech-savvy friend, buy them a coffee, you'll be done in about 2 hours.
Tech barrier: You need basic command line (typing commands in the black terminal window), or Docker (one-click packaged installer). Either way, budget an afternoon to learn.
First step: Go to GitHub (where programmers post code), search "Vaultwarden", look at the Docker install section in the official docs. If you really don't want to touch the command line, search "Vaultwarden setup" on Xiaohongshu — some folks charge $15-30 to set it up for you.
Choosing by stage
Just starting out (under 10 accounts): Skip this whole thing. Chrome's built-in password manager is enough. Save your sanity.
1-2 stable clients (30-100 accounts): I'd actually recommend starting with paid 1Password or official Bitwarden ($30-55/year). Build the password habit first — don't try self-hosting just to save money.
Already scaling (200+ accounts, sensitive client data, or like me, woken up by hack news): Vaultwarden is worth it. But please find a tech friend first — not today. Pick a weekend together next week. You'll be three times faster than grinding docs alone.