Deploying Bitwarden Password Management Vault on Ubuntu 24.04

Bitwarden is an open-source, end-to-end encrypted password manager. The official self-hosted server runs as a stack of Docker containers and ships with an interactive installer that wires up TLS and the database. This guide installs the official Bitwarden server on Ubuntu 24.04, configures automatic Let's Encrypt TLS through the installer, and creates the first vault user. By the end, you'll have a self-hosted Bitwarden vault available securely at your domain.

Prerequisites: Ubuntu 24.04 with at least 2 GB RAM (4 GB recommended), Docker + Docker Compose installed, a domain pointed at the server, and an Installation ID + Key from bitwarden.com/host.

Prepare the Environment

1. Add your user to the Docker group:

$ sudo usermod -aG docker $USER
$ newgrp docker

2. Create and own the install directory:

$ sudo mkdir -p /opt/bitwarden
$ sudo chown -R $USER:$USER /opt/bitwarden
$ cd /opt/bitwarden

Download and Install Bitwarden

1. Fetch the installer script:

$ curl -Lso bitwarden.sh https://go.btwrdn.co/bw-sh
$ chmod 700 bitwarden.sh

2. Run the installer:

$ ./bitwarden.sh install

Answer the interactive prompts:

Domain name: your fully qualified domain (e.g. bitwarden.example.com)
Use Let's Encrypt: y (recommended) — supply a contact email
Database name: vault (default is fine)
Installation ID and Key: from bitwarden.com/host
Region: US or EU to match where you obtained your install ID

Start the Server

1. Bring the stack online:

$ ./bitwarden.sh start

2. Confirm the containers are running:

$ docker container ls

The first start downloads images and builds configuration. Initial start can take a few minutes.

Create Your First User

Open https://bitwarden.example.com in a browser.
Click Create Account and complete the signup form.
Verify the email address (configure SMTP in /opt/bitwarden/bwdata/env/global.override.env if not already set).
Sign in to create your first organization and vault items.

Warning: Bitwarden uses zero-knowledge encryption. If the master password is lost, the vault cannot be recovered. Save it in a secure offline location.