Vaultwarden-Plus Administrator Wiki

Overview

This Wiki is an administrator-facing quick guide for Vaultwarden-Plus. The repository remains the canonical source of truth; Wiki pages summarize the current documented operating posture and link back to the canonical files.

Current stable release: v1.36.3.

Current release image:

forgejo.sabolowitsch.org/stefansa/vaultwarden-plus:1.36.3

Requirements

• Run Vaultwarden-Plus behind a trusted HTTPS reverse proxy.
• Use the published Vaultwarden-Plus image or a locally validated build.
• Configure outbound mail when using recovery, Send Email Verification, preview notifications, or other mail-dependent flows.
• Keep security-sensitive features gated unless they are explicitly enabled and validated for the deployment.

Configuration

Minimum deployment shape:

DOMAIN=https://your-vault.example.org

Production TLS should be terminated outside the container. Do not use ROCKET_TLS for production unless the documented Rocket rustls-webpki advisory path is resolved.

Examples

Start with:

• SMTP Configuration for outbound mail.
• Account Recovery for Web Vault 2026.4.1 recovery behavior.
• Passkey Login for gated passkey/PRF support.
• Release & Upgrade Guide before changing versions.

Troubleshooting

• Mail-dependent features fail closed when required mail cannot be delivered.
• Passkey login is disabled by default.
• Trusted-device/auth-request prototype surfaces are disabled by default.
• Web Vault remains pinned to 2026.4.1 for the current Account Recovery release.

Canonical Documentation

• README
• Documentation Index
• Product Overview
• Known Limitations