docs/user-facing/communication-and-security/vaultwarden.md
2026-07-25 19:50:45 -04:00

5.4 KiB

Vaultwarden: Secure Password Management

Vaultwarden is the official password manager hosted on The Nest[cite: 5]. Powered by a self-hosted implementation of Bitwarden, Vaultwarden provides an encrypted vault to safely store your passwords, passkeys, credit cards, secure notes, and two-factor authentication (2FA) codes across all your devices[cite: 5].


1. Why Use Vaultwarden over Other Password Managers?

With so many password management options available, here is why we encourage using Vaultwarden on The Nest:

  • Complete Privacy & Data Ownership: Your passwords are encrypted and hosted locally on The Nest rather than on commercial cloud servers owned by Big Tech companies[cite: 5].
  • True Multi-Device Syncing: Browser-based password managers (like Chrome or Safari) lock your credentials into a specific browser or operating system. Vaultwarden syncs seamlessly across Windows, macOS, Linux, iOS, Android, and every major browser via official Bitwarden apps[cite: 5].
  • Integrated Passkey & 2FA Support: Store WebAuthn passkeys and built-in authenticator (TOTP) codes in one single, secure location—no need for separate authenticator apps[cite: 5]!
  • Full Premium Feature Set: Nest users receive full access to Bitwarden-compatible premium features (such as 2FA generation, secure attachment storage, and emergency access) at zero extra cost[cite: 5].
  • Automatic Backups vs. Local Files: Local password files (like KeePass or un-synced text stores) risk permanent data loss if a device is damaged or lost. Vaultwarden keeps your vault synced in real time while benefit from automated Nest backups[cite: 5].

2. Getting Started & Account Setup

  1. Check Your Inbox: When your Nest account is created, you will receive an invitation email containing a registration link[cite: 5].
  2. Set Your Master Password: Click the invite link to create your account and set a strong Master Password[cite: 5].
  3. Save Your Master Password: This password encrypts your entire vault[cite: 5]. Make sure to write it down or store it in a safe place[cite: 5]!

Warning

Important: Because Vaultwarden uses zero-knowledge encryption, administrators cannot view or reset your Master Password if you forget it[cite: 5]. Always keep a physical backup of your Master Password in a secure location[cite: 5]!

If your invite link has expired before setup, simply reach out to an administrator on Matrix to request a new invitation[cite: 5].


3. How to Migrate Your Passwords into Vaultwarden

Moving your existing credentials from Chrome, Firefox, Apple Passwords, 1Password, or LastPass into Vaultwarden is quick and easy!

Step 1: Export Credentials from Your Current Manager

Export your saved passwords as an unencrypted CSV or JSON file from your current browser or password manager settings.

Step 2: Import Your File into Vaultwarden

  1. Log in to the Vaultwarden Web Console at vault.mynest.love[cite: 5].
  2. In the top navigation bar, click Tools, then select Import Data.
  3. Choose the format corresponding to your old manager (e.g., "Chrome (csv)" or "1Password (csv)").
  4. Select your exported file and click Import Data.

Step 3: Clean Up

Caution

Security Reminder: Once your import is complete, immediately delete the exported .csv or .json file from your device and empty your Trash/Recycle Bin. Export files contain your passwords in plain text!


4. Connecting Your Apps & Devices

Vaultwarden uses standard Bitwarden client applications[cite: 5]. When signing in to any Bitwarden extension or app for the first time, click the Gear Icon (Settings) on the sign-in screen and set your Server URL to:

https://vault.mynest.love[cite: 5]

  • Browser Extension: Install the Bitwarden browser extension (Chrome, Firefox, Edge, Safari) for one-click password auto-fill on websites[cite: 5].
  • Mobile Apps: Download Bitwarden from the iOS App Store or Google Play Store to enable system-wide password and passkey auto-fill on smartphones[cite: 5].
  • Desktop App: Available for macOS, Windows, and Linux for quick access to your vault off-browser[cite: 5].

5. Integrating with The Nest

While The Nest relies primarily on passwordless passkeys managed via Keycloak SSO for logging into services like Matrix or Forgejo[cite: 5], Vaultwarden is an essential companion:

  • Passkey Vaulting: Vaultwarden can securely store and sync passkeys used for both Nest services and external websites[cite: 5].
  • Credential Organization: Safely store API keys, personal notes, credit cards, or recovery codes for all your digital accounts[cite: 5].

Tip

Passkey Auto-Fill: If you use the Bitwarden browser extension or mobile app, enable passkey support in the extension settings to sign into Nest services with a single click[cite: 5]!


Component URL Purpose
Vaultwarden Web UI vault.mynest.love Web vault, import tools, and account settings[cite: 5]
  • Keycloak Identity: Powers central passkey logins across The Nest[cite: 5].
  • Matrix Chat: Get in touch with an administrator if you need help with your vault[cite: 5].