k3s/documentation/user-facing/communication-and-security/vaultwarden.md
2026-07-23 18:24:39 -04:00

51 lines
2.3 KiB
Markdown

# Vaultwarden — Password Manager
**Vaultwarden** is an open-source, Bitwarden-compatible password manager. It stores passwords, passkeys, secure notes, and other sensitive data in an encrypted vault synced across your devices.
## Access
- **Web UI:** <https://vault.mynest.love>
- **Internal (home network):** <http://vaultwarden.k3s.home.nest>
- **API:** `https://vault.mynest.love/api` (for third-party clients)
## Features
- Store passwords, credit cards, and secure notes
- Sync across all your devices in real time
- Bitwarden-compatible — works with any Bitwarden client
- WebAuthn passkey support for passwordless login to other services
- Two-factor authentication (TOTP or WebAuthn) for the vault itself
## Getting Started
1. Open <https://vault.mynest.love> in your browser.
2. Click **Create Account** and follow the setup wizard:
- Choose a **Master Password** (this unlocks your vault — don't forget it!)
- Set up **Two-Factor Authentication** (recommended: WebAuthn passkey)
3. Once set up, you can import passwords from other managers or start adding them manually.
## Using with The Nest SSO
Vaultwarden can store the credentials for your other Nest services. For example:
- Save your Matrix login details in Vaultwarden
- Store Forgejo API tokens securely
- Keep Nextcloud passwords organized
> [!TIP]
> Since The Nest uses passkey-based authentication, you won't need to save traditional passwords for most services. Use Vaultwarden primarily for services that still require password login or for storing API keys and secrets.
## Tips
- **Master Password:** This is the only password you truly need to remember. Store it securely (e.g., written on paper in a safe place) as a backup.
- **Passkey sync:** Enable passkey sync in Vaultwarden settings to use WebAuthn for logging into other Nest services without typing passwords.
- **Browser extension:** Install the Bitwarden browser extension for one-click login to websites that support it.
## Related Services
- [Keycloak](../technical/security-and-identity.md) — Issues passkeys used to log into Vaultwarden and other Nest services
- [Matrix](../communication-and-security/matrix.md) — Use Matrix rooms to share secure notes or receive alerts from Vaultwarden (if configured)
---
*TODO: Add screenshot of Vaultwarden vault view with a sample entry.*