Derek Coleman & Associates Inc logoDerek Coleman & Associates Inc

Home / Marketplace / Vaultwarden on Ubuntu 24.04 LTS

Vaultwarden on Ubuntu 24.04 LTS

Vaultwarden is a lightweight, Bitwarden-compatible password-manager server — use the official Bitwarden apps and browser extensions against a vault you host. This image gives you a production-ready deployment within minutes of first boot — no dependency wrangling, no manual hardening checklist. Published and maintained by Derek Coleman & Associates Inc: freshly rebuilt against current security advisories and deployable straight from the Azure Marketplace into your own subscription.

Version: Vaultwarden 1.36.0 (web vault v2026.4.1)Platform: Ubuntu 24.04 LTSPorts: 8000 (web vault + API, plain HTTP — Bitwarden clients require HTTPS, so terminate TLS in front)Category: Security & Identity

What's included

  • Vaultwarden installed from the official upstream source
  • Ubuntu 24.04 LTS base with automatic security updates enabled
  • No shared or default passwords — a unique admin credential is generated on your VM at first boot
  • Trusted Launch support: Secure Boot + vTPM
  • Azure Monitor Agent, Defender for Cloud, and Update Manager install cleanly

Quick start

  1. Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
  2. Allow inbound SSH (22) for yourself plus the application port(s): 8000 — ideally only from your TLS reverse proxy — restrict to your own IP where possible. The in-image firewall already allows them; only the Network Security Group (NSG) keeps them closed.
  3. Open http://<VM-IP>:8000/admin with the admin token (see First login below) and register your first user at http://<VM-IP>:8000/.
  4. Terminate TLS in front, set DOMAIN, disable signups, then connect the Bitwarden apps to https://your.domain.

Get your admin password (one time)

ssh <your-username>@<VM-IP>
sudo cat /root/vaultwarden-admin-credentials.txt

The admin panel uses ADMIN_TOKEN (no username). Bitwarden apps refuse plain HTTP — configure HTTPS before connecting clients.

Common use cases

  • Team password manager under your control
  • Bitwarden clients with self-hosted storage
  • Shared credentials and secure notes
  • Password vault inside a private network

Why our images

Freshly rebuilt against the latest security advisories, no shared default credentials, Trusted Launch support, and automatic OS security updates — everything runs in your own Azure subscription under your governance.

Deploy Vaultwarden in minutes

Production-ready, hardened, and maintained. Deploy straight from the Azure Marketplace into your subscription.