Derek Coleman & Associates Inc logoDerek Coleman & Associates Inc

Home / Support / Vaultwarden on Ubuntu 24.04 LTS

Vaultwarden on Ubuntu 24.04 LTS — Support & Quick Start

Vaultwarden on Ubuntu 24.04 LTS — Vaultwarden is a lightweight, Bitwarden-compatible password-manager server — use the official Bitwarden apps and browser extensions against a vault you host. Published by Derek Coleman & Associates Inc on the Azure Marketplace, deployed in your own Azure subscrip…

Email support Product page Azure Marketplace listing

At a glance

Application ports8000 (web vault + API, plain HTTP — Bitwarden clients require HTTPS, so terminate TLS in front)
Open in browserhttp://<VM-IP>:8000/
Admin credential filesudo cat /root/vaultwarden-admin-credentials.txt
Sign in asADMIN_TOKEN for the admin panel at /admin; vault users self-register in the web vault
Service(s)vaultwarden
Configuration/etc/vaultwarden/vaultwarden.env (ADMIN_TOKEN, DOMAIN, SIGNUPS_ALLOWED — root-only); data in /var/lib/vaultwarden/
Logsjournalctl -u vaultwarden -f
VersionVaultwarden 1.36.0 (web vault v2026.4.1)
PlatformUbuntu 24.04 LTS

Quick start

  1. Deploy from the Azure Marketplace (Get It Now → Create), choosing your SSH key at the Administration step.
  2. Allow inbound SSH (22) for yourself plus the application port(s): 8000 — ideally only from your TLS reverse proxy — restrict to your own IP where possible. The in-image firewall already allows them; only the Network Security Group (NSG) keeps them closed.
  3. Open http://<VM-IP>:8000/admin with the admin token (see First login below) and register your first user at http://<VM-IP>:8000/.
  4. Terminate TLS in front, set DOMAIN, disable signups, then connect the Bitwarden apps to https://your.domain.

First login / credentials

This image generates its admin credential on the VM at first boot — nothing is pre-set. SSH into the VM with the username + key you chose at deploy, then print the generated credential:

ssh <your-username>@<VM-IP>
sudo cat /root/vaultwarden-admin-credentials.txt

Sign in as ADMIN_TOKEN for the admin panel at /admin; vault users self-register in the web vault.

  1. Print the credential file: the ADMIN_TOKEN generated at first boot.
  2. Open http://<VM-IP>:8000/admin and enter the token to reach the admin panel; create your user accounts by registering at http://<VM-IP>:8000/.
  3. Put TLS in front (nginx/Caddy/App Gateway), set DOMAIN=https://… in the env file, rotate ADMIN_TOKEN, and set SIGNUPS_ALLOWED=false once your accounts exist; restart the service after edits.

The admin panel uses ADMIN_TOKEN (no username). Bitwarden apps refuse plain HTTP — configure HTTPS before connecting clients.

Still stuck?

Email support@dcassociatesgroup.com (response within 1 business day) or send a message via the contact form. Include the offer name, VM size, region, and any log output — sudo journalctl -u <service> -n 100 usually tells the story.