# shuaiplus/nodewarden

Bitwarden-compatible server running on Cloudflare Workers

Repository: https://github.com/shuaiplus/nodewarden
Canonical: https://ross.abutalabs.com/products/nodewarden
Homepage: https://nodewarden.app
Language: TypeScript
License: NOASSERTION
License Family: other
Topics: bitwarden, cloudflare-workers, password-manager, self-hosted, serverless, typescript, vaultwarden, cloudflare-d1, cloudflare-r2, end-to-end-encryption, nodewarden, preact, web-vault, zero-knowledge, cloudflare, workers, password
Last push: 2026-08-10T12:05:37+00:00

## Health v2 (maintenance only)
Score: 79/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 97, release rhythm 93, longevity 15
- inputs: {"age_days": 213, "days_push": 23, "days_rel": 47, "gap_med": 5.0, "n_releases_24m": 25}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3438, forks 3876 (observed 2026-08-28T04:08:04.998897+00:00)

## What it is
NodeWarden is a Bitwarden-compatible password manager server that runs entirely on Cloudflare Workers, using D1 for data and R2/KV for attachments. It includes a Preact-based web vault with PWA support, 2FA (TOTP, YubiKey, passkey), attachments, Send, scheduled backups, and compatibility with official Bitwarden clients.

## Use cases
- self-host a Bitwarden-compatible password server without running a VPS
- deploy a password vault on Cloudflare's free serverless tier
- sync official Bitwarden apps and browser extensions to a personal server
- get TOTP, passkey login, and Send without paying for Bitwarden premium
- schedule encrypted vault backups to WebDAV or S3
- share a multi-user vault with invite-code registration

## When to choose
- you want a zero-maintenance, serverless password manager on Cloudflare
- you already use Bitwarden clients and want a self-hosted backend
- you need TOTP, passkeys, attachments, and Send on a free-tier budget
- you want built-in scheduled backups with retention rules

## When to avoid
- you need organizations, collections, SSO, or SCIM for team/enterprise use
- you require a permissively licensed project (license is LGPL-3.0 with custom notice)
- you want a battle-tested, long-proven server like Vaultwarden or official Bitwarden
- you cannot or prefer not to use Cloudflare's platform

## Facets
- artifact type: service
- maturity: active
- function: http-server, auth, cryptography, self-hosted, web-framework
- domain: security, self-hosted, privacy, web-development, developer-tools
- platform: serverless, cloud, self-hosted, cross-platform
- tags: bitwarden-compatible, cloudflare-workers, password-manager, zero-knowledge, vaultwarden, cloudflare-d1, cloudflare-r2, end-to-end-encryption, preact, web-vault, 2fa, totp, passkey, web-server

## Member repositories
- shuaiplus/nodewarden (main) score 79

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:04.998897+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:37:40.849640+00:00, confidence not recorded.
  - readme: https://github.com/shuaiplus/nodewarden (fetched 2026-08-28T04:08:04.998897+00:00, sha 407256d24bc6)
  - homepage: https://nodewarden.app (fetched 2026-08-29T09:31:46.432630+00:00, sha e31fb223ba4a)
  - site_page: https://nodewarden.app/guide/contribute (fetched 2026-08-29T09:31:46.441634+00:00, sha cf24dcc872ac)
- Data as of 2026-08-30T08:39:29.467469+00:00.