Bitwarden Server Self-Hosted Password Manager

Bitwarden Server is the open-source backend component of the Bitwarden password manager, enabling organizations and individuals to self-host their own password management infrastructure with full control over data, security, and compliance. Developed by Bitwarden Inc. (headquartered in Santa Barbara, California, founded by Michael Crandell and Kyle Spearrin in 2016), the Bitwarden Server is written in C# (.NET Core) and uses SQL Server or PostgreSQL as its database. Key features: password vault: stores passwords, usernames, credit cards, secure notes, identities, and other sensitive data in an encrypted vault, with all encryption and decryption performed client-side (zero-knowledge architecture). The server never sees plaintext data. Encryption: AES-256-CBC encryption for vault data, PBKDF2-SHA256 or Argon2id key derivation, RSA-2048 for organization key sharing, and HKDF for key expansion. The master password is never transmitted to or stored on the server. Authentication: email/password, two-factor authentication (TOTP, Duo, YubiKey OTP, FIDO2/WebAuthn, email), single sign-on (SAML 2.0, OpenID Connect), and directory sync (LDAP, Active Directory, Azure AD, Okta, OneLogin). Organizations: shared vaults and collections for team password sharing, with role-based access control (owner, admin, manager, user, custom roles) and group-based permissions. Send feature: securely share data (text or files) with expiration dates and password protection. Emergency access: designated contacts who can request access to the vault after a waiting period. Bitwarden Secrets Manager (separate product) for managing developer secrets. API: RESTful API for programmatic access and integration. Admin panel: web-based admin dashboard for user management, organization settings, billing, and diagnostics. Deployment: Docker, Docker Compose, or manual installation on Linux, Windows. AGPL-3.0.