Bitwarden Hosting in Germany
We install and operate Bitwarden on your infrastructure - including organisations, SSO and directory integration, backups, updates, monitoring and secure maintenance access.
About the technology
Operate password management as a specially protected platform
A self-hosted Bitwarden instance brings together personal vaults, organisations, collections and administration. Availability, encryption, mail, identity integration and recovery must therefore be designed as one security model.
We install the official Bitwarden server platform in your environment, provide maintenance and monitoring and connect SSO, SCIM or Directory Connector where supported by your edition. WZ-IT does not need access to vault contents.
Bitwarden for controlled password management
Encrypted vaults
Use passwords, secure notes and other credentials through official clients.Organisations and collections
Structure shared access around teams, roles and areas of responsibility.SSO and directories
Integrate identity providers, SCIM or Directory Connector according to edition and target design.Clients and mail
Connect Web Vault, browsers, apps, SMTP and approved endpoints reliably.Backup and recovery
Back up server data, attachments and configuration consistently and document restart.Updates and monitoring
Control component versions, certificates, mail flow, resources and availability.Migration and takeover
Assess existing data and configuration, migrate them in a test run and move to managed operations through a controlled cutover.Identity and secure access
Secure SSO, roles, administrative paths and external access for the application and existing infrastructure.Backup and recovery
Back up all stateful components consistently and document the recovery path for the agreed scope.Updates, monitoring and operations
Monitor and update the application and its technical dependencies and operate them under the agreed service level.
Operations beyond installation
Operate Bitwarden with minimal administrative privileges
Platform operations protect availability and configuration without giving WZ-IT access to decrypted vault contents.
Server platform
Operate Bitwarden components, proxy, data services and mail.Organisation and rights
Implement roles, collections and policies with the customer.Identity and clients
Connect SSO, directories, clients and approved endpoints.Security and recovery
Control updates, monitoring, backups and restart.
Area
Ownership without access to vault contents
WZ-IT operates infrastructure and application; master passwords, client-side key material and vault contents remain exclusively with users and your organisation.
| Area | Responsibility | Scope and boundaries |
|---|---|---|
| Bitwarden server and infrastructure | WZ-IT | Installation, hardening, updates, monitoring and technical maintenance. |
| Backups and restore | WZ-IT | Encrypted backup of agreed components and recovery tests. |
| SSO and directory | Shared | WZ-IT integrates technically; the customer defines identity sources and groups. |
| Organisations and policies | Shared | Technical implementation of an approved role and policy model. |
| Vault contents and master passwords | Customer | Content, sharing and recovery keys remain the customer's responsibility. |
| Migration and rollout | Optional WZ-IT service | Import, pilot group, client distribution and user training as a separate project. |
Hosting & operations
How much does Bitwarden hosting cost?
We combine the right compute size with ongoing operations, backups, monitoring and a service level appropriate for the criticality of Bitwarden. High availability and recovery targets are designed separately where needed.
Hosting for Bitwarden in Germany: GDPR-compliant operations
- One managed standard application included
- .de domain included or your own domain or subdomain via CNAME
- German data centres with ISO 27001 and BSI C5, no US clouds
- 99.9 % standard availability per month
- Regular updates, CVE monitoring and prioritised patches for critical vulnerabilities
- Central logs with immutable retention
- Daily backup with 7-day retention
- 5 TB outbound traffic per workload and month
- 24/7 proactive monitoring
- Five service levels, 24/7 P1 response with Production or Critical
- Personal technical contact
Instance sizes and monthly prices
- XS · 2 vCPU, 2 GB RAM, 40 GB NVMe SSD
- €99.90 in total
- S · 2 vCPU, 4 GB RAM, 80 GB NVMe SSD
- €129.90 in total
- M · 4 vCPU, 8 GB RAM, 80 GB NVMe SSD
- €159.80 in total
- L · 8 vCPU, 16 GB RAM, 80 GB NVMe SSD
- €219.80 in total
- XL · 16 vCPU, 32 GB RAM, 80 GB NVMe SSD
- €329.80 in total
- Additional storage per 50 GB
- +€4.99
All prices are net and exclude statutory VAT. The offers are addressed to businesses. All on-premises options
Other options
Try it free for 7 daysRequest a test instance
We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.
Request a test instance →Bring Your Own InfrastructureInstallation on Your Infrastructure
Installation on your own infrastructure · On-premise or in your cloud · Control over data location and access · Custom configuration · Complete documentation · Initial setup & configuration · Optional support and maintenance contract
Request a proposal →On-premises optionRun Bitwarden on hardware at your organisation
As an alternative to managed hosting in the data centre, WZ-IT provides the hardware, configures Bitwarden, and handles hardening, monitoring, updates, backup and technical support. Access can be limited to the internal network or enabled through VPN and existing identities.
View WZ-IT App Node →Sizing and deployment
Size Bitwarden around users, attachments and integrations
User count, organisation structure, attachments, SSO, synchronisation load and recovery objectives determine the operating design.
| Usage scenario | Technical starting point | Key factors |
|---|---|---|
| Small team | Dedicated single environment | Standard clients, few organisations and predictable use. |
| Mid-sized organisation | Assess redundant platform components | SSO, directory, mail and attachments are considered. |
| Many users or sites | User and integration assessment | Synchronisation, rollout and support processes are designed. |
| Specific recovery or compliance targets | Security assessment | Keys, audit, backup isolation and emergency access are scoped. |
- Bitwarden edition, user scope, identity integration, migration and recovery objectives are clarified before quotation. Vendor licences are not hidden in infrastructure pricing.
Sizing and deployment
Bitwarden in your controlled environment
The official self-hosted platform runs in your cloud or data centre; WZ-IT receives documented technical operations access only.
Your cloud account
Operations within your networks, accounts and security policies.On-premise
The platform in your own data centre or server room.Dedicated customer servers
Isolated resources and clearly bounded data storage.Hybrid integration
Self-hosted platform with external identity provider and distributed clients.
Target architecture
Separate client-side encryption from platform operations
Clients encrypt and decrypt vault data; the server synchronises encrypted data and controls organisation capabilities.
Users and official clients
Browser, desktop and mobile with personal master passwords.
TLS and secure endpoint
Protected web access, certificates and restricted administration paths.
SSO, directory and policies
Plan-dependent identity and organisation integration.
Bitwarden Server
Web Vault, API, identity, attachments and synchronisation.
Database
Encrypted vault data and platform state.
Mail and push
Invitations, confirmations and supported client communication.
Monitoring and backup
Availability, components, certificates and recovery.
Self-hosting does not replace an organisational password strategy. Roles, emergency access, recovery codes and offboarding are designed alongside technical operations.
Role in the overall system
Related services for Bitwarden
This page covers installation and the agreed platform operations for Bitwarden. Custom code, the access layer and special confidentiality requirements remain clearly separated responsibilities that can be added when needed.
Support custom code and integrations
Keep custom extensions, interfaces and dependencies controlled, updated and supportable.
View service Secure accessConnect users, sites and systems
Add identity-based access and private network paths as a separate operational layer.
View service Operate confidentiallyAssess Section 203 requirements separately
For professional secrecy holders, define contractual, access and infrastructure requirements in a dedicated operating model.
View serviceThree relevant adjacent paths instead of a long list of further products.
View the overall systemFrequently asked questions about Bitwarden self-hosting
Answers about licensing, access, migration, SSO and backup.
- Bitwarden hosting with WZ-IT starts at €99.90 net per month. It includes a dedicated size XS instance (2 vCPU, 2 GB RAM, 40 GB NVMe SSD), updates, daily backups with 7 days of retention, 24/7 monitoring, 5 TB of outbound traffic and a first response to critical incidents by the end of the next business day. Larger instances and higher service levels cost extra; the configurator shows the total price.
- The entry level is a dedicated size XS instance with 2 vCPU, 2 GB RAM, 40 GB NVMe SSD for €99.90; it suits lightweight applications as well as test and development environments. Size S with 2 vCPU, 4 GB RAM, 80 GB NVMe SSD costs €129.90. We check which size Bitwarden needs in production before provisioning. Size M (4 vCPU, 8 GB RAM, 80 GB NVMe SSD) costs an extra €29.90 excl. VAT, L (8 vCPU, 16 GB RAM, 80 GB NVMe SSD) an extra €89.90 excl. VAT and XL (16 vCPU, 32 GB RAM, 80 GB NVMe SSD) an extra €199.90 excl. VAT, each per month. Additional storage costs €4.99 excl. VAT per 50 GB and month.
- No. WZ-IT does not limit the number of users. How many users can work smoothly at the same time depends on usage and the chosen instance size XS to XL.
- Bitwarden hosting can be cancelled monthly, with no minimum term and 30 days' notice to the end of the month.
- In German data centres operated by a German provider, without US clouds. The data centres are ISO 27001 certified and BSI C5 attested.
- We provide a production instance within a few business days. For a trial, we set up a test instance, usually on the next business day; it runs free of charge for 7 days and without payment details.
- Yes. One .de domain is included with every hosting plan. Alternatively, connect your own domain or subdomain with a CNAME record.
- No. Operations require access to servers and encrypted storage, not master passwords or decrypted vault contents.
- That depends on user count and organisation, SSO, SCIM and directory capabilities. We map technical needs to the current vendor editions.
- No. Bitwarden Server is the official vendor platform; Vaultwarden is an independent compatible implementation. Their operations and support profiles differ.
- We support export/import planning, piloting, organisation structure and client rollout. Highly sensitive exports are performed by authorised customer staff.
- We back up agreed server data, attachments and configuration and test the technical restore. We cannot replace user master passwords or missing recovery codes.
Knowledge
More about Bitwarden
Matching solutions for your project
- KeycloakOpen-source identity and access management
- NetBirdModern open-source VPN solution with centralized management
- WazuhOpen-source security platform for threat detection, compliance monitoring, and incident response
- VaultwardenLightweight, self-hosted alternative to Bitwarden
- PassboltEuropean open-source password manager for teams with role-based sharing and auditable administration.
- AuthentikOpen-source identity and access management system
Reviews & projects
Client feedback and projects worldwide
WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
International
Built in Germany's Ruhr Valley. Running worldwide.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
Selected projects
- LiveRemote access platform for distributed water treatment plantsABCO Water Systems · Australia · Secure Access & OT
- 81%AWS migration with substantially lower operating costsEVA Real Estate · UAE · Cloud exit & infrastructure
- 98%Provision new sites in minutes instead of hoursnextGYM GmbH · Germany · Automation & IoT
Read client reviews
- Secure your Proxmox & backup setup
- Modernize your infrastructure - sovereign
- Plan a sovereign open-source stack
- Integrate a local AI solution
- Modernize your legacy software
- Cut cloud cost - up to −81%
- Build a high-availability Proxmox cluster
- Virtualize with Managed Proxmox
- Design an open-source AI architecture
- Get collaboration fully managed
- Ship your prototype to production
- Connect sites and clusters securely
Hosting & operations
Enquire about hosting and operations for Bitwarden
Briefly describe the current state and objective for Bitwarden. We assess infrastructure, integration, and ongoing operations.
- Straight with Timo and Robin - no sales team, no pitch
- An honest take, including when we are not the right fit
- Concrete next steps for infrastructure, software or AI
No risk: worst case, you leave with a clearer understanding of your project than before.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.