NodeWarden
shuaiplus/nodewarden ↗ ·★ 3.2k ·TypeScript ·Other
A Bitwarden-compatible password vault server running on Cloudflare Workers, with D1, R2 or KV storage options and the original web vault UI.
Overview
NodeWarden is a Bitwarden-compatible server built to run on Cloudflare Workers. It aims to provide the familiar web vault experience while using Cloudflare primitives for the backend, including D1 and R2 by default, with an optional KV deployment mode. The README lists support for desktop, mobile and browser-extension clients, along with features such as TOTP, passkeys, real-time sync, attachments, Send and backup workflows.
The deployment flow is intentionally approachable: fork the repository, connect it in Cloudflare Workers & Pages, set the build and deploy commands, then add production secrets such as JWT_SECRET. For users who prefer CLI deployment, the project also documents npm run deploy for the default R2 mode and npm run deploy:kv for KV mode.
Because this is password infrastructure, the bar is higher than for a blog or status page. NodeWarden is useful to study because it shows how far a Workers-based app can go, but anyone running it should follow the project’s disclaimer, keep backups, understand the storage mode, and keep deployments updated.
Highlights
- ✓ Bitwarden-compatible server designed for Cloudflare Workers
- ✓ Supports the original web vault UI plus desktop, mobile and browser-extension clients
- ✓ Uses Cloudflare storage options including D1, R2 and optional KV mode
- ✓ Includes passkey login, TOTP, real-time sync, attachments and cloud backup features
Best for
- →Self-hosters who want a Cloudflare-based password vault experiment
- →Developers studying Workers-backed authentication and encrypted vault APIs
- →Users who understand the responsibility of operating their own password infrastructure
Getting started
- 1 Fork the repository and deploy it through Cloudflare Workers & Pages
- 2 Set the build command to npm run build and the deploy command to npm run deploy
- 3 Add a strong JWT_SECRET as a Workers secret
- 4 Choose the default R2-backed mode or the optional KV mode based on your storage needs
FAQ
No. The README explicitly says it is not affiliated with Bitwarden and asks users not to report NodeWarden issues to the official Bitwarden team.
The README presents R2 as the default path, with larger attachment capacity, and KV as an optional mode with a smaller Cloudflare limit.
No. It handles sensitive password data, so the README warns users to back up their vault regularly. Treat it as self-hosted security infrastructure that needs careful maintenance.
Deploy NodeWarden for free
Free-tier platforms that can host this project. Pick one and ship it.
