Vaultwarden

Vaultwarden lets you host your own password manager while using the polished, official Bitwarden apps and browser extensions. Because it is written in Rust rather than the full official server stack, it runs in a single tiny container and is light enough for a Raspberry Pi — yet it unlocks the features Bitwarden normally charges for, such as attachments, TOTP storage and organizations.

A password vault is the most security-sensitive service you will host, so set it up carefully. It must be served over HTTPS (the clients refuse to work otherwise), so put it behind a reverse proxy with a valid certificate. For maximum safety, keep it accessible only over your VPN rather than the public internet, and enable two-factor authentication on your account.

The flip side of owning your vault is that you are responsible for its availability and backups. If your server dies and you have no backup, you lose your passwords — so include the Vaultwarden data directory in an automated, encrypted, offsite backup, and test restoring it. Done right, Vaultwarden gives you a best-in-class password manager with none of the recurring fees and full control over where your secrets live.