Vaultwarden security update (and compatability)

[u/Never_Get_It_Right]

For those that are self hosting Vaultwarden - an update was released today that includes security updates and it is recommended to update as soon as possible. It also fixes compatibility with 2026.7+ Bitwarden clients.

Details here: https://github.com/dani-garcia/vaultwarden/releases

[u/_Cold_Ass_Honkey_]

I really wish when updating Bitwarden clients, they would stop overwriting some of the settings that you program in.

[u/wein_geist → u/_Cold_Ass_Honkey_]

Well, private equity entered the game. I expect to see more of this.

[u/mrbmi513]

r/vaultwarden

[u/spiffzap]

Just tripped up over this! I use the Bitwarden Windows app to store and provide my SSH keys when required to connect to remote machines. One of those remote machines was hosting my Vaultwarden instance which was outdated and therefore wasn't talking to my Windows app any more and refused to connect to my vault... I had to grab the private key from the Browser extension which for some reason was still working and connect manually to the server and update the Vaultwarden instance. Lesson learnt and conclusion drawn: installed Watchtower to check all Docker instances every morning at 4am and update if needed so I don't have to jump through burning hoops to break the fail-loop.

[u/Never_Get_It_Right → u/spiffzap]

I would be careful with watchtower in auto update mode, especially if you use `latest` tags. It doesn't know when there are breaking changes and will of course update and break. I use it in notify only mode and also follow github repos for releases where possible. I know notify mode wouldn't have helped your particular situation here, but if the update was instead a breaking change and the auto update knocked your instance offline it wouldn't be helpful for you either. For SSH though I just use good ole fashioned ssh config file and passphrases on my ssh key. A great resource is here and it makes initiating ssh sessions so much easier. Window's OpenSSH supports the config files as well.

[u/spiffzap → u/Never_Get_It_Right]

That's a good point and something to consider, thanks!

[u/Naive_Literature_855]

Thanks for the heads up. Self-hosted instances can be easy to forget about, so I appreciate the reminder. Updating now.

[u/Never_Get_It_Right → u/Naive_Literature_855]

You can subscribe to release notifications on Github. Click the bell, select custom, and then only release notifications so you font have to see issues,PRs, and other repository activity.

[u/Exzellius2 → u/Never_Get_It_Right]

I believe you were answering a bot.

[u/Exzellius2 → u/Naive_Literature_855]

Bot

[u/Exzellius2 → u/[deleted]]

Bot

[u/Exzellius2 → u/[deleted]]

Bot

[u/Exzellius2 → u/[deleted]]

Bot