Built on open source. Thank you.

The vault

Vaultwarden

The server that keeps your locked vault. Written by Daniel García and many contributors. License: GNU AGPL 3.0.

We run the official Vaultwarden release, version 1.37.5, with no changes. If we ever change it, we will publish our changes here.

Bitwarden apps

The free apps you use on your phone, computer and web browser. Made by Bitwarden, Inc. License: GNU GPL 3.0.

Bitwarden is a trademark of Bitwarden, Inc. Dankore Vault is not part of, or approved by, Bitwarden, Inc.

Fonts

All fonts are kept on our own server, so your visits are never shared with a font company.

• Bricolage Grotesque by Mathieu Triay, The Bricolage Grotesque Project Authors. SIL Open Font License 1.1.
• Figtree by Erik Kennedy, The Figtree Project Authors. SIL Open Font License 1.1.
• JetBrains Mono by JetBrains. SIL Open Font License 1.1.
• Font files packaged by Fontsource.

The software behind this website

• Rust, MIT or Apache 2.0.
• Axum, Tokio, Tower and tower-http, MIT.
• Askama, MIT or Apache 2.0.
• SQLx, MIT or Apache 2.0.
• reqwest and rustls, MIT or Apache 2.0.
• RustCrypto: argon2, pbkdf2, AES, AES-GCM, CBC, HMAC, HKDF, SHA-1, SHA-2 and RSA, MIT or Apache 2.0. They do the same vault encryption steps as the Bitwarden apps, so we can set up family vaults for you.
• lettre (email), MIT or Apache 2.0.
• totp-rs (two-step codes) and qrcode, MIT or Apache 2.0.
• chrono, uuid, rand, subtle, base64 and data-encoding, MIT or Apache 2.0.
• Serde, anyhow and thiserror, MIT or Apache 2.0.
• tracing, MIT.
• PostgreSQL, PostgreSQL License.

What runs our server

• Caddy, Apache 2.0, stands in front of the vault server and keeps its admin pages closed to the internet.
• restic, BSD 2-Clause, makes our encrypted daily backups.
• CapRover, Apache 2.0, runs our apps. Debian and Alpine Linux are the systems inside them.
• GlitchTip, MIT, runs on our own server and tells us when something goes wrong. Email addresses are removed before anything is recorded.

Tools we test with

• The official Bitwarden command-line app, GPL 3.0, checks that family vaults we set up open in a real Bitwarden app.
• Mailpit, MIT, catches test emails. SeaweedFS, Apache 2.0, lets us practise backups and restores without touching real data.

Services we use

These companies help us run Dankore Vault. They never see what is inside your vault. Our privacy policy says what each one gets.

• Stripe takes card payments, sends receipts and works out sales tax.
• Amazon SES sends our emails. Encrypted backups are kept in Amazon S3.

Design

The structure of our design system was inspired by the "Mercury" design notes on getdesign.md. Our colors, type and words are our own.