Bitwarden is $10/yr (Premium). Cipher is a self-hosted alternative at $0.99/mo. Here's when each makes sense.
| Cipher | Bitwarden | |
|---|---|---|
| Hosting | Self-hosted, your infra | Self-hostable via Vaultwarden (unofficial) or official server (requires Docker + MSSQL) |
| Data location | Your server, your disk | Your server (if self-hosted) |
| Free tier | 50 entries | Paid only |
| Pro pricing | $0.99/mo | $10/yr (Premium) |
| Dependencies | None (single binary + SQLite) | Docker, Postgres, etc. |
| Setup time | ~30 seconds | 15-30 minutes (self-host) |
| Dashboard | Built-in at /ui | Web UI |
| License | BSL 1.1 | Open source |
Cipher is a single Go binary with embedded SQLite. Install it with one command, and you are running in under a minute. Your data stays on your server.
curl -fsSL https://stockyard.dev/cipher/install.sh | sh
Bitwarden is a strong product. There is no point pretending otherwise. Where Cipher earns its place is in situations where Bitwarden cannot be used — airgapped environments, regulated industries, teams with strict data sovereignty requirements, or simply developers who prefer tools they can inspect end to end. If none of those constraints apply, Bitwarden may genuinely be the better choice.
Architecturally, Cipher and Bitwarden could not be more different. Bitwarden runs on distributed cloud infrastructure with load balancers, managed databases, CDNs, and redundancy across availability zones. Cipher is a single process writing to a single file on a single disk. That sounds fragile until you realize that SQLite handles more concurrent readers than most web applications will ever need, and WAL mode means reads never block writes.
Both Cipher and Bitwarden offer self-hosted options, but the operational requirements differ. Self-hostable via Vaultwarden (unofficial) or official server (requires Docker + MSSQL) Cipher is a single binary with embedded SQLite — no containers, no external databases, no orchestration. The practical difference: Cipher runs on a $5 VPS with no configuration. Self-hosting Bitwarden typically requires a more substantial infrastructure investment.
Moving from Bitwarden does not have to be all-or-nothing. Some teams run Cipher for new data while keeping Bitwarden as a read-only archive of historical records. The API makes it straightforward to build a sync script if you need both systems to reflect the same data during a transition period.
Single binary. Free to start. $0.99/mo for Pro.