nodewarden

Disclaimer

This project is for learning and discussion purposes only. Please back up your vault regularly.

This project is not affiliated with Bitwarden. Please do not report NodeWarden issues to the official Bitwarden team.

Feature Comparison with the Official Bitwarden Server

Capability	Bitwarden	NodeWarden	Notes
Web Vault	✅	✅	Original Web Vault interface
PWA Support	⚠️ Basic	✅	Installable, offline-capable, app shortcuts
Web Vault Offline Access	❌	✅	Web client supports offline vault viewing
Passkey Login	✅	✅	WebAuthn/FIDO2 passwordless login
Full sync `/api/sync`	✅	✅	Compatibility optimized for official clients
Attachment upload / download	✅	✅	Cloudflare R2 or KV
Send	✅	✅	Supports both text and file Sends
Import / Export	✅	✅	Supports Bitwarden JSON / CSV / ZIP import with attachments
Cloud Backup Center	❌	✅	WebDAV / S3 scheduled backup (OneDrive/Google Drive etc.)
Password hint (web)	⚠️ Limited	✅	No email required
TOTP / Steam TOTP	✅	✅	Includes `steam://` support
Multi-user	✅	✅	Invite-based registration
Organizations / Collections / Member roles	✅	❌	Not implemented
Login 2FA	✅	⚠️ Partial	TOTP and Passkey (as second factor)
SSO / SCIM / Enterprise directory	✅	❌	Not implemented

Tested Clients

✅ Windows desktop client
✅ Mobile app
✅ Browser extension
✅ Linux desktop client
⚠️ macOS desktop client has not been fully verified yet

Web Deploy

Fork this repository. If this project helps you, consider giving it a Star.
Open Workers -> Continue with GitHub -> select your forked repository (NodeWarden) -> continue.
R2 is used by default. If R2 is not enabled on your account, you can use KV instead by changing the deploy command to npm run deploy:kv.
Deploy and open the generated URL.

Storage	Card required	Single attachment / Send file limit	Free tier
R2	Yes	100 MB (soft limit, adjustable)	10 GB
KV	No	25 MiB (Cloudflare limit)	1 GB

Tip

How to keep your fork updated:

Manual: open your fork on GitHub, click Sync fork, then Update branch

Automatic: go to your fork -> Actions -> Sync upstream -> Enable workflow; it will sync upstream automatically every day at 3 AM

CLI Deploy

git clone https://github.com/shuaiplus/NodeWarden.git
cd NodeWarden
npm install
npx wrangler login

# Default: R2 mode
npm run deploy

# Optional: KV mode
npm run deploy:kv

# Local development
npm run dev
npm run dev:kv

Key Features

PWA Progressive Web App

✅ Install to desktop - Runs like a native app
✅ Offline usage - Service Worker caching, view passwords offline
✅ App shortcuts - Quick launch vault, TOTP codes
✅ Background decryption - Web Worker handles decryption without blocking UI

✅ WebAuthn/FIDO2 support - Login with fingerprint, Face ID, etc.
✅ PRF key unlock - Passkey can unlock vault directly
✅ Official client compatibility - Chromium browser extension supports Passkey login
✅ Multi-device sync - Supports iCloud, Google Password Manager, etc.

Cloud Backup Notes

Remote backup supports WebDAV and S3
Supports OneDrive (via Koofr), Google Drive (via Koofr), Cloudflare R2, Backblaze B2, etc.
When Include attachments is enabled:
- the ZIP still contains only db.json and manifest.json
- actual attachment files are stored separately under attachments/
- later backups reuse existing attachments by stable blob name instead of re-uploading everything every time
During remote restore:
- required attachment files are loaded from attachments/ on demand
- missing attachments are skipped safely
- skipped attachments do not leave broken rows in the restored database