Since version 1.29.0
of Vaultwarden, you can activate Mobile Client push notifications to automatically sync your personal vault between the mobile app, the web extension and the web vault without the need to sync manually.
Enable Mobile Client push notification
-
Go to https://bitwarden.com/host/ insert your email address and you'll get an INSTALLATION ID and KEY.
-
Add the following settings to your
docker-compose.yml
(and make sure you insert the correct ID and the KEY from the previous step):
environment:
- PUSH_ENABLED=true
- PUSH_INSTALLATION_ID=
- PUSH_INSTALLATION_KEY=
[!NOTE] If you have requested an INSTALLATION ID and KEY for
bitwarden.eu (European Union)
in the previous step, you also have to set
- PUSH_RELAY_URI=https://api.bitwarden.eu
- PUSH_IDENTITY_URI=https://identity.bitwarden.eu
- Recreate your container, e.g. with
docker compose up -d vaultwarden
- Connect your app to your Vaultwarden instance.
[!WARNING] If you have already connected your Bitwarden app before v1.30.2 push notifications will not work for your device (because the device token was never saved). You have to clear the app data of your mobile app (or reinstall the app) and connect your Vaultwarden account again to register the push token with Bitwarden's Azure Notification Hub.
[!IMPORTANT] Push notifications will also only work on Bitwarden apps obtained from the official mobile stores (App Store, Google Play Store) or when using alternative clients for the Google Play Store (such as Aurora Store). Push notifications will not work using Bitwarden clients installed from F-Droid, Neo Store, or other alternative stores. Those apps have been built without support for Firebase Messaging. To ensure push notifications function properly, make sure
firebaseinstallations.googleapis.com
is not blocked, as it is required for the feature to work.
- Test if mobile push notifications work, for example by renaming a folder in the web vault and see if it changes after a few seconds in your mobile app.
Switching from US to EU servers (or vice versa)
[!WARNING] Make sure you use the latest version before doing that change.
To switch from one data region to the other you'll have to:
- deauthorize all sessions and also clear the app data on the mobile app
- repeat steps 1. to 5. from the previous section with the different data region
Alternatively to 1., you could also clear the push_uuid
field of the devices
table in the database, e.g.
UPDATE devices SET push_uuid = NULL;
This should trigger your push devices to be re-registered on your next login with the device.
FAQs
Container Image Usage
- Which container image to use
- Starting a container
- Updating the vaultwarden image
- Using Docker Compose
- Using Podman
Deployment
- Building your own docker image
- Building binary
- Pre-built binaries
- Third-party packages
- Deployment examples
- Proxy examples
- Logrotate example
HTTPS
Configuration
- Overview
- Disable registration of new users
- Disable invitations
- Enabling admin page
- Disable the admin token
- Enabling WebSocket notifications
- Enabling Mobile Client push notification
- Enabling U2F and FIDO2 WebAuthn authentication
- Enabling YubiKey OTP authentication
- Changing persistent data location
- Changing the API request size limit
- Changing the number of workers
- SMTP configuration
- Translating the email templates
- Password hint display
- Disabling or overriding the Vault interface hosting
- Logging
- Creating a systemd service
- Syncing users from LDAP
- Using an alternate base dir (subdir/subpath)
- Other configuration
Database
- Using the MariaDB (MySQL) Backend
- Using the PostgreSQL Backend
- Running without WAL enabled
- Migrating from MariaDB (MySQL) to SQLite