Skip to main content
Vaultwarden provides the Passwords use case. It is the released alternative for the optional native v2 vault workload, and the initial Basement and Cloud StackSpecs do not enable it. The admin-token slot holds an opaque secret:// reference; the actual token stays in local owner custody. Choose the workload, placement and adapter in the StackSpec, then follow Add a workload to validate, establish custody, generate, inspect the plan, apply and verify.

​
First use

  1. Create the application owner account and choose the registration policy before adding real secrets.
  2. After accepting an invitation, complete account registration and sign in through your Bitwarden client.
  3. Create and sync a vault entry to confirm that the account is ready. An invitation alone does not complete this setup.
For an already admitted workload, change StackKits intent through the StackSpec and lifecycle commands; do not edit generated application configuration on the target.