Where Does Vaultwarden Store Data?
Vaultwarden's /data tree with db.sqlite3, attachments, keys, and safe backup method.
Last updated
Vaultwarden keeps every secret in one data directory. The SQLite database carries vault entries and metadata, while attachments, sends, icon cache, config and RSA keys sit beside it as files.
Map a persistent volume to /data and back up the tree, never just the database. Copying a live sqlite file raw risks corruption, so prefer the sqlite3 .backup command or stop the container first.
Where Vaultwarden stores this, by platform
/data/db.sqlite3
Container database path; host side is whatever you mapped to /data. Siblings: attachments, sends, icon_cache, config.json, rsa_key files. Overrides: DATA_DIR, DATABASE_URL, attachments and icon cache folder vars.
Frequently asked questions
What must a Vaultwarden backup include?
db.sqlite3 plus attachments, sends, config.json, rsa_key files and icon cache. Database only restores logins but drops files, icons and admin settings.
How do I back up SQLite safely while running?
Run sqlite3 with the .backup command against the live file, or use a sidecar backup container. Raw cp of a WAL mode database can copy a torn page.
Notice an outdated path? Let us know.