Vaultwarden in Switzerland on Anubiz Host VPS
Switzerland is the European jurisdiction most users name first when they think privacy hosting, and for a password vault that intuition is broadly correct. The new Federal Act on Data Protection (nFADP) took effect 1 September 2023, the country is not in the EU and not in the Fourteen Eyes, and federal neutrality plus the absence of a compelled key disclosure law means a self-hosted Vaultwarden is sitting on solid ground. Network latency to Frankfurt is 15 ms and to Milan under 10 ms. This guide covers picking the Anubiz Host Switzerland VPS, Docker compose, Argon2id KDF, reverse proxy details for Bitwarden mobile push notifications, and backup to an Iceland secondary.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Why Switzerland
nFADP modernised data protection law: 333 articles, fines up to CHF 250k for serious breaches, breach notification within 72 hours. The country is not in the EU or Fourteen Eyes. The Federal Surveillance Service (NDB) targets terrorism and foreign intelligence and the law specifically excludes routine domestic surveillance of citizens or hosting customers. No key escrow. The Federal Data Protection and Information Commissioner (FDPIC) is independent.
VPS Sizing
Anubiz Host Switzerland VPS 1 GB is sufficient for up to 15 active users. The 2 GB tier handles larger teams plus optional ancillary services (matrix-synapse, mailman, monitoring). NVMe storage; IPv4 plus /64 IPv6.
Deployment Specifics
Docker compose with vaultwarden plus Caddy. Bind vault to localhost. DOMAIN=https://vault.example.ch. Set push notifications: register at https://bitwarden.com/host/ for the official notification relay (works with Vaultwarden because the API surface matches), set PUSH_ENABLED=true, PUSH_INSTALLATION_ID and PUSH_INSTALLATION_KEY. Without this iOS and Android push notifications fall back to polling and battery suffers.
Argon2id KDF
Argon2id, 64 MiB, 3 iterations. Mandatory for all accounts.
Encryption Truth
End to end encrypted vault items; opaque to server admins. Visible to disk attackers: email, 2FA, organisation names, attachment sizes. The Swiss legal context cannot decrypt your ciphers either; the protection comes from your master password, not from the jurisdiction.
Backups
Restic to Anubiz Host Iceland twice daily. Independent repository password. 14 daily, 8 weekly, 12 monthly retention. Restore drill monthly.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.