Priced per five people, not per person
Free is a complete vault for one person. Paid plans are billed per block of five users, with a minimum of one block — so they are cheap for a team and not especially cheap for an individual.
That is the whole shape of it, said at the top rather than discovered at checkout. Below: what each plan holds, how the blocks add up at real team sizes, and what no plan buys because the product does not have it yet.
Free
$0one person, no card, no trial to expire
A real vault for one person — not a sampler.
500 items
- The same cryptography as every paid plan. Encryption does not improve with price.
- Folders, version history, expiry reminders and multi-factor sign-in
- Public share links, capped per month
- No second user, no groups, no breach monitoring
Where one person should start.
Basic
$5per block of five users, per month
$1.00 per user, but only at a full block
For a team that needs shared folder access.
1,000 items
- Unlimited users, billed five at a time
- Groups, so a folder can be opened to more than one person
- Breach monitoring on every saved password
- A workspace-wide auto-lock ceiling across web, extension and mobile
The first plan where a second person is possible.
Premium
$9per block of five users, per month
$1.80 per user, but only at a full block
For a team with an identity provider and an auditor.
10,000 items
- Single sign-on with OIDC and SAML, on verified domains
- A full year of audit log, readable and retained
- API access with scoped keys
- Everything in Basic
How the blocks add up
A block is five users. Your workspace is billed for as many blocks as it takes to cover everyone in it, rounded up, and never fewer than one. Adding a sixth person to a five-person workspace opens a second block; removing them closes it again at the next sync.
The rounding is the part worth reading twice. At a full block the price per person is as low as it gets; one person into a new block pays for five. The table below is the real arithmetic at a handful of team sizes, not an illustration.
| People | Blocks | Basic | Premium |
|---|---|---|---|
| 1 | 1 | $5 | $9 |
| 5 | 1 | $5 | $9 |
| 6 | 2 | $10 | $18 |
| 12 | 3 | $15 | $27 |
| 25 | 5 | $25 | $45 |
A single person on a paid plan pays a full block. If you are one person, the free plan is almost certainly the right answer — it holds a real vault, and nothing about the encryption is different.
The free plan is for exactly one person
Not "one person to begin with". One person, structurally. A free workspace is capped at one user and at zero groups, and a group is the only thing that can grant another person access to a folder — access is granted by re-wrapping that folder's key for a group, so with no groups there is no one to wrap it for.
This is not a soft limit you would bump into and then upgrade around. It means a free workspace has no mechanism for a second person at all, which is worth knowing before you invite a colleague and find there is nowhere for them to go.
What free does give you is a vault you can genuinely live in: hundreds of items, the full folder structure, version history on every change, expiry reminders, multi-factor sign-in, the browser extension, both mobile apps, and a monthly allowance of public share links. It is the same client and the same cryptography a paying customer gets.
The moment you need a second person, you need a paid plan — and a paid plan starts at a full block of five. That is the real upgrade step, and it is a step rather than a slope.
The trial asks for no card
Both paid plans start with a seven-day trial that begins when you sign up. No payment method is collected, and nothing is charged during it.
If the trial ends with no card on file, the subscription is paused rather than billed. A paused workspace is locked — your data is untouched and you can still sign in, reach billing, and export or deactivate — but the vault is not readable until a payment method is added. Nothing is deleted and nothing is charged.
Every limit, on one screen
These are the numbers the server actually enforces, not a summary of them. A limit is per workspace and counts what is already in it.
| Free | Basic | Premium | |
|---|---|---|---|
| Users | 1 users | Unlimited | Unlimited |
| Vault items | 500 items | 1,000 items | 10,000 items |
| GroupsHow folder access is shared. Zero on free is why free is single-person. | 0 | 50 | 500 |
| Audit logBoth how far back you can read and how long the events are kept. | 7 days | 30 days | 365 days |
| Public share linksThe only sharing that reaches outside the workspace. Resets monthly. | 10 per month | 20 per month | 1,000 per month |
| Breach monitoring | Not included | Included | Included |
| Workspace auto-lock ceilingEvery plan lets each person set their own auto-lock timeout per surface. Capping all three workspace-wide is the paid part. | Not included | Included | Included |
| Single sign-on (OIDC, SAML) | Not included | Not included | Included |
| API access | Not included | Not included | Included |
What no plan buys
Said here rather than left to be inferred from a table of ticks. These are not roadmap teases; they are things the product does not do today, on any plan, at any price.
- Person-to-person sharing. You cannot hand an item to a named colleague. Folder access via a group, and a temporary public link, are the two sharing mechanisms that exist.
- Organisation-wide or cross-team vaults. Organisations and groups exist as structure; there is no separate shared-vault surface on top of them.
- A Firefox or Safari extension. The browser extension is Chrome and Edge. The web vault works in any modern browser, and there are iOS and Android apps.
- Storage for your two-factor secrets. That is deliberate and it is not coming — a password and its second factor in one store are not two factors. The Authenticator is a separate product for exactly that reason.
The questions the pricing actually raises
- I am one person. What does Basic cost me?
- A full block: the same as a team of five. There is no single-user price on a paid plan, because a block is the unit that is billed and the minimum is one block. If you are one person and the free plan's item limit fits, free is the better answer — the cryptography is identical and there is no trial to expire.
- What happens when I add a sixth person?
- Your workspace moves to two blocks and the price doubles. Blocks are recounted after every membership change and converged with Stripe, so the change lands immediately rather than at the end of the month. Removing that person moves you back to one block.
- Is there a user limit on a paid plan?
- No. Both paid plans are unlimited on users — the cap that used to exist was removed when block billing arrived. What grows is the number of blocks, five users at a time. The item, group and share limits are still per plan.
- Can I try a paid plan without a card?
- Yes, for seven days, and that is the only trial. No payment method is collected at sign-up. If the trial ends without one, the subscription is paused instead of charged: the workspace locks, your encrypted data stays exactly where it was, and you can still sign in to add a card, export, or close the workspace.
- Why is the free plan capped at one user?
- Because sharing a folder means giving a group its own copy of that folder's key, and the free plan allows no groups. It is a cryptographic limit rather than a billing switch, which is also why it is absolute: there is no second-user state a free workspace can be in.
- What counts towards the item limit?
- Every item currently in the workspace, of every type — logins, secure notes, cards, keys, documents. Deleted items do not count once they are gone. The import screen shows the room remaining before it uploads anything, and refuses an import that would exceed it.
- Do I need Premium to get the good encryption?
- No, and there is no version of this product where you would. Key derivation, item encryption and the zero-knowledge model are identical on every plan, free included. Premium buys single sign-on, a year of audit log and API access — organisational features, not stronger cryptography.
- What happens to my data if I stop paying?
- The workspace locks and the data stays. A paused or unpaid subscription blocks the vault routes but leaves the authentication, billing and settings routes open, so you can always sign in, settle up, or deactivate the workspace deliberately. Nothing is deleted as a side effect of billing.
- Is there an annual price?
- No. Both paid plans are monthly, per block, and can be cancelled from the billing portal at any time.
Start on free and move when you have to
A free workspace takes a minute to create, needs no card, and holds a real vault. If you already know you need a second person, start the trial on a paid plan instead — it also needs no card.
- Prices are in US dollars and exclude any tax your local rules add at checkout. Billing is handled by our merchant of record.
- Every plan may hold up to 1,000 folders. That figure is an abuse guard rather than a plan difference — it is the same on free as on Premium — and support can raise it for a workspace that legitimately needs more.