Pricing
Simple plans. Serious security.
Every plan uses the same zero-knowledge encryption. Upgrade for more devices, sharing, policies and audit — never for basic security.
Same encryption on every plan Cancel any time
Free $0Personal $1.49Family $3.49 for 6 peopleProfessional $7.99Team $3.99 a userBusiness $8.49 a userEnterprise $14.99 a userPer month, billed yearly, in US dollars. Taxes may apply.
Plans
A clear plan for every way you work.
Every plan has the same end-to-end encryption. Compare every feature.
Loading the verified plan catalog…
Checkout uses the Paddle sandbox only: test cards, no real charges. Displayed amounts are the v2.2 test catalog. Cancel any time · 30-day money-back guarantee (refund policy).
Compare plans
What every plan includes
The same end-to-end encryption on every plan. Paid plans add people, sharing and controls for organizations.
| Feature | Team | Business | Enterprise |
|---|---|---|---|
| Vault & security | |||
| End-to-end encrypted vaultUnlimited passwords, notes and cards, encrypted on your device. We can't read it. | Included in Team | Included in Business | Included in Enterprise |
| Passkeys, 2FA codes and file attachmentsStore passkeys and one-time codes (TOTP). Files up to 25 MB each. | Included in Team | Included in Business | Included in Enterprise |
| Two-step verification, passkey sign-in and text-message codes | Included in Team | Included in Business | Included in Enterprise |
| Six ways back in when you lose your 2FA phoneRecovery codes, another signed-in device, a text message, trusted contacts who confirm a code you read out, your admin, or a cancellable 24-hour wait. Your vault still needs your vault password. | Included in Team | Included in Business | Included in Enterprise |
| Password health and breach checksChecked against Have I Been Pwned without sending your passwords. | Included in Team | Included in Business | Included in Enterprise |
| New sign-in alerts and session control | Included in Team | Included in Business | Included in Enterprise |
| Sign-in risk score on every sign-inPasskey-X scores each sign-in 0–100 (new device, network or country, impossible travel, many networks, unusual time) and shows it in Security center with “Sign out everywhere else”. | Included in Team | Included in Business | Included in Enterprise |
| Rotation assistantChange breached, reused and weak passwords one at a time without getting locked out. | Included in Team | Included in Business | Included in Enterprise |
| Breach WatchWeekly re-checks with an alert when a saved password shows up in a new breach. | Included in Team | Included in Business | Included in Enterprise |
| Emergency access for trusted contacts | Included in Team | Included in Business | Included in Enterprise |
| Vault recovery with trusted contactsA number of people you choose must approve before you can set a new vault password. | Included in Team | Included in Business | Included in Enterprise |
| Travel modeHide chosen vaults from all your devices while you cross a border. | Included in Team | Included in Business | Included in Enterprise |
| Vault tripwiresDecoy logins that raise a critical alert the moment anyone opens, copies or fills them. Only owners can tell which items are decoys. | Included in Team | Included in Business | Included in Enterprise |
| Import and encrypted export1Password, Bitwarden, LastPass, Dashlane, Keeper, Chrome, Edge and more. | Included in Team | Included in Business | Included in Enterprise |
| Apps & devices | |||
| Devices | Unlimited | Unlimited | Unlimited |
| Web app and browser extension | Included in Team | Included in Business | Included in Enterprise |
| Desktop apps for Windows, macOS and LinuxOffline access, auto-type and Windows Hello unlock. | Included in Team | Included in Business | Included in Enterprise |
| Android appAutofill, passkeys, sign-in codes and browser protection. | Included in Team | Included in Business | Included in Enterprise |
| SSH agent and command-line secretsIn the desktop app. Every use is approved by you. | Included in Team | Included in Business | Included in Enterprise |
| AutomationsScheduled checks and reminders for your work accounts. | Included in Team | Included in Business | Included in Enterprise |
| Computer security checks (Micro Agent / Controller)A 6 MB background agent (no vault) that scores each computer: disk encryption, firewall, screen lock, updates, plain-text secrets, unprotected SSH keys and passwords left in browsers. Sends only yes/no answers and counts. | Company fleet | Company fleet | Company fleet |
| Encrypted file storageFor attachments and documents. Organizations share one pool; add 100 GB storage packs at any time. | 1 GB per seat | 2 GB per seat | 5 GB per seat |
| Storage packs (100 GB each) | Add-on | Add-on | Add-on |
| Passkey-X Remote: remote support and screen sharingHelp people on their computers and Android phones with a code, an invite link or one click; they allow view or control. Many people can watch one screen. Optional encrypted recording and chat transcripts (they use your storage). Per technician seat; Professional includes 1. | Add-on | Add-on | 2 seats + add-on |
| Update and support notices in every appEach app tells you when a newer version is out and when yours is no longer supported. | Included in Team | Included in Business | Included in Enterprise |
| Managed deploymentGroup Policy / Intune (ADMX), macOS MDM profile and Linux policy file. | Included in Team | Included in Business | Included in Enterprise |
| Workspace | |||
| Workspace launch pageYour sites and apps as tiles with their own image or color: one click opens the site and fills the login. The image is encrypted with the item. | Included in Team | Included in Business | Included in Enterprise |
| Company apps for departments, teams and peoplePublish organization logins to everyone, a department, a team, a group or chosen people, optionally with access (use-only). New hires see them on day one. | Included in Team | Included in Business | Included in Enterprise |
| Controller: company computers | |||
| Signed device settingsScreensaver and screen lock, wallpaper, lock-screen message, firewall, automatic OS updates, USB storage, remote desktop and the guest account, in groups. Every baseline is signed with your organization key; computers refuse anything unsigned. | Not included in Team | Included in Business | Included in Enterprise |
| Report-only mode and driftSee what a baseline would change on each computer before you enforce it, and which computers drifted since. | Not included in Team | Included in Business | Included in Enterprise |
| Passkey-X app settings and staged updatesManaged app settings, a minimum version, update rings with rollout %, maintenance windows and an automatic stop when updates fail. | Not included in Team | Included in Business | Included in Enterprise |
| Remote actionsLock, message, restart or shut down, sync, diagnostics, lost mode and wiping Passkey-X data, with a signed, tamper-evident record of every result. | Not included in Team | Included in Business | Included in Enterprise |
| Offline lockdownA computer that can't reach Passkey-X for the days you choose removes the Passkey-X data on it by itself. | Not included in Team | Included in Business | Included in Enterprise |
| Install and remove software in the backgroundwinget, Homebrew, apt and dnf, or your own installer checked by SHA-256; required and blocked apps per group. | Not included in Team | Not included in Business | Included in Enterprise |
| Local admin passwords (rotated and escrowed)Each computer sets its own random admin password, sealed to your organization's key. Check one out with a reason; it changes again after use. | Not included in Team | Not included in Business | Included in Enterprise |
| Just-in-time admin rightsPeople ask from the Passkey-X app; IT approves; the rights end by themselves after 15 minutes to 4 hours, even offline. | Not included in Team | Not included in Business | Included in Enterprise |
| Computer logins and two-person approvalGive a group's vault to whoever signs in on its computers (use-only, 12 hours at a time), and require a second admin for sensitive actions. | Not included in Team | Not included in Business | Included in Enterprise |
| Sharing | |||
| Secure SendEncrypted links that expire after a set time and number of views. | Included in Team | Included in Business | Included in Enterprise |
| Share a single item by verified link | Included in Team | Included in Business | Included in Enterprise |
| People | 3–50 seats | 5–500 seats | 10–500 seats (more with Custom) |
| Separate vaultsExtra vaults that only you use, to keep things apart (for example work and home). Inviting people to a vault needs Family or Team. | 100 | 100 | 100 |
| Shared vaults with view, edit and manage roles | Included in Team | Included in Business | Included in Enterprise |
| Use-only accessPeople sign in with a password but cannot see or copy it. | Included in Team | Included in Business | Included in Enterprise |
| External guestsGuests don't use a paid seat. More can be added. | 5 | 2 per seat | Unlimited |
| Onboarding access bundlesGive vault access by department, team or group automatically. | Not included in Team | Included in Business | Included in Enterprise |
| Access requests and approvals | Not included in Team | Included in Business | Included in Enterprise |
| Protection | |||
| Dangerous-site blockingSites in the Passkey-X threat database (phishing, scams, malware) show the Blocked page in the extension, in every browser with the desktop app and on Android. Checked by hash; your browsing is never sent. Request an unblock if one is wrong. | Included in Team | Included in Business | Included in Enterprise |
| Passkey-X AI scam checksPer person per day, for links, login pages and messages nobody checked before. Answers already in the shared database are free and unlimited. | 500 a day | 1,500 a day | 4,000 a day |
| Report scam websites and emailsPasskey-X AI reviews every report; clear scams are blocked for everyone. Up to 20 reports a day. | Included in Team | Included in Business | Included in Enterprise |
| Your own blocked sitesBlocked on all your devices, with CSV import and export. | Up to 5,000 | Up to 5,000 | Up to 5,000 |
| Desktop protection in the backgroundChecks every browser extension and newly installed program against the Passkey-X threat database, shows the Blocked page in any browser, and warns about secrets on the clipboard, unsafe Wi-Fi and risky network connections. | Included in Team | Included in Business | Included in Enterprise |
| Family and organization site blockingAdmins block sites for everyone, see blocked pages on every device and decide unblock requests (Threat Center). | Included in Team | Included in Business | Included in Enterprise |
| Employee breach watch | Not included in Team | Included in Business | Included in Enterprise |
| Security operations | |||
| Organization sign-in risk dashboardMedium and high-risk sign-ins by day and by reason, and the people most at risk. | Included in Team | Included in Business | Included in Enterprise |
| Incidents with response playbooksChecklists for a compromised account, lost device, departed employee, phishing click, breach exposure and insider risk, with one-click “sign out everywhere”. | Included in Team | Included in Business | Included in Enterprise |
| Automatic incident for high-risk sign-ins | Included in Team | Included in Business | Included in Enterprise |
| Automatically sign out high-risk sessionsThe risky session is signed out within a minute. | Not included in Team | Included in Business | Included in Enterprise |
| Device trust policyRequire a screen lock, disk encryption, system updates, a genuine app and a supported Passkey-X version. Team plans warn; Business and Enterprise can keep vaults closed on a device until it is fixed. | Warn | Warn or block | Warn or block |
| Trust Index and insightsA 0–100 score for your organization, single points of failure, unused access and the actions that raise the score most. | Included in Team | Included in Business | Included in Enterprise |
| Organization platform | |||
| Storage report and Runway forecastUsage by vault, department and person, with a forecast of when the pool fills up. | Included in Team | Included in Business | Included in Enterprise |
| Company groupsA parent organization with subsidiaries: one report across every company and storage moved where it is needed. | Not included in Team | Included in Business | Included in Enterprise |
| Passkey-X Sign: request signaturesSend a document for signature by link, sealed and verifiable in the Seal Chain. An add-on for any plan: one price covers your account, family or organization. | Add-on | Add-on | Included in Enterprise |
| Teams & administration | |||
| Admin console, audit log and security alerts | Included in Team | Included in Business | Included in Enterprise |
| Admin safeguardsTwo-step required for admins, a second admin's approval, admin rights that expire. | Included in Team | Included in Business | Included in Enterprise |
| Reset a member's lost two-step verificationAdmins (never for themselves) and Family owners. | Included in Team | Included in Business | Included in Enterprise |
| Enforced security policiesPassword, export, reveal, trusted-country and desktop policies. | Not included in Team | Included in Business | Included in Enterprise |
| Departments, teams and groups | Not included in Team | Included in Business | Included in Enterprise |
| Admin rolesOrganization, security, billing and helpdesk admins and auditors. Admin roles are available on Team and Business. | Included in Team | Included in Business | Included in Enterprise |
| Custom roles | Not included in Team | Included in Business | Included in Enterprise |
| Onboarding vaults and access handoverPrepared starting accounts for new hires; a leaver's vaults go to a successor with a rotation queue. | Not included in Team | Included in Business | Included in Enterprise |
| Organization break-glass access | Not included in Team | Included in Business | Included in Enterprise |
| Passkey adoptionSee who signs in with a passkey and nudge the rest. | Included in Team | Included in Business | Included in Enterprise |
| Rotation campaignsAsk people to change risky passwords by a deadline and track it. | Not included in Team | Included in Business | Included in Enterprise |
| Access reviews, compliance and weekly reports | Not included in Team | Included in Business | Included in Enterprise |
| Identity & compliance | |||
| SAML single sign-on | Not included in Team | Included in Business | Included in Enterprise |
| SCIM user and group provisioning | Not included in Team | Included in Business | Included in Enterprise |
| Audit streaming to your SIEMSplunk, Datadog, Microsoft Sentinel, Elastic or a signed webhook. | Not included in Team | Included in Business | Included in Enterprise |
| Self-hosting on your own serversRun the Passkey-X server on your infrastructure with the Docker bundle and point every app at it. Part of a Custom (Enterprise contract) agreement. | Not included in Team | Not included in Business | Available |
| Developers & automation | |||
| Agents for scripts and CIRead-only service identities. More can be added. | 2 | 10 | Unlimited |
| Personal API keysCustomer API keys (pxu_) for your own scripts: scoped, expiring, limited to your IP addresses if you like, with one-hour test keys and an activity log. | Included in Team | Included in Business | Included in Enterprise |
| Organization API keysOrganization API 1.7 with OpenAPI 3.1: audit, alerts, members, onboarding, handover, storage, documents and signatures, webhooks with event subscriptions, sign-in risk, incidents, device trust, the Controller and Remote. | Not included in Team | Included in Business | Included in Enterprise |
| Slack and Microsoft Teams alerts | Not included in Team | Included in Business | Included in Enterprise |
| Plan | |||
| Free trial | 21 days | 21 days | 21 days |
| Billing | Per seat | Per seat | Per seat, or a Custom contract |
Extra guests and agents can be added to Team and Business; Enterprise includes them without limit. More than 500 people, contracts or self-hosting: Custom.
Can I start free?
Yes. The Free plan includes the full encrypted vault. Upgrade any time from Plans & billing inside the app.
How do free trials work?
Paid plans that offer a free trial show its length on the plan card. Your plan activates only after our payment provider confirms it with a signed webhook.
How are Team and Business billed?
Per user, with a minimum seat count. Volume discounts apply automatically from 100 seats. To change the number of seats later, contact support and we update it for you.
Who handles my card details?
Checkout and billing are handled by Paddle, our reseller and merchant of record. Passkey-X never receives card numbers or vault contents.
What are guest and agent add-ons?
Team and Business include some guests (people outside your organization you share chosen items with) and agents (scoped identities for scripts, CI and AI tools). Add more any time in Plans & billing; Paddle prorates the change.
Is there a discount for larger teams?
Yes. Yearly billing costs less than monthly, and Business and Enterprise get 5% off from 100 seats and 10% off from 250 seats, applied automatically at checkout. Custom volume terms start at 500 users.
What is the difference between Enterprise and Custom?
Enterprise is a plan you buy online for 10 to 500 people: everything in Business plus Controller Enterprise, Passkey-X Sign, 2 Remote seats, managed SIEM and device trust, at $14.99 a user a month billed yearly. Custom is for more than 500 people or special terms: a contract and invoicing, volume pricing, rollout help, roadmap commitments and the option to self-host Passkey-X on your own servers.
How does Passkey-X compare on price?
Personal is $1.49 a month and Family $3.49 for six people, billed yearly. See /compare for prices and features next to 1Password, Bitwarden, Keeper, Dashlane, LastPass, NordPass and Proton Pass.
Not sure which plan fits?
Tell us about your team and we’ll recommend a plan and rollout.