Almost every mainstream password manager is now a subscription. LastPass, 1Password, Dashlane, NordPass, Keeper, RoboForm — all of them. The category, like every consumer software category, has consolidated around recurring revenue.
There is still a category of password managers without a subscription. It's smaller than it used to be. The products that remain are interesting precisely because they remain — they made deliberate choices that subscription products didn't.
This is the honest 2026 buyer's guide to no-subscription password managers, what you actually get for a one-time payment, where the trade-offs are, and how to think about the choice.
Why Most Password Managers Charge Recurring Fees
Worth saying upfront: subscription pricing isn't always wrong. Cloud-synced password managers run servers. Servers cost money to run, secure, and audit. The vendor needs cash flow that matches the cost of providing the service. Subscription pricing maps neatly to ongoing operating cost.
It also has a secondary effect: it caps the size of the no-subscription category. The cloud architecture and the subscription model are structurally linked. If you want a synced multi-device vault accessible via web and browser extensions, you're going to be paying someone, somewhere, every year.
The no-subscription category therefore tends to share an architectural pattern: local-only or self-hosted. No vendor server, no recurring server cost, no subscription required. That's the trade — pricing freedom in exchange for sync limitations.
If you specifically want cross-device cloud sync without the subscription, the only realistic answer in 2026 is self-hosting Bitwarden / Vaultwarden, which is "no subscription to a vendor" but very much "ongoing server cost to you."
The Options Worth Knowing
Five products in 2026:
- SecureKeep — $7.99 one-time, local-only, mobile-only
- Bitwarden Free — $0, cloud-synced, ad-free, genuinely useful
- Bitwarden self-hosted (Vaultwarden) — $0 software, your own server costs
- KeePass / KeePassXC family — $0, file-based, technical
- Apple Passwords — $0 (with iCloud), Apple-only
We'll cover each.
SecureKeep — $7.99 once
The proposition: a $7.99 one-time-purchase encrypted vault for iOS and Android, with multi-vault for households, an Emergency Card for medical and contact information, voice and video messages, encrypted document storage, password health analysis, and CSV import from seven password managers (Chrome, Edge, Brave, Apple Passwords, LastPass, Bitwarden, 1Password v8, Dashlane).
The architecture: local-only. The encrypted vault lives on your device. There is no SecureKeep server holding a copy. There is no SecureKeep account. There is no recurring relationship.
What you get for $7.99:
- Unlimited credentials, documents, notes, voice/video messages
- Multi-vault on one device (one trusted person, one device, multiple people's vaults)
- Emergency Card per vault, exportable as PDF or wallet image
- TOTP (one-time-password) storage, structured separately from the password
- Password health dashboard (reuse, weak passwords, age tracking)
- Password generator with rejection sampling
- Biometric unlock (Face ID / Touch ID / fingerprint)
- Auto-lock on inactivity and on backgrounding
- Face-down panic lock
- Encrypted backup files (passphrase-protected) for portability
- iOS and Android, including iPad
What you don't get:
- Desktop apps (no Mac, Windows, Linux)
- Browser extensions
- Cross-device cloud sync
- Real-time multi-user collaboration
- Open-source code (the encryption primitives are standard library calls, but the application layer is closed source)
- Hardware security key support
When it's the right call: households where one person handles the digital steward role, primarily on mobile, who want a real legacy story (Emergency Card, voice messages, multi-vault) without an ongoing subscription.
Bitwarden Free — $0
Bitwarden is the most architecturally honest password manager in the mainstream market. The free tier is genuinely useful — unlimited passwords, unlimited devices, sync, browser extensions, mobile and desktop apps. Most users don't need to upgrade.
The paid Premium tier ($10/year) adds TOTP storage, file attachments (1GB), hardware security key support, and emergency access. The Families tier ($40/year) adds shared collections for up to 6 users.
When it's the right call: technical users who want the strongest open-source synced manager, value the free tier honestly, and are OK with their encrypted vault syncing to Bitwarden's infrastructure.
We wrote a full Bitwarden vs SecureKeep comparison here.
Bitwarden self-hosted (Vaultwarden) — software is free, your server costs are real
Vaultwarden is a Rust reimplementation of the Bitwarden Server, fully compatible with the Bitwarden mobile, desktop, and browser clients. Run it on a server you control — a Raspberry Pi at home, a $5/month VPS, a NAS — and you get a fully synced password manager with no vendor dependency.
What you pay for:
- The server itself (hardware or VPS hosting)
- Your time to set it up and maintain it (security patches, backups, TLS certificates, uptime)
- Your accountability for keeping it secure
When it's the right call: technical users who run servers, want the open-source code path, and treat the maintenance work as worth doing. For everyone else, this is a much bigger commitment than it looks.
KeePass / KeePassXC family — $0, file-based, technical
The KeePass ecosystem is the original no-subscription password manager: a single encrypted file (.kdbx) that you store and sync wherever you want. KeePassXC is the most actively maintained desktop client; KeeWeb is web-based; Strongbox is iOS; Keepass2Android is Android.
What you get:
- A single encrypted file you control
- Free across all platforms via different clients
- Open-source format, audited extensively, well understood
- Sync via whatever you choose (Dropbox, iCloud, USB stick)
What you don't get:
- A unified product experience — different clients have different UIs, feature sets, and quirks
- Browser extensions that "just work" without configuration
- A polished family-vault model — KeePass stores groups within a single file, not multiple separate vaults
- Emergency Card, voice messages, document storage as first-class features
When it's the right call: technical users who want maximum control over the file and don't mind UI inconsistency across platforms.
Apple Passwords — $0 (with iCloud)
Apple Passwords (the dedicated app introduced in iOS 18 / macOS Sequoia, formerly part of Safari and System Settings as iCloud Keychain) is technically free. iCloud Keychain syncs your credentials across Apple devices via iCloud at no extra cost beyond an Apple account.
What you get:
- Tight integration with Safari and AutoFill
- Cross-device sync within the Apple ecosystem
- Family Sharing for shared passwords (streaming services, household accounts)
- No new app to install
What you don't get:
- Cross-platform support — Apple Passwords doesn't run on Android, Windows, or Linux
- Emergency Card, voice messages, document storage
- A real family-vault model for non-Apple users
- Independence from iCloud
When it's the right call: solo Apple users who genuinely never need cross-platform access and want the simplest possible setup. Best paired with a backup elsewhere — relying on a single ecosystem for credentials your family will need is a real risk.
The Honest Comparison
| SecureKeep | Bitwarden Free | Vaultwarden | KeePassXC | Apple Passwords | |
|---|---|---|---|---|---|
| Cost | $7.99 once | $0 | $0 software + your server | $0 | $0 (with iCloud) |
| Sync | None (backup files) | Bitwarden cloud | Your server | Your sync (Dropbox, iCloud, USB) | iCloud |
| Mobile | iOS + Android | iOS + Android | iOS + Android | Strongbox / Keepass2Android | iOS |
| Desktop | No | macOS, Windows, Linux | macOS, Windows, Linux | macOS, Windows, Linux | macOS |
| Browser extensions | No | Yes | Yes | Via add-ons | Safari only |
| Open source | No | Yes | Yes | Yes | No |
| Family vault model | Multi-vault on one device | Shared organizations (Premium) | Shared organizations | Groups in a single file | Family Sharing |
| Emergency Card / medical info | Yes | No | No | No | No |
| Voice / video messages | Yes | No | No | No | No |
| Document attachments | Yes (encrypted on disk) | Premium ($10/yr) | Yes | Yes (in .kdbx) |
No |
| CSV import from LastPass et al. | Yes (v3.0.0) | Yes | Yes | Yes (varies by client) | Limited |
How to Choose
The decision tree:
- You want zero ongoing cost AND zero ongoing maintenance, and you're OK with mobile-only. → SecureKeep at $7.99 once.
- You want zero cost, you want sync across many devices, and you trust the Bitwarden cloud. → Bitwarden Free.
- You're technical, you run servers, and you want full self-hosting. → Vaultwarden.
- You're technical, you want maximum file-level control, and you don't mind UI inconsistency. → KeePassXC + your platform's client.
- You're a solo Apple user, you live entirely in the Apple ecosystem, and you want zero new apps. → Apple Passwords. (Also keep a backup somewhere.)
Subscription products serve a real audience and there's no shame in paying for one. The products in this guide just exist — and have continued to exist for a long time — because not every household wants a recurring relationship with their password manager.
Frequently Asked Questions
Why isn't there a "free" tier for SecureKeep? Because $7.99 is small enough to make the question moot, and a free tier with paywalled premium features is exactly the model SecureKeep is positioning against. The whole product is the product. Pay once, own it forever, get every update we ship.
What about the $7.99 the App Store charges? The App Store collects $7.99 from you and remits ~$5.59 to us after Apple's 30% cut (or ~$6.79 after the small-business 15% cut, which we qualify for). The price is set knowing that. You pay it once.
Why not free with ads? No. A password manager runs on the trust that the developer's incentives are aligned with your privacy. Ad-supported pricing creates a structural conflict. We'd rather charge once and be honest about it.
Can I get a refund? App Store and Play Store refund policies apply — both platforms allow refund requests for paid apps. Reach out via the in-app feedback if you have questions; we'll help where we can.
Does the $7.99 cover updates forever? Yes. The version you bought is yours, and any free updates we release for that version are yours too. If we ever release a major paid upgrade, your existing purchase still works on its current version.
Does SecureKeep make money any other way? No advertising. No data sales. No analytics on vault contents (we couldn't read them if we wanted to — the architecture doesn't allow it). The only revenue is the one-time $7.99 purchase.
What about families with both iPhone and Android users? SecureKeep runs on both. Each device buys the app once (on the App Store or Play Store respectively). The vaults are independent — you'd maintain each person's vault on the appropriate device. Encrypted backup files are portable across iOS and Android if needed.
Related reading:
- The Best LastPass Alternative for Families in 2026
- 1Password vs SecureKeep: Subscription vs One-Time Pricing
- Bitwarden vs SecureKeep: Cloud Sync vs Local-Only
- Why SecureKeep Has No Login Screen: The Local-Only Vault Explained
SecureKeep is a $7.99 one-time-purchase encrypted vault for iOS and Android. Multi-vault, emergency cards, voice messages, password health, CSV import from seven password managers — all encrypted locally, no cloud account required. See all features →