Almost every mainstream password manager is now a subscription. LastPass, 1Password, Dashlane, NordPass, Keeper, RoboForm: all of them. The category, like every consumer software category, has consolidated around recurring revenue.
There is still a category of password managers without a subscription. It's smaller than it used to be. The products that remain are interesting precisely because they remain: they made deliberate choices that subscription products didn't.
This is the 2026 buyer's guide to no-subscription password managers: what you actually get for a one-time payment, where the trade-offs are, and how to think about the choice.
Why most password managers charge recurring fees
Worth saying upfront: subscription pricing isn't always wrong. Cloud-synced password managers run servers. Servers cost money to run, secure, and audit. The vendor needs cash flow that matches the cost of providing the service. Subscription pricing maps neatly to ongoing operating cost.
It also has a secondary effect: it caps the size of the no-subscription category. The cloud architecture and the subscription model are structurally linked. If you want a synced multi-device vault accessible via web and browser extensions, you're going to be paying someone, somewhere, every year.
The no-subscription category therefore tends to share an architectural pattern: local-only or self-hosted. With no vendor server, there's no recurring server cost and no subscription to charge. That's the trade: pricing freedom in exchange for sync limitations.
If you specifically want cross-device cloud sync without the subscription, the only realistic answer in 2026 is self-hosting Bitwarden / Vaultwarden, which is "no subscription to a vendor" but very much "ongoing server cost to you."
The options worth knowing
Five products in 2026:
- SecureKeep: $7.99 one-time, local-only, mobile-only
- Bitwarden Free: $0, cloud-synced, ad-free, genuinely useful
- Bitwarden self-hosted (Vaultwarden): $0 software, your own server costs
- KeePass / KeePassXC family: $0, file-based, technical
- Apple Passwords: $0 (with iCloud), Apple-only
We'll cover each.
SecureKeep: $7.99 once
The proposition: a $7.99 encrypted vault for iOS and Android that you buy once, with multi-vault for households, an Emergency Card for medical and contact information, voice and video messages, encrypted document storage, password health analysis, and CSV import from seven password managers (Chrome, Edge, Brave, Apple Passwords, LastPass, Bitwarden, 1Password v8, Dashlane).
The architecture: local-only. The encrypted vault lives on your device, with no copy sitting on a server we run and no account tying you to us. There's nothing recurring about it.
What you get for $7.99:
- Unlimited credentials, documents, notes, voice/video messages
- Multi-vault on one device (one trusted person, one device, multiple people's vaults)
- Emergency Card per vault, exportable as PDF or wallet image
- TOTP (one-time-password) storage, structured separately from the password
- Password health dashboard (reuse, weak passwords, age tracking)
- Password generator with rejection sampling
- Biometric unlock (Face ID / Touch ID / fingerprint)
- Auto-lock on inactivity and on backgrounding
- Face-down panic lock
- Encrypted backup files (passphrase-protected) for portability
- iOS and Android, including iPad
What you don't get:
- Desktop apps (no Mac, Windows, Linux)
- Browser extensions
- Cross-device cloud sync
- Real-time multi-user collaboration
- Open-source code (the encryption primitives are standard library calls, but the application layer is closed source)
- Hardware security key support
When it's the right call: households where one person handles the digital steward role, mostly on mobile, and wants a real legacy plan (Emergency Card, voice messages, multi-vault) without an ongoing subscription.
Bitwarden Free: $0
Bitwarden is one of the most architecturally transparent password managers in the mainstream market. The free tier is genuinely useful: unlimited passwords, unlimited devices, sync, browser extensions, mobile and desktop apps. Most users don't need to upgrade.
The paid Premium tier ($10/year) adds TOTP storage, file attachments (1GB), hardware security key support, and emergency access. The Families tier ($40/year) adds shared collections for up to 6 users.
When it's the right call: technical users who want a strong open-source synced manager, take the free tier at face value, and are OK with their encrypted vault syncing to Bitwarden's infrastructure.
We wrote a full Bitwarden vs SecureKeep comparison here.
Bitwarden self-hosted (Vaultwarden): software is free, your server costs are real
Vaultwarden is a Rust reimplementation of the Bitwarden Server, fully compatible with the Bitwarden mobile, desktop, and browser clients. Run it on a server you control (a Raspberry Pi at home, a $5/month VPS, a NAS) and you get a fully synced password manager with no vendor dependency.
What you pay for:
- The server itself (hardware or VPS hosting)
- Your time to set it up and maintain it (security patches, backups, TLS certificates, uptime)
- Your accountability for keeping it secure
When it's the right call: technical users who run servers, want the open-source code path, and treat the maintenance work as worth doing. For everyone else, this is a much bigger commitment than it looks.
KeePass / KeePassXC family: $0, file-based, technical
The KeePass ecosystem is the original no-subscription password manager: a single encrypted file (.kdbx) that you store and sync wherever you want. KeePassXC is the most actively maintained desktop client, KeeWeb is web-based, Strongbox covers iOS, and Keepass2Android covers Android.
What you get is a single encrypted file you control, free across every platform through those different clients, in an open-source format that's been audited extensively and is well understood. You sync it however you like: Dropbox, iCloud, a USB stick. What you give up is a unified product experience, since each client has its own UI, feature set, and quirks; browser extensions that work without configuration; and a polished family-vault model, since KeePass keeps groups inside one file instead of separate vaults. Emergency Card, voice messages, and document storage aren't first-class features here.
It's the right call for technical users who want maximum control over the file and don't mind UI inconsistency across platforms.
Apple Passwords: $0 (with iCloud)
Apple Passwords (the dedicated app introduced in iOS 18 / macOS Sequoia, formerly part of Safari and System Settings as iCloud Keychain) is technically free. iCloud Keychain syncs your credentials across Apple devices via iCloud at no extra cost beyond an Apple account.
What you get:
- Tight integration with Safari and AutoFill
- Cross-device sync within the Apple ecosystem
- Family Sharing for shared passwords (streaming services, household accounts)
- No new app to install
What you don't get:
- Cross-platform support: Apple Passwords doesn't run on Android, Windows, or Linux
- Emergency Card, voice messages, document storage
- A real family-vault model for non-Apple users
- Independence from iCloud
When it's the right call: solo Apple users who genuinely never need cross-platform access and want the simplest possible setup. Best paired with a backup elsewhere, since relying on a single ecosystem for credentials your family will need is a real risk.
The options side by side
| SecureKeep | Bitwarden Free | Vaultwarden | KeePassXC | Apple Passwords | |
|---|---|---|---|---|---|
| Cost | $7.99 once | $0 | $0 software + your server | $0 | $0 (with iCloud) |
| Sync | None (backup files) | Bitwarden cloud | Your server | Your sync (Dropbox, iCloud, USB) | iCloud |
| Mobile | iOS + Android | iOS + Android | iOS + Android | Strongbox / Keepass2Android | iOS |
| Desktop | No | macOS, Windows, Linux | macOS, Windows, Linux | macOS, Windows, Linux | macOS |
| Browser extensions | No | Yes | Yes | Via add-ons | Safari only |
| Open source | No | Yes | Yes | Yes | No |
| Family vault model | Multi-vault on one device | Shared organizations (Premium) | Shared organizations | Groups in a single file | Family Sharing |
| Emergency Card / medical info | Yes | No | No | No | No |
| Voice / video messages | Yes | No | No | No | No |
| Document attachments | Yes (encrypted on disk) | Premium ($10/yr) | Yes | Yes (in .kdbx) |
No |
| CSV import from LastPass et al. | Yes (v3.0.0) | Yes | Yes | Yes (varies by client) | Limited |
How to choose
The short version:
- If you want zero ongoing cost and zero ongoing maintenance, and you're fine with mobile-only, SecureKeep at $7.99 once.
- If you want zero cost with sync across many devices, and you trust the Bitwarden cloud, Bitwarden Free.
- If you're technical, run servers, and want full self-hosting, Vaultwarden.
- If you're technical, want maximum file-level control, and don't mind UI inconsistency, KeePassXC with your platform's client.
- If you're a solo Apple user living entirely in the Apple ecosystem who wants zero new apps, Apple Passwords (and keep a backup somewhere).
Subscription products serve a real audience, and there's no shame in paying for one. The products in this guide simply persist, and have persisted for a long time, because not every household wants a recurring relationship with their password manager.
Frequently asked questions
Why isn't there a "free" tier for SecureKeep? Because $7.99 is small enough to make the question moot, and a free tier with paywalled premium features is exactly the model SecureKeep is positioning against. You pay once and own it, and every update we ship for that version is included.
What about the $7.99 the App Store charges? The App Store collects $7.99 from you and remits ~$5.59 to us after Apple's 30% cut (or ~$6.79 after the small-business 15% cut, which we qualify for). The price is set knowing that. You pay it once.
Why not free with ads? No. A password manager runs on the trust that the developer's incentives are aligned with your privacy. Ad-supported pricing creates a structural conflict. We'd rather charge once and be upfront about it.
Can I get a refund? App Store and Play Store refund policies apply, and both platforms allow refund requests for paid apps. Reach out via the in-app feedback if you have questions; we'll help where we can.
Does the $7.99 cover updates forever? Yes. The version you bought is yours, and any free updates we release for that version are yours too. If we ever release a major paid upgrade, your existing purchase still works on its current version.
Does SecureKeep make money any other way? We don't run ads, sell data, or analyze vault contents (we couldn't read them if we wanted to, since the architecture doesn't allow it). The only revenue is the one-time $7.99 purchase.
What about families with both iPhone and Android users? SecureKeep runs on both. Each device buys the app once (on the App Store or Play Store respectively). The vaults are independent, so you'd maintain each person's vault on the appropriate device. Encrypted backup files are portable across iOS and Android if needed.
Related reading: