Pick the plan that fits how you work.

Start free and add what you need. Every plan encrypts sensitive fields on your device, and the comparison below explains what each feature means before you pay for it.

Every plan, feature by feature

Each row says in a sentence what the feature is. Open a row to see when you would need it and read more in a new tab. The plans for the group you picked are highlighted.

Compare up to three plans

Every plan compared, by capability
Capability Free Premium Solo Professional
Vaults and storageHow much you can keep, and how you can keep it apart.
How many people the plan covers.
Vaults beyond your Primary vault, which is always included.
How many logins, cards, notes and keys one vault can hold.
Space for files attached to items — scans, certificates, key files.
Logins, cards, identity documents, SSH keys, API credentials — each with fields that fit it.
Pick ChaCha20-Poly1305 for a vault instead of the default AES-256-GCM.
SharingGiving someone access without sending a password in a message.
Give another PulsVault user access to a single item.
A link that expires, to send a secret to anyone — even someone without an account.
Give someone read, edit or manage access to everything in a vault.
Let the people you share with pass access on, under your control.
Share directly with the other people on your family or organization plan.
Security and recoveryFinding weak spots early, and being able to undo a mistake.
A second step at sign-in, with an authenticator app or a passkey.
A score for your account, and which of your passwords are weak, reused or old.
Check whether your email address appears in known data breaches.
Remove the vaults you have not marked safe from your devices while you travel.
Previous versions of a password stay on the item.
Nightly encrypted snapshots, restored as a new vault so the live one is never overwritten.
DevicesWhich devices may unlock your vaults.
Devices you have told PulsVault to trust, so unlocking is quick there.
DevOps secrets and machine accessSecrets for pipelines, and checks that a stored credential still works.
Store secrets in namespaces and let a pipeline read them with its own key.
Set up a check for a stored credential and PulsVault tries it on a schedule.
How often a check may run.
How long the record of each check run is kept.
Every write adds a version, and earlier ones stay up to this limit.
The shared ceiling for everything your machine keys read.
Give a person or a team read or write access to part of your secrets.
Projects and tasksThe work about a credential, kept next to the credential.
Projects with ticket keys, tasks that point at a vault, item or secret, and one calendar of expiries and deadlines.
Hand a task to a teammate, with watchers.
A task can wait for a second person to approve it before its action runs.
Add other people to a project.
Teams and rolesWho may do what, once there is more than one of you.
Define your own roles with exactly the permissions a group needs.
An administrator’s view of the organization’s password health and policy compliance, as counts.
Audit and complianceA record of who did what, and a way to prove it was not altered.
How far back you can look at what happened on your account or in your organization.
Export the organization’s audit log to CSV or JSON, with activity dashboards.
Verify that the audit log’s hash chain is intact, and get signed receipts.
Stream audit events to your own monitoring pipeline.
An encrypted archive of the organization, delivered to storage you control and opened offline.
Your organization’s name and look on the pages your people use.
Billing and trialHow you pay, and how you try it first.
A flat price, a price per seat, or a contract.
Try the plan with its full access before you pay.

What does not change with the plan

The cryptography is not a paid tier. These hold on every plan, Free included.

How trials, seats and changes work

The rules you would otherwise find out by trying, in one place.

  • Try before you pay

    Every paid plan you can buy online starts with a free trial, once per account. During it you have the plan’s full access.

  • Seats are bought before people are invited

    On Team and Business you buy seats first and invite people into them, so the invoice never surprises you. A per-seat plan has a seat minimum.

  • Upgrading credits what you have already paid

    When you move up, you pay the new plan’s price minus an automatic credit for the unused time on your current plan.

  • When a plan ends, your data waits — briefly

    An ended trial or a cancelled plan is read-only for 14 days, then locked, and deleted after 90 days locked unless you subscribe. You do not drop to Free.

Questions people ask before choosing

Start with a vault only you can open

Create a free vault, and try a paid plan whenever you want more.

Create your free vault