Choose the plan that fits your needs

Logins, secure notes, secrets, cards, identities, bank accounts, and Wi-Fi networks. A login can include a username, password, website, and an authenticator code. A secret can be an API key, an AI key, an SSH key, or a token.

Free holds up to 25 items. Premium, and the paying account on Business, do not have an item limit. On Premium or Business you can also attach a file to an item.

The app also includes an optional workdays calculator for an hourly rate. That calculator is separate from the vault.

Items are encrypted on your device before they are saved. The server stores the ciphertext. We do not have a key that opens it, and we cannot read logins, notes, cards, or files.

The vault password stays on your device. If you forget it, we cannot recover the items. Resetting the account password lets you sign in again. It does not open a vault that was encrypted with the old password. You can restore from an encrypted backup you exported earlier.

A group name, and the email addresses of people you invite, are stored so the group can work. The shared items themselves stay encrypted. The same encryption is used on Free, Premium, and Business.

You can sign in with email, Google, Apple, or a passkey. A phone code is there when SMS sign-in is turned on. Those confirm the account. Opening the vault still needs the vault password.

On the website, the password you choose for the account is the one that encrypts the vault. A passkey can sign you in. It does not decrypt the vault.

The vault is on the website and in the extension, on the same account. When sync is on, the encrypted vault is copied between them. The extension also keeps a local encrypted copy. Locking the vault, or closing the browser, clears the unlock key from that browser session.

Travel mode leaves only items you marked safe for travel on that device. The others stay off the device until you turn travel mode off. Sync is included on every plan.

Autofill is in the extension. It can fill a saved username, password, or authenticator code, or offer to save a login you just submitted. You can turn fill off. The page you are on is not uploaded as part of fill. The shortcut is Ctrl+Shift+L. Ctrl+Shift+Y opens the extension.

Health checks flag weak and reused passwords. Breach checks are on unless you turn them off. The check sends the first five characters of a SHA-1 hash to Have I Been Pwned, not the password. The generator can build a password or a passphrase. Autofill, health, and the generator are included on every plan.

Developer checks look for SSH keys and environment files in a folder you choose. The scan shows a path, a name, or an alert. It does not show the secret. If you import one, it is copied into the vault and encrypted there. The file on disk is left as it is.

Developer checks are included on every plan.

A group lets you share vault items with other people. You choose who is in the group and what role they have. Each group stores its own encrypted copy of an item. An item can be in more than one group. Deleting a group removes that group’s copy. The item stays in your vault, and in any other group.

Premium includes 3 groups, up to 6 people in a group, and 50 shared items in a group. Business includes unlimited groups, up to 50 people in a group, and 200 shared items in a group. Free cannot create a group. Groups you already have can still be opened.

If you remove someone, their key is dropped and the group key is rotated. An invite does not change their plan. Their own vault stays on Free, Premium, or Business, whichever they have.

A Vault share sends one note or secret to someone by email. You can schedule when it opens, add a short message, and cancel it before it is opened. The recipient gets their own link. They do not need a Briarlock account to open that one item. A share expires 30 days after the unlock time. We cannot read it.

Vault shares are on Premium and Business.

You can name a trusted contact. Your device encrypts a snapshot of the vault. If they request access, you are emailed and can cancel during the wait. The wait is 3, 7, 14, or 30 days. When it ends, they can open the snapshot. We cannot read it.

Emergency access is on Premium and Business.

A file is encrypted on your device before it is uploaded. We store the ciphertext and the size. The file name and the key stay in the vault. Deleting the attachment, or the account, removes the ciphertext.

Each file can be up to 25 MB, with up to 20 files on one item. Premium includes 5 GB. Business includes 5 GB per user, up to 50 GB on the paying account. Executable and script files cannot be attached, including a file renamed to look like a document when its contents are still a program.

On Free you can still download or remove files that were stored earlier. Adding a file needs Premium or Business.

Free is for getting started: up to 25 items, plus autofill, the generator, health checks, encrypted sync, and developer checks. It does not include new groups, Vault shares, emergency access, or new file attachments.

Premium is one price for one account. It adds unlimited items, 3 groups of up to 6 people, Vault shares, emergency access, and 5 GB of encrypted attachments.

Business is for a team and is billed per user. It adds unlimited groups, up to 50 people in a group, a seat for each person, and 5 GB of attachments per user, up to 50 GB on the paying account. You choose the number of seats at checkout, from 1 to 500. People you invite are not upgraded. Business does not include single sign-on, directory sync, or self-hosting.

You can pay monthly or yearly. The yearly price shows the savings on the plan.

A new account includes 14 days of Premium. No card is required. During the trial you can use the Premium limits. The trial is not offered again after you have had a subscription.

When the trial ends, the account becomes Free. Your items stay, and you can still open them. You cannot add past 25 items, create a group, start a Vault share or emergency access, or attach a new file. Groups you already have can still be opened. Files already stored can still be downloaded or removed.

Yes. Cancel in the billing portal. You keep the paid plan until the end of the period you already paid for. After that, the account becomes Free, the same way it does when a trial ends.

On Business you can also change the number of seats in the portal.

Deleting the account removes the encrypted vault copy on our servers, along with groups, shares, and file ciphertext tied to that account. Logins saved in the browser extension stay on that device until you reset the vault there or remove the extension.