Skip to content
CRYPTEXVAULT

PRICING / A SIMPLE CHOICE

Your vault is free.
The extra help is optional.

Use Cryptex Vault on your own. Subscribe when you want us
to run the supporting infrastructure and store encrypted backups.

01 / CHOOSE HOW YOU RUN IT

THE PASSWORD MANAGER

Cryptex Vault

€0 / forever

A complete password manager, on your own terms.

Open Cryptex Vault
  • Local encrypted vault
  • Web app, Android & Chromium Extension
  • Browser autofill
  • Passkey support
  • Basic security reportsFind weak and reused passwords in your vault.
  • Imports & exports
  • Manual encrypted backupsDownload an encrypted vault copy to store separately.
  • Backups to your own storageUpload encrypted backups automatically to S3-compatible buckets you control.
  • Peer-to-peer synchronizationUse your own signaling and relay infrastructure to sync linked vaults while both devices are online.
  • Self-hosted sync infrastructure
  • One-time share links on your own serverRun the open-source share server and send links from your own domain.
  • SSH keys and the SSH agent on your own relayKeep SSH keys in your vault and approve logins from your phone or the web app, through an agent relay you run.
AGPL-3.0 - No Online Services account required for local use.

OPTIONAL MANAGED SERVICES

Online Services

€4.99/ month
VAT includedPrice as of 10.9.2026: €4.99 / month14-day free trial on your first subscription

Your vault stays yours. We run the supporting infrastructure.

Continue with monthly planThe trial needs a card, which is charged when the trial ends unless you cancel first. New to Online Services? Start with monthly billing before committing to a year.
  • Managed P2P infrastructureConnect linked devices through hosted signaling and relay services, without maintaining servers.
  • Managed encrypted backupsKeep encrypted restore points online and retrieve available backups with your Recovery Kit if a device is lost.
  • One-time share linksSend a login or secret to anyone, even people without Cryptex Vault. It opens once, then it's deleted.
  • Hosted SSH agent relayApprove SSH logins on up to 25 Linux machines without running your own relay.
  • Online Services device managementManage registered devices, view and control their linking relationships, and revoke their access to Online Services.
Same P2P model. Less infrastructure to run.

Both devices must be online. You initiate synchronization. Backups are stored separately as encrypted copies.

No voluntary subscription refunds. Your statutory consumer rights and applicable Stripe/Link or Google Play refund terms are unaffected.
02 / WHAT YOU’RE PAYING FOR

Infrastructure.
Storage. Continued work.

Online Services fund managed infrastructure, backup storage, security work and continued development. Local use, autofill, imports, exports and manual encrypted backups remain free.

Managed sync is still peer-to-peer.

Cryptex Industries d.o.o. operates the signaling and relay infrastructure that helps devices connect. Both vaults must be open, unlocked, and reachable. New links sync after connecting by default, and you can change that setting. There is no central vault serving changes to an offline device.

Backups are a separate service.

Managed backups keep an encrypted copy so you can retrieve it if your devices are lost. Your Online Services Recovery Kit contains the User ID and phrase needed to find available backups from your root devices. Your vault password or vault recovery code unlocks the restored copy.

03 / SERVICE TERMS AT A GLANCE

Know the limits.
Keep a way out.

Managed backups are an extra copy of your vault. We recommend keeping a separate manual backup as well.

Price & refunds
Your first subscription starts with a 14-day free trial. Checkout asks for a card, and it is charged when the trial ends unless you cancel before then. We recommend starting with monthly billing. We do not offer voluntary subscription refunds; your statutory consumer rights are unaffected. For purchases through Stripe Managed Payments, Stripe/Link may also issue refunds under its own terms. Google Play purchases follow Google Play's refund policy.
Backup storage
150 MB total per account, including pending uploads. Each backup is limited to 10 MB and must fit within your remaining account allowance. There is no separate fixed backup-count limit: the number you can keep depends on backup sizes and retention.
Room for your backups
For context, a vault with around 340 items can be about 100 KB, though sizes vary with the contents. That leaves room for many backup versions within 150 MB. If you run out of space, download any copies you want to keep, then delete unneeded backups to resume uploads. We do not delete older backups just to make an upload fit. We are open to expanding storage through future plan tiers as needs grow.
Version history
Every snapshot is kept for 24 hours. After that, retention keeps the newest snapshot per UTC day through 30 days, then the newest per calendar month through 366 days. The latest backup from each current root device is protected from routine retention pruning.
Share links
Up to 200 unopened one-time links at a time, 64 KB each, waiting up to 7 days. The server deletes the contents when a link is opened, revoked or expires. Links you already sent keep working until then, even if your subscription ends.
SSH agent relay
Up to 25 connected agents per account. The relay carries only encrypted requests and answers. When your subscription ends, agents on the hosted relay stop working within 7 days, once your devices' relay passes expire. Pair them with your own relay to keep using them.
Managing cancellation
Manage a Stripe subscription through Stripe’s billing portal, accessible from the app. Manage a Google Play subscription in Google Play. Cancellation takes effect at the end of the current paid period. If you cancel during the free trial, you keep access until the trial ends and nothing is charged.
After subscription access ends
New uploads stop. For 90 days, you can download or delete remaining backups, subject to normal retention pruning. After that, backup access ends and backups are queued for deletion.
Deleting your account
Hosted backups are queued for deletion without the 90-day grace period. Download any backups you want to keep before deleting your account.
04 / BEFORE YOU SUBSCRIBE

Know what
you’re choosing.

Can I use my own infrastructure?+

Yes. Run the signaling, STUN and TURN infrastructure yourself, and the SSH agent relay too. The synchronization model is unchanged: sync can start automatically after connecting or manually, and it remains end-to-end encrypted. Both vaults must be open and unlocked.

How does the free trial work?+

Your first Online Services subscription, on the web or through Google Play, starts with 14 days free on the monthly or yearly plan. The trial includes everything a paid subscription does. You need a card to start it. When the trial ends, the card is charged and the subscription renews as usual. Cancel before then and you pay nothing. Each account gets one trial, and only if it has never had a subscription. Google Play also allows one trial per Google account. Link emails you when a web trial starts and before it ends, and Google Play sends its own reminder.

Does a subscription unlock more vault features?+

The subscription currently covers managed P2P infrastructure, managed encrypted backups, one-time share links, the hosted SSH agent relay, and Online Services device management. You can manage registered devices, view and control their linking relationships, and revoke their access to Online Services.

Are there upload limits?+

Your account includes 150 MB of backup storage, with a maximum of 10 MB per backup. You can start up to 120 uploads per day, resetting at midnight UTC, with up to 5 in progress at once. Uploads in progress count toward your storage allowance.

Are all my backups kept for a year?+

No. We keep every backup for 24 hours, then the newest from each day for 30 days. Beyond that, only the newest backup from each calendar month is kept, until it is 366 days old. The latest backup from each current root device is exempt from this cleanup. Cancellation and account deletion follow the access periods above.

Where can I review security and recovery?+

Visit the Security page for audit status, threat boundaries and infrastructure visibility. The recovery guide explains how to restore your vault and use your recovery information.

Make yourself
at home.

Create a vault. Import your passwords.
No account required for local use.

Open Cryptex VaultInstall browser extensionGet the Android app