Skip to content

Free for individuals. Flat rate for teams.

Personal accounts are always free. Self-serve workspace in minutes. Enterprise on request.

Individual

Free

No credit card. No commitment.

  • 12 secrets per year
  • AES-256-GCM in-browser encryption
  • Burn-after-read delivery
  • 7-day expiry sweep
  • Personal recipient link
  • No credit card required
Create Free Account
Popular
Workspace

$39

/month

Per workspace. Up to 50 seats. Billed monthly.

  • Up to 50 seats per workspace
  • AES-256-GCM in-browser encryption
  • Burn-after-read delivery
  • 7-day expiry sweep
  • Workspace activity audit log
  • Admin dashboard
  • Custom workspace subdomain
  • Team-wide recipient links
Create Workspace
Enterprise

Custom

For larger teams with specific requirements.

  • Unlimited seats
  • Everything in Workspace
  • Dedicated onboarding & support
  • Custom contract & MSA
  • Service-level terms by agreement
  • Invoice billing available
  • Priority security review
Contact Us

Frequently asked questions

What counts toward my 12-secret annual limit?
Each secret you create on your personal /app/ account counts as one. Secrets you receive never count against your limit. The count resets on January 1 each year.
What is the difference between an individual account and a workspace?
An individual account lives at /app and is just for you, free with a 12-secret annual cap. A workspace is an organisation-level deployment with its own subdomain, managed by an admin, and supports up to 50 team members for $39 USD per month.
Is my plaintext ever stored on your servers?
Never. Encryption happens in your browser using the Web Crypto API (AES-256-GCM). The server receives and stores only ciphertext. The decryption key is embedded in the share link and never transmitted to our servers.
What happens to a secret after it is read?
The active exchange is removed after consumption and cannot be opened again through the application. One-time links are consumed when ciphertext is retrieved; inbox messages are consumed after successful decryption. Unread secrets expire after seven days. This does not erase a recipient's saved copy or revoke a credential at its source.
Can I cancel my workspace subscription?
Yes, at any time. If you cancel at the end of your billing period, your workspace stays active until that monthly period ends and your subscription will not renew.
Do I need a workspace to receive secrets?
No workspace is required. A one-time bearer link can be opened without an account, so protect the complete link. Recipient-ID inbox delivery requires the intended recipient to sign in to their account.
How does workspace setup work after payment?
After your successful Stripe payment is processed, we email a setup link. Use it to create your administrator account and configure two-factor authentication. If the message does not arrive, check your spam folder or contact support without sharing payment credentials.

Choose the plan for your credential handoffs

Individual accounts are for occasional personal use. Workspaces add a shared team environment with administration and audit visibility. Compare the access model and usage limit as well as the price. The workspace price shown here is US dollars per workspace per month, not a per-user fee.

Which plan is suitable for an individual?

The free individual account allows 12 secrets to be sent per calendar year. Receiving a secret does not use your sending allowance. For example, sending a temporary API token to a collaborator counts as one secret; reading a token someone sends you does not. The annual allowance resets on January 1. Use a dedicated credential rather than including several unrelated administrator passwords in a single handoff.

What does a workspace include?

A standard workspace costs $39 USD per month and supports up to 50 seats. It includes a workspace subdomain, team administration and an audit log alongside encrypted one-time delivery. A workspace is useful when an administrator needs to manage team membership rather than coordinate separate personal accounts. Audit events describe exchange activity; they are not a readable archive of secret contents.

What should I check before paying?

Review the plan, currency and recurring amount on the Stripe checkout page before confirming payment. Use an email address you can access because workspace onboarding uses a setup link. After a successful payment is processed, follow that link to create the workspace administrator account and configure two-factor authentication. If setup does not arrive, contact support without including card details, passwords or share links.

How do cancellation and failed payments work?

Use the billing controls available to your account to manage a subscription. If you choose cancellation at the end of the billing period, access continues until that period ends. A failed recurring payment can interrupt subscription access. A successful retry is reconciled against the current Stripe subscription and latest invoice before access is restored. It does not override an administrator's separate decision to disable a workspace.

Standard plan comparison, USD
PlanPriceSuitable for
IndividualFree12 sends per calendar year
Workspace$39 per monthManaged teams, up to 50 seats
EnterpriseAgreed quotationRequirements reviewed with our team

How do I decide before upgrading?

  1. Count your expected sending needs and identify who needs to manage membership.
  2. Choose a free personal account for occasional individual handoffs, or a workspace for a managed team of up to 50 people.
  3. Contact us for enterprise requirements such as a larger team, procurement review or a proposed service agreement. Only agreed contract terms apply.
  4. Review the final checkout details and keep billing access separate from the secret values you plan to share.

Definitions and further reading

Ciphertext
The encrypted form of a message, rather than its readable plaintext.
Credential rotation
Replacing an existing password or token, and revoking the old value at its issuing service.
One-time exchange
A delivery mechanism that removes application access after consumption, not a guarantee against copying on the recipient's device.

These independent references explain the underlying concepts. They are not endorsements, certifications or an independent audit of API Key Pro.

Read our privacy policy and terms of service, or contact the team about a specific requirement.