Pricing

Current as of 21 September 2026.

KeyNesta is free. Not free-with-an-asterisk, and not free until you have enough codes in it to be stuck: there is no billing system in the product at all today, so there is nothing to buy, nothing to cancel, and no card to remove. Here is exactly where that stands and where it is going.

Free forever

These are the parts that will never move behind a payment, because an authenticator that holds your logins hostage is not a security product:

• Unlimited codes, tags, groups, spaces and vaults.
• TOTP and HOTP generation, with every parameter the standards allow.
• On-device encryption, auto-lock and biometric unlock.
• Encrypted backup files you create and restore yourself.
• Import from Google Authenticator, Aegis, 2FAS, JSON and CSV — and plain export, at any time, including on your way to a competitor.
• No ads. No trackers. No selling of usage data. The marketing site you are reading does not even load a third-party request.

Free during launch

Zero-knowledge sync across your devices is free while KeyNesta launches. It costs us servers to run, so it is the honest candidate for a future paid tier rather than something we can promise is free forever. If that ever changes, it changes for new accounts with notice — and encrypted backup files, which do the same job manually and offline, stay free regardless.

Premium, when it exists

Planned, not built. Nothing on this list works today and none of it is being held back artificially — it is simply not written yet:

• Automatic encrypted cloud backups, with backup health warnings.
• A higher number of synced devices.
• Smart groups: saved filters that fill themselves.
• Advanced recovery options and security policies.

There is no waitlist charge, no pre-order, and no price yet, because quoting a price for software that does not exist is how trust gets spent early.

Why give the useful parts away

Two reasons, one principled and one practical. The principled one: if the free version is not trustworthy, the paid one will not be either — a security product that ships its weakest build to most of its users has its incentives backwards. The practical one: KeyNesta is built by a small software business, BitsSolved Software, and its cost of making the app good for one person is roughly its cost of making it good for a hundred thousand. Servers are the part that scales with users, so servers are the part that may eventually carry a price.

What we will never do to monetise it

An authenticator sees the shape of your entire digital life: every service you hold an account with, at minimum. Advertising against that inventory, selling it, or "anonymising" and selling it anyway is disqualifying, and no amount of revenue makes it not disqualifying. That is a design constraint here, not a policy that a later funding round can revise.

Frequently asked questions