ExpressVPN’s bundled password manager Keys has been quietly evolving since its 2023 launch. In March 2026 the company spun it out of the main VPN app into a separate, standalone application — a change that puts Keys closer to dedicated password managers like Bitwarden and 1Password in form, while still requiring an ExpressVPN subscription to use. Here’s what Keys actually does in 2026, what it costs, and where standalone managers still do more.
What Keys actually does
Keys is a zero-knowledge password manager built around 256-bit AES encryption. The feature set is what you’d expect from a competent paid manager: autofill for logins and card details, a password generator, a 2FA authenticator, weak/reused/breached password alerts, and secure notes. The mobile apps and Chrome-family browser extension all have feature parity with the desktop app.
- Autofill on iOS, Android, Windows, macOS plus Chrome, Edge, Brave, Opera and Vivaldi (no Firefox or Safari yet).
- Authenticator for TOTP codes — same role as Google Authenticator or Authy.
- Password Health dashboard flags weak, reused or breached entries.
- Audited by Cure53 (mobile + Chrome extension, 2023) and KPMG (February 2025). Security whitepaper available on ExpressVPN’s site.
- Zero-knowledge architecture — ExpressVPN can’t read your vault even if compelled.
What’s missing compared to Bitwarden, 1Password and Proton Pass: family sharing, granular vault sharing, the kind of secure-note hierarchy that lets you store software licences alongside passport scans, custom field types beyond the basics, and any Firefox or Safari extension. For most consumer use it’s enough. For anything more complex — family password sharing, business team vaults, secure document storage — Keys hits its ceiling fast.
Pricing
Keys isn’t sold standalone and isn’t bundled with the cheapest ExpressVPN plan. It rides along with the Advanced and Pro tiers only — the Basic VPN plan doesn’t include it.
| ExpressVPN tier | Includes Keys? | Intro price (24-mo) | One-month price |
|---|---|---|---|
| Basic | No | ~$4.99/mo | $12.95 |
| Advanced | Yes | ~$4.49/mo | $13.99 |
| Pro | Yes + identity-theft tools (US) | ~$6.49/mo | $15.99 |
The effective cost of “just the password manager” is the gap between Basic and Advanced — usually under $1/mo on the 24-month plan. That’s competitive against Bitwarden Premium ($10/yr) only if you genuinely want the VPN; pure standalone managers undercut Keys easily on price.
The March 2026 split: standalone app
The most consequential change in 2026 was structural rather than feature-driven. On 5 March 2026, ExpressVPN removed Keys from the main VPN app and shipped it as a separate standalone application. The vault and credentials carry over for existing users — the change is purely about app architecture. Practically:
- You install two ExpressVPN apps now: the VPN and Keys.
- Keys runs without the VPN being on — it’s a normal background password manager.
- The browser extension still works the same way; only the desktop and mobile apps were split.
- You still need an active Advanced or Pro subscription. Cancelling the VPN cancels Keys.
The split brings Keys closer to how standalone managers like 1Password and Bitwarden actually work — but the licensing model remains tied to ExpressVPN, which is the part that limits how seriously it can compete with dedicated tools.
Keys vs. the standalone password managers
This is where the question actually lives for most people. If you don’t already pay for ExpressVPN, Keys is rarely the right choice — dedicated managers cost less and do more. Here’s how they line up in May 2026:
| Service | Free tier | Paid tier | Family sharing | Notable extras |
|---|---|---|---|---|
| ExpressVPN Keys | No | From $4.49/mo (with VPN Advanced) | No | Bundled with VPN, ID-theft tools on Pro (US only) |
| Bitwarden | Unlimited free | $10/year Premium | $47.88/yr for 6 users | Open source, self-hosting option |
| 1Password | Trial only | $2.99/mo Individual | $4.99/mo for 5 users | Travel Mode, Watchtower, Passkeys |
| Proton Pass | Unlimited free | $35.88/yr Plus | $59.88/yr for 6 users | Email aliases, dark-web monitoring, part of Proton ecosystem |
| Surfshark Alternative ID | No | From $1.99/mo (with Surfshark) | No | Generates fake persona + email; not a full PWM |
Three of those services beat Keys outright on raw value. Bitwarden at $10/year does everything Keys does and adds family sharing, file attachments and self-hosting; if you want the cheapest serious manager, it’s the answer. Proton Pass has email aliases built in — closer to what Surfshark’s Alternative ID does — and slots into the wider Proton privacy ecosystem. 1Password is the polish-and-features choice for power users.
Our full best password managers comparison goes deeper on each.
Where Keys falls short
- No family or shared vault. Roommates, partners, kids — everyone needs their own Advanced subscription.
- Browser coverage gaps. Firefox and Safari users are still excluded after almost three years of “under consideration.”
- No standalone subscription. Want Keys without the VPN? Not available. Cancelling the VPN cancels Keys.
- Limited file storage. No real document vault, secure notes are basic, no attachment support beyond simple uploads.
- Identity-theft tools US-only. The Pro tier’s headline feature stops at the US border.
Who Keys actually makes sense for
The honest answer: people who would be paying for ExpressVPN regardless, who want a competent password manager and don’t need anything fancy. If that’s you, Keys is fine — it’s audited, zero-knowledge, syncs cleanly across devices, and you don’t have to think about a second subscription. Advanced is the entry tier; Pro adds identity-theft tools for US users.
If you’re shopping for a password manager primarily, do not start with Keys. Start with Bitwarden (cheapest), Proton Pass (best for privacy ecosystem) or 1Password (best polish). For broader VPN options too, see our no-log VPN providers guide — you don’t need to commit to ExpressVPN to get a serious password manager.
Pros and cons
Frequently asked questions
Can I buy ExpressVPN Keys without the VPN?
No. Keys is only available as part of an ExpressVPN Advanced or Pro subscription. There’s no standalone plan, and cancelling the VPN cancels access to Keys.
What changed in March 2026?
ExpressVPN split Keys out of the main VPN app and shipped it as a separate standalone app. The vault, credentials and pricing model didn’t change — only the app architecture. Existing users carry over automatically.
Is Keys safe?
The architecture is zero-knowledge with 256-bit AES encryption, and the apps have been audited by Cure53 (2023) and KPMG (February 2025). No major vulnerabilities have been publicly disclosed. It’s not a security concern; it’s a feature-completeness concern.
Why isn’t there a Firefox extension?
ExpressVPN said in 2023 that non-Chromium browser support was “under consideration” and there’s still no timeline as of mid-2026. Firefox and Safari users have to use the desktop app or fall back to copy-paste.
Can I share passwords with family in Keys?
No. There’s no family plan or shared vault feature. Every person in your household needs their own Advanced subscription. If family sharing matters, Bitwarden’s $47.88/year family plan or 1Password Families ($4.99/month for 5 users) are the obvious alternatives.
Final take
ExpressVPN Keys in 2026 is a competent, audited, zero-knowledge password manager that’s only really worth using if you’d be paying for ExpressVPN Advanced or Pro anyway. The March 2026 split into a standalone app removed one of the original limitations, but the licensing model is still the ceiling: no standalone purchase, no family sharing, no Firefox extension. For about a third of the price, Bitwarden Premium does everything Keys does and more; Proton Pass adds email aliases for a slightly higher fee; 1Password is the polish pick. Our best password managers guide is the right starting point if you don’t already have a VPN preference.
For broader privacy tooling — fake persona for sign-ups, virtual phone numbers, breach monitors — see our coverage of Surfshark Alternative ID, which solves a different problem than Keys (preventing your data from leaking in the first place rather than just storing the credentials securely).
I’ve been a translator for many years. During this time, geo-restriction has always been the most problematic issue in the many countries I’ve visited. I’m here to tell you about my experience.