One model, every tier

Walilock is local-first, so signing in means different things depending on your plan. Here's the full picture.

👤

Personal (free)

Create a free account with your email and a sign-in password (OPAQUE). It establishes your Walilock identity so you can sign in here and manage your plan — your vault is encrypted separately by your master password and decrypts locally on each device. Encrypted sync and sharing unlock with Personal+ and up.

Personal+ & Family

A relay account (email + sign-in password via OPAQUE) enables sync and sharing. This page signs you in to manage devices and billing — your vault itself is encrypted by your master password and decrypts locally on each device.

🏢

Business & Enterprise

Members sign in the same way. Admins use the admin console, and Enterprise users sign in through their company's SSO (OIDC) by entering a workspace domain.

In every case, authentication and vault decryption are separate steps: the relay only ever confirms identity for sync — it never holds the keys that decrypt your data.