How can we help?

Head to the download page and grab the build for your operating system. The installer sets up the desktop app and, on first launch, walks you through creating your master password and local vault. The Android app is a direct download from the same page, not from Google Play; the iPhone and iPad app is in the works.

Today Walilock runs on Windows 10 and 11 and on Android 10 and later, and a browser extension for Chrome and Edge fills your logins and passkeys from the Windows app. macOS, Linux, iOS and iPadOS are in the works. Your encrypted vault syncs across your devices once you're on a plan that includes sync. See Download for the current list of builds.

Open Walilock and choose Import in the sidebar. We support CSV exports from most major managers (1Password, Bitwarden, LastPass, Chrome, and others). Export your data from the old tool, select the matching format in Walilock, and choose the file. Everything is encrypted the moment it lands in your vault. Delete the plaintext export file afterward — it's the one unprotected copy of your logins.

Yes, a free one. On Personal (free) you create an account with an email and a sign-in password, and your vault stays on your device: nothing in it is synced. Paid plans add sync, sharing or team features to the same account. The account signs you in to our relay; it never gives us access to your vault contents. See Pricing for what each plan includes.

Personal+ and Family include a 14-day free trial, and Business a 30-day trial. Trials ask for a card at checkout through Stripe, but you're not charged until the trial ends — cancel any time before then and you won't be billed a cent. Full details on Pricing.

Open Settings → Account in the app to upgrade, downgrade, or cancel — changes take effect immediately for upgrades and at the end of the current period for downgrades. Business admins manage seats and cancellation from the admin console. If you cancel, your vault becomes read-only rather than deleted: every item stays visible and exportable, and you can re-subscribe any time to restore editing and sync.

Billing runs through Stripe, so we accept all major credit and debit cards (Visa, Mastercard, American Express, Discover) and, where Stripe supports them, wallets like Apple Pay and Google Pay. Enterprise customers can arrange invoicing and annual purchase orders — reach out via Contact Sales.

Because Personal+, Family and Business start with a free trial, you can evaluate them fully before any charge. If you're billed and something isn't right, email support@walilock.com within 14 days of the charge and we'll work with you in good faith on a refund, as set out in our Terms of Service. Refunds return to your original payment method through Stripe.

Zero-knowledge means your data is encrypted and decrypted only on your devices, using keys derived from your master password — which never leaves your machine. Our servers only ever hold ciphertext. We have no way to read, hand over, or sell your vault, because we simply don't possess the keys. Read the full model on our Security page.

No. Everything in your vault is encrypted on your device before it's ever stored or synced. What reaches our relay is an opaque blob of ciphertext with no accompanying key. Nobody at Walilock — and no attacker who compromised our servers — can turn that back into your passwords. That guarantee is the whole point of the architecture, not a policy we could quietly change.

No — and this is the honest, important tradeoff of zero-knowledge design. Your master password is the key that encrypts your vault, and we never receive it or store anything derived from it, so we cannot reset or recover it. What you can do: save your Emergency Kit the day you sign up — it restores access if your device is lost, wiped or replaced, though it cannot replace a forgotten password. Data encrypted with a forgotten master password cannot be recovered by anyone, including us. We strongly recommend saving your Emergency Kit somewhere safe the day you sign up. More on Security.

Yes. Your sign-in password can be reset by email from the login help page. Resetting it does not change your master password or what is in your vault.

The sign-in password logs you in to your Walilock account; the relay checks it with OPAQUE without receiving it, and you can reset it by email. The master password encrypts your vault on your device, never leaves it, and cannot be reset. See the security model.

On a plan with sync, no: install Walilock on a new device, sign in, and unlock with your master password, and your vault syncs back. On the free plan your vault exists only on that device, so only an export you saved earlier can restore it. A forgotten master password cannot be recovered in either case.

When you run a scan, your device computes the SHA-1 hash of each saved password and sends only the first 5 characters to Have I Been Pwned. The list that comes back is compared on your device. Breach Monitor is on Personal+ and above.

OPAQUE is the asymmetric password-authenticated key exchange (aPAKE) protocol Walilock uses to log you in. Unlike a traditional login, your password — and even a hash of it — is never sent to the server. OPAQUE lets the relay verify it's really you without ever learning your password, which is what makes the whole zero-knowledge chain possible. There's a deeper explanation on the Security page.

If our relay were breached, an attacker would find only encrypted vault blobs and OPAQUE verifier data — no master passwords, no decryption keys, no plaintext. Without your master password (which we never hold) that ciphertext is useless. That's the resilience zero-knowledge is designed for: a server compromise does not become a vault compromise. We'd still notify affected users and rotate credentials as a precaution.

Walilock syncs through a blind relay. Each change is encrypted on your device first, then the ciphertext is uploaded and mirrored to your other devices, where it's decrypted locally. The relay stores and forwards encrypted blobs without ever seeing their contents — it's a courier, not a reader. Sync is included on Personal+, Family, Business, and Enterprise plans.

Yes. Data is encrypted on the sending device and only decrypted on your other authorized devices — the relay in between never has the keys. Shared and family vault items are encrypted to each recipient too, so sharing an item never means handing plaintext to our servers.

On a Family plan, the owner of the family vault invites members by email from the app. Each member sets up their own master password and keeps a private vault only they can open, while shared items live in a family vault that's encrypted to every member's key. The owner can add or remove members at any time (up to five). Removing someone stops their access through the app: right away if their device is online, or within 24 hours if it's offline. Passwords already synced to their device can stay readable there, because removal does not change the vault's key. Change any password you don't want them to keep. See Removing a member in the docs, and plan details on Pricing.

Single sign-on is an Enterprise feature. Employees sign in with your existing identity provider over OIDC, and SCIM 2.0 provisioning adds and removes people from your directory automatically. Both are tested with Okta. Setup is handled with our team during onboarding — start at Enterprise or reach out through Contact Sales.