Back to blog
March 22, 2026 · 8 min read

Your Passwords, Your Rules —
Why Most Password Managers Hold Your Data Hostage

VS
Varinder Singh
Founder, Claspt
Unlocked padlock representing data freedom

You chose a password manager to keep your data safe. But somewhere along the way, "safe" started meaning "locked inside our ecosystem." The industry has quietly built walls around your own credentials — restricting exports, gating autofill behind paid plans, and making it painful to leave. Your data is encrypted for security. It should not also be encrypted against you.

The Problem: You Do Not Actually Own Your Passwords

Password managers market themselves on trust. You trust them with your most sensitive data. But that trust comes with strings. Here is what the fine print looks like in practice:

Autofill Is a Premium Feature

Several major password managers now restrict autofill to paid tiers. You can store your passwords for free, but filling them into login forms? That costs extra. The password sits right there in your vault. You can see it. But the tool that is supposed to make it useful — the browser extension that fills it into the login form — is behind a paywall.

This means free users are forced to open the app, find the entry, copy the password, switch to the browser, paste it, and then go back to clear the clipboard. Every single login. The tool has the data and the capability. It just chooses not to give it to you unless you pay.

Export Restrictions

Want to leave? Good luck. Some password managers make exporting your data deliberately inconvenient:

  • No bulk export on free plans. You can export one item at a time. If you have 400 passwords, that is 400 individual copy-paste operations.
  • Export buried in settings. The export option is hidden three menus deep, requires re-authentication, and sometimes only works from the desktop app — not the web vault or mobile app.
  • Proprietary formats. Some tools export to their own format that no other tool can read. You get your data back, but in a format that is useless outside their ecosystem.
  • Limited export fields. The export includes username and password but strips custom fields, notes, TOTP secrets, or attachments. You get a partial copy of your own data.

Feature Gating That Restricts Access

It is not just autofill. The pattern extends across the product:

  • Device limits. Free plans that let you use the app on only one device type — either mobile or desktop, but not both. Your passwords are on your phone, but you cannot access them on your laptop without upgrading.
  • Vault size limits. Free tiers capped at 25 or 50 items. Once you hit the limit, you cannot add new passwords without deleting old ones or paying.
  • Search and organization. Some tools restrict folders, tags, or even search on free plans. You have the data but cannot find it efficiently.
  • Sharing restrictions. You cannot share a single password with your spouse or a colleague without upgrading to a family or business plan.

Vendor Lock-In by Design

These are not accidental limitations. They are business model decisions. The harder it is to leave, the more likely you are to stay and eventually pay. Your data becomes a retention mechanism.

Think about what that means. A tool you trusted with every credential you own is using those credentials as leverage to keep you paying. The data is yours, but the access is theirs.

How Claspt Is Different

Open vault with accessible data

When I built Claspt, I made one non-negotiable rule: your data is always yours, completely and unconditionally. No feature gates on access. No export restrictions. No artificial walls between you and your own credentials.

Free Means Actually Free

Claspt Free gives you:

  • Unlimited pages. No vault size cap. Store as many credentials, notes, and documents as you want.
  • Unlimited secret blocks. Every page can have as many encrypted fields as needed.
  • Full encryption. The same AES-256-GCM encryption on free and paid plans. We do not downgrade your security to upsell you.
  • Full search, folders, tags, and organization. No restrictions on finding or structuring your data.
  • Full copy-to-clipboard. Every secret is one click away. No gating on access to your own data.

Export Everything, Anytime

Your vault is a folder of .md files on your own filesystem. There is nothing to "export" in the traditional sense — the data already lives on your machine in an open format. But when you want a structured, portable export, Claspt gives you two options:

Complete Export

One click creates a compressed .zip of your entire vault — every page, every folder, every secret, all metadata preserved. The folder structure stays intact. Your markdown notes remain readable in any text editor. Secret blocks are decrypted inline so the export is fully portable. The zip itself is password-protected with AES-256 encryption, so you can safely store it, email it, or drop it on a USB drive.

This is a full backup. If Claspt disappeared tomorrow, you could unzip this file and have every note and every credential in readable, standard formats. No Claspt installation required.

Secrets Only Export

Need just the credentials? Export all your secrets as CSV or JSON. The CSV format is compatible with 1Password, Bitwarden, KeePass, LastPass, and every other password manager that supports CSV import. The JSON format preserves richer structure for Claspt-to-Claspt transfers across machines.

Both export types are available on all plans, including free. There is no paywall on getting your own data out. You enter your master password to confirm (this is a security check, not a restriction), and the export starts immediately.

Export vs. Sync: The Difference

Export is how you move your data. Sync is how you keep it in sync across devices automatically.

On the free plan, your vault lives on one device. You can always export your entire vault and import it on another machine. That is manual, but it works and it is completely free. You are never locked in.

Pro ($4/month) adds encrypted sync — Google Drive or Claspt's hosted relay — so changes on one device appear on all your others automatically. Sync is a convenience feature. Export is a right. We will never gate your ability to take your data and leave.

Our Browser Extension Is Free

The Claspt browser extension is available now for Chrome, Edge, Brave, and Arc — and it works on free accounts. Auto-fill, auto-save, and quick search from the browser toolbar. No premium gate.

This is a deliberate choice. Autofill is not a luxury feature. It is the basic utility of a password manager. Locking it behind a paywall is like selling a car but charging extra to turn the steering wheel. The extension will connect to your local vault on desktop, so it does not even require sync or a cloud connection. Your credentials stay on your machine and fill into forms directly.

A Comparison That Matters

Feature Most Password Managers (Free) Claspt Free
Autofill Paid only or limited Free (with upcoming extension)
Full vault export Restricted or unavailable Complete .zip or secrets-only CSV/JSON — free
Vault size 25–50 items Unlimited
Device access One device type Full desktop access
Data format Proprietary database Markdown files on your disk
Search & folders Limited on free Full access
Encryption strength Same (usually) AES-256-GCM, same on all plans
Offline access Often requires internet Fully offline, always

Why This Matters More Than You Think

Data portability is not an abstract principle. It has real consequences:

  • Service shutdowns. Password managers have shut down before. If your data is trapped in a proprietary format with no easy export, you are scrambling to manually recover hundreds of credentials before the lights go off.
  • Price increases. When a vendor knows you cannot easily leave, they can raise prices. And they do. Regularly. Your own inertia becomes their pricing power.
  • Policy changes. Terms of service change. Privacy policies change. If you disagree with a new policy but your data is locked in, you either accept the new terms or lose access to your own passwords.
  • Account lockouts. Forgot your payment method? Card expired? Some password managers cut access to your vault when your subscription lapses. Your own passwords, behind a payment wall.

The Claspt Philosophy

We believe in a simple principle: security tools should protect you from threats, not from yourself.

Encryption exists to keep attackers out. It should never be used to keep you in. When you choose Claspt, you are choosing a tool that works for you unconditionally. Not a tool that works for you until you stop paying.

  • Your vault is a folder on your filesystem. You can back it up, move it, copy it, or delete it.
  • Your files are standard markdown. No proprietary encoding, no vendor-specific database.
  • Your encryption keys derive from your master password. We never have them. We cannot lock you out even if we wanted to.
  • Complete Export creates a password-protected zip of everything. Secrets Only Export gives you a CSV you can import into any password manager. Both are free.
  • If you stop paying for Pro, your data stays exactly where it is. Sync stops. Nothing else changes. Export still works.
  • If Claspt disappeared tomorrow, your vault would still be right there on your disk, fully readable.

That is what data ownership actually looks like. Not "we store your data securely." But "we have no power over your data at all."

Don't take our word for it — go to Settings → Export and download everything right now. Your vault is just markdown files and your secrets are just values. Take them anywhere.

Try Claspt Free

Unlimited passwords. Unlimited notes. Full encryption. No restrictions on your own data. Export anytime. Browser extension included free.

Download Free