Free
$0 / forever
Everything you need for personal bookmarks, fully encrypted, no credit card.
- Unlimited bookmarks & collections
- Browser-bar UI across every tab
- Multi-device sync
- Zero-knowledge encryption — server-generated keypair, your password unlocks it
- Import from raindrop.io
- Side panel, popup, full management page
- Open-source extension & server
Personal
$5 / month
Everything in Free, with higher limits and priority sync — encrypted just the same.
- Everything in Free
- Expanded bookmark + collection limits
- Priority sync queue
- Email support
No credit card during trial. Cancel anytime.
Pro
$10 / month
Everything in Personal, plus full control of your encryption keys — even we can’t access them.
- Everything in Personal
- Bring your own key — generate the private key on your hardware, upload only the public half
- No wrapped private key on our server — ever
- Hardware-token compatible (YubiKey, Nitrokey, age, OpenSSL)
- Switch between key modes anytime
- Priority support
- More coming: shared collections, automated backups, audit log
No credit card during trial. Cancel anytime — data exports as JSON or back to raindrop.io.
Self-host? Free, forever.
Run the same open-source server yourself. MIT-licensed, no telemetry, full feature parity including both encryption modes. Cloud and self-hosted accounts can live side by side in the same extension.
How zero-knowledge encryption works.
Both tiers protect your bookmark data from us. The difference is who holds the private key.
Server-generated key, password-wrapped
When you sign up, your browser generates an RSA keypair on your device. The private key is wrapped (encrypted) with a key derived from your password using Argon2id, then uploaded. We store only the wrapped blob. Without your password — which never reaches our servers in plaintext — we cannot unwrap the private key or decrypt your bookmarks.
You generate the key, we never see it
Generate your keypair anywhere you trust — OpenSSL, age, a YubiKey, a hardware HSM. Upload only the public key. The private key never traverses our network in any form. We can encrypt new bookmarks to your account, but we can never decrypt them, and there is no wrapped-private-key blob anywhere on our servers for us, a subpoena, or a database breach to crack.
Crypto details: RSA-OAEP-256 for the user keypair, AES-GCM-256 per-record envelope, Argon2id for password-based key derivation, PBKDF2-SHA256 for the separate login auth-hash. All WebCrypto-native — no proprietary stacks.
FAQ
What happens if I forget my password (Free tier)?
Your bookmarks are unrecoverable. That’s the trade-off: we can’t read them, so we can’t restore them. Set up password-manager backup or a recovery export when you sign up.
Can I switch between Free and Pro key modes?
Yes, in either direction. Free → Pro: upload your public key, the client re-wraps every record’s data key, the server deletes the wrapped private key blob. Pro → Free: paste your private key into the client, it’s wrapped with your password and uploaded. Switch costs are seconds, not money.
Does this break raindrop.io import?
No. Import happens client-side: the extension pulls plaintext from raindrop.io, encrypts each record on your device, then uploads ciphertext to us. We never see your raindrop data unencrypted.
Can I export my data?
Yes — decrypted JSON, or back to raindrop.io’s native format. Your data, no lock-in.
Will there ever be a free tier limit?
No bookmark count limit on free. We may eventually cap collections or sync frequency if abuse becomes a thing, but we’ll never paywall the encryption itself.