ExpressVPN password manager users face a significant policy reversal: the company quietly changed the terms of ExpressKeys, its standalone password manager, so that an active VPN subscription is now required to add new passwords after cancellation. What was promised as an always-free tool has become subscription-dependent, locking existing users into renewal if they want to manage their credentials.
Key Takeaways
- ExpressVPN password manager now requires active subscription to add new passwords post-cancellation
- Existing stored passwords remain accessible but read-only without an active subscription
- Keys feature sunsets March 5, 2026, migrating all users to the standalone ExpressKeys app
- ExpressKeys includes zero-knowledge encryption, 2FA generation, and biometric unlock across iOS and Android
- Import supported from LastPass, 1Password, Dashlane, and iCloud Keychain
The U-Turn: From Always-Free to Subscription-Locked
ExpressVPN originally promised that its password manager—first called Keys, now rebranded as ExpressKeys—would remain free and fully functional forever, even after users cancelled their VPN subscription. That promise is dead. Today, the company requires an active ExpressVPN subscription (Advanced or Pro tier) to set up ExpressKeys for the first time and to add new passwords. Existing stored credentials remain accessible after cancellation, but in read-only mode—users cannot edit, update, or create new password entries without renewing their VPN subscription.
This is a bait-and-switch that hits existing users hardest. Someone who relied on the always-free promise and cancelled their VPN subscription now faces a choice: pay to keep managing their passwords, or lose the ability to update credentials when they change. For a password manager—a tool meant to reduce friction in security—this friction is exactly backwards.
What ExpressKeys Offers (and What You Lose Without It)
ExpressKeys launched as a standalone iOS and Android app with legitimate security features: zero-knowledge encryption, cross-device sync, biometric unlock via Face ID or fingerprint, and two-factor authentication (2FA) and one-time password (OTP) generation. The password health dashboard flags weak, reused, or compromised passwords—useful features that rival services like 1Password and LastPass also provide. You can import existing passwords from LastPass, 1Password, Dashlane, iCloud Keychain, or your browser.
The browser extension was rebranded to match, continuing to sync smoothly with the app. For users who set up ExpressKeys while maintaining an active subscription, the experience is polished and functional. The problem emerges the moment the subscription lapses: you own your passwords, but you cannot touch them. You cannot add a new credit card, update a compromised password, or create a new login without paying ExpressVPN again.
When Keys Disappears: The March 2026 Deadline
ExpressVPN is sunsetting the in-app Keys feature on March 5, 2026, forcing all users to migrate to the standalone ExpressKeys app. The company frames this as an upgrade—moving password management out of the VPN app into a dedicated tool—but the timing coincides with the subscription requirement, creating a hard deadline for users to decide whether they want to keep their vault accessible.
Migration is straightforward: download ExpressKeys, sign in with your ExpressVPN credentials, and your entire vault (passwords, notes, credit cards, 2FA codes) transfers automatically. Both apps sync during the transition, so there is no data loss. But after March 5, 2026, the old Keys feature disappears entirely, and all passwords live only in ExpressKeys—which requires a subscription to modify.
The Real Cost: Who Wins and Who Loses
ExpressVPN Advanced and Pro subscribers get ExpressKeys included at no extra cost. For them, this is a free upgrade to a dedicated password manager with better features than the in-app version. But for users who cancelled their VPN subscription—or who never subscribed in the first place—the always-free promise evaporates. This is a classic subscription-service tactic: offer a free tool to build habit and lock-in, then monetize it later by restricting core functionality.
The read-only access after cancellation is a thin consolation. Yes, you can still view your stored passwords. But in a world where passwords change constantly, where new accounts spawn weekly, and where security breaches force credential updates monthly, read-only access is crippling. It forces a choice: renew the VPN subscription just to manage passwords, or abandon the tool entirely and migrate to a truly independent password manager like Bitwarden or 1Password.
How to Migrate Your Data Before March 2026
If you use Keys today and want to keep full access to your passwords without a subscription, migration is urgent. Download the ExpressKeys app on iOS or Android, enter your ExpressVPN verification code (sent to your account email), unlock with biometrics or your vault password, and your entire vault transfers automatically. The browser extension is already rebranded to ExpressKeys, so syncing continues uninterrupted.
If you want to abandon ExpressVPN’s password manager entirely, export your data while you still can. ExpressKeys supports export to CSV or JSON, and you can import into LastPass, 1Password, Dashlane, or any other manager that accepts standard formats. Do this before your subscription expires—once you lose write access, you cannot export your vault from ExpressKeys.
Frequently Asked Questions
Can I use ExpressKeys without an ExpressVPN subscription?
You can view your existing passwords without an active subscription, but you cannot add new passwords, edit existing ones, or create new entries. Setting up ExpressKeys for the first time requires an active ExpressVPN subscription.
What happens to my passwords after the Keys feature sunsets on March 5, 2026?
All Keys data migrates automatically to ExpressKeys. Your passwords remain accessible, but the same subscription restriction applies: you need an active subscription to add or modify passwords.
Can I import my ExpressVPN passwords into another password manager?
Yes. ExpressKeys supports export, and you can import your vault into LastPass, 1Password, Dashlane, or any manager that accepts standard formats. Export your data while you still have an active subscription to avoid losing write access.
ExpressVPN’s reversal on the always-free password manager promise is a reminder that free features bundled with paid services are never truly free—they are marketing tools with expiration dates. For users who valued Keys as a no-strings-attached credential store, the subscription requirement is a betrayal. For ExpressVPN, it is a revenue play dressed up as a product upgrade. Migrate your data now, or be prepared to pay to keep managing your passwords.
This article was written with AI assistance and editorially reviewed.
Source: TechRadar
