The consumer password manager market has done in eighteen months what streaming took six years to do: consolidate, restructure its tiers, and then quietly remove the free capability that drove adoption in the first place.
The sequence is consistent enough that it is worth describing as a pattern rather than a series of separate corporate decisions.
The order things get cut
Sync goes first. Not the vault — the vault stays free, because a password manager holding one device’s credentials is still useful enough to keep you inside the product. What moves behind a paywall is synchronising between devices, which is the cheapest thing on the balance sheet to provide and the most expensive thing for a user to lose.
That ordering is not accidental. A user with credentials on one device and a paywall between them and their laptop has a problem that costs money to solve and hours to solve any other way.
Then sharing. Family or household sharing is the second to go, and it converts a single subscription into a per-seat one.
Then item count. Least common, because it is the most visible and the most resented.
Why this market is unusually exposed
A password manager is infrastructure. People commit to one for a decade, and the switching cost is not the export — most of them export fine — it is that changing manager means touching every credential you own and re-learning a flow you use twenty times a day.
That produces an unusually captive user base, and captive user bases attract tier restructuring. The economics here are closer to a mobile carrier than to a note-taking app.
The only structural hedge
Not choosing carefully. Choosing something whose terms cannot be changed unilaterally.
Open-source clients mean the code you run is inspectable and forkable. Self-hosting means the sync server is yours. Neither guarantees the company survives; both mean its commercial decisions stop being your problem.
Bitwarden is the mainstream example — open-source clients, documented self-hosting, and a free tier that includes unlimited items across unlimited devices, which is precisely the capability the rest of the market has been moving behind paywalls.
The platform keychains are the other hedge, for a different reason. Apple’s Passwords app and the Android equivalent are free because they are retention features for a hardware business, not products that need to monetise. That makes them structurally stable and structurally locked to one ecosystem.
What this means if you are choosing now
Ask one question that most reviews do not: what is the cheapest arrangement under which this company still makes money from me, and can I live there?
If a product’s free tier exists to convert you, plan on it changing. If it exists because the company’s revenue comes from somewhere else — enterprise seats, hardware, self-hosted support contracts — it is more likely to survive.
That is a less satisfying criterion than a feature comparison. It has predicted this market better over eighteen months than any feature comparison did.