Free
$0 / forever
Everything you need for personal bookmarks, fully encrypted, no credit card.
- Unlimited bookmarks & collections
- Browser-bar UI across every tab
- Multi-device sync
- Zero-knowledge encryption — server-generated keypair, your password unlocks it
- Import from raindrop.io
- Side panel, popup, full management page
- Clean export anytime — no lock-in
Pro
$5 / month
Everything in Free, with higher limits and priority sync — encrypted just the same.
- Everything in Free
- Expanded bookmark + collection limits
- Priority sync queue
- Email support
Free signup is live today — paid plans land soon.
Max
$10 / month
Everything in Pro, plus full control of your encryption keys — even we can’t access them.
- Everything in Pro
- Bring your own key — generate the private key on your hardware, upload only the public half
- No wrapped private key on our server — ever
- Hardware-token compatible (YubiKey, Nitrokey, age, OpenSSL)
- Switch between key modes anytime
- Priority support
- More coming: shared collections, automated backups, audit log
Free signup is live today — paid plans land soon.
No lock-in. Ever.
Your bookmarks belong to you, not us. Export a full-fidelity, decrypted JSON backup whenever you like — no waiting period, no “contact sales,” no degraded read-only mode. The extension runs multiple accounts and servers side by side, so you’re never tied to a single endpoint.
How zero-knowledge encryption works.
Both tiers protect your bookmark data from us. The difference is who holds the private key.
Server-generated key, password-wrapped
When you sign up, your browser generates an RSA keypair on your device. The private key is wrapped (encrypted) with a key derived from your password using Argon2id, then uploaded. We store only the wrapped blob. Without your password — which never reaches our servers in plaintext — we cannot unwrap the private key or decrypt your bookmarks.
You generate the key, we never see it
Generate your keypair anywhere you trust — OpenSSL, age, a YubiKey, a hardware HSM. Upload only the public key. The private key never traverses our network in any form. We can encrypt new bookmarks to your account, but we can never decrypt them, and there is no wrapped-private-key blob anywhere on our servers for us, a subpoena, or a database breach to crack.
Crypto details: RSA-OAEP-256 for the user keypair, AES-GCM-256 per-record envelope, Argon2id for password-based key derivation, PBKDF2-SHA256 for the separate login auth-hash. All WebCrypto-native — no proprietary stacks.
FAQ
What happens if I forget my password (Free tier)?
Your bookmarks are unrecoverable. That’s the trade-off: we can’t read them, so we can’t restore them. Set up password-manager backup or a recovery export when you sign up.
Can I switch between Free and Max key modes?
Yes, in either direction. Free → Max: upload your public key, the client re-wraps every record’s data key, the server deletes the wrapped private key blob. Max → Free: paste your private key into the client, it’s wrapped with your password and uploaded. Switch costs are seconds, not money.
Does this break raindrop.io import?
No. Import happens client-side: the extension pulls plaintext from raindrop.io, encrypts each record on your device, then uploads ciphertext to us. We never see your raindrop data unencrypted.
Can I export my data?
Yes — a full-fidelity, decrypted JSON backup of your whole account. Your data, no lock-in.
Will there ever be a free tier limit?
No bookmark count limit on free. We may eventually cap collections or sync frequency if abuse becomes a thing, but we’ll never paywall the encryption itself.