ExpressVPN has secretly nerfed its "free forever" password manager

Red ExpressVPN logo displayed on black smartphone screen
(Image credit: SOPA Images / Getty Images)

Updates to ExpressVPN's Terms of Service, and articles, appear to indicate a change in how its Keys password manager operates.

Previous communications stated that anyone who had subscribed to an ExpressVPN plan that included Keys could continue using the password manager indefinitely, even after their ExpressVPN subscription had expired.

What's changed?

Keys was launched in 2022. It was initially free for existing ExpressVPN subscribers to use, and was integrated into the VPN's app.

In a Reddit post published at launch, ExpressVPN explained users could use Keys even after their ExpressVPN subscription had ended. It said: "You just need to keep the ExpressVPN app for Android or iOS installed and/or keep the extension and the ExpressVPN app for Windows, Mac, or Linux installed on your computer."

ExpressVPN completes rollout of built-in password manager, Keys from r/Express_VPN

There was no mention of limited access to the app or your credentials, and from direct conversations Tom's Guide had with the ExpressVPN team at launch, we can confirm this was the intention at the start of Keys' life.

ExpressVPN Keys has been seriously revamped since 2022. It's now officially called ExpressKeys, has its own app, more features, and is included with ExpressVPN Advanced and Pro plans.

The FAQs section of the official ExpressKeys page says: "You'll need an active ExpressVPN subscription to set it up for the first time, though note you will retain access to credentials stored with ExpressKeys even if your ExpressVPN subscription expires."

However, ExpressVPN's Knowledge Hub answers the question: "Can I still use ExpressKeys after my ExpressVPN subscription expires?"

It was last updated on April 24, 2026, and says: "Yes, you can continue to use all the features of ExpressKeys across your devices, even after your ExpressVPN subscription expires. However, you won’t be able to add any new logins or other entries" – adding that you need to keep the app installed on your device.

The key difference here is the line "you won’t be able to add any new logins or other entries." This doesn't appear to be mentioned previously and indicates a shift in how ExpressVPN is operating Keys.

If you can't add new passwords, it renders Keys somewhat useless for non-subscribers who may have expected ongoing support, and represents a changing of the goalposts.

Screenshot of ExpressVPN's Terms of Service

Image: ExpressVPN's current Terms of Service, updated April 28, 2026. (Image credit: Future)

ExpressVPN's Terms of Service was last updated on April 28, 2026. It says: "If previously activated, you can continue to access existing ExpressKeys credentials even if you decide to stop using our ExpressVPN Service, but you may not be able to add new information."

We found an archived version of the Terms of Service, dated September 9, 2025. This version says: "You can continue to use ExpressVPN Keys even if you decide to stop using our VPN Service. Your Account will remain active, and the information added to ExpressVPN Keys will remain accessible to you even though you have ended your subscription Services."

Screenshot of archived version of ExpressVPN's Terms of Service, updated September 9, 2025.

Image: An archived version of ExpressVPN's Terms of Service, updated September 9, 2025. (Image credit: Future)

This is a clear difference, and suggests you can still add passwords to Keys, even after ending your ExpressVPN subscription.

Is this a problem?

ExpressVPN has the right to change how Keys operates. The issue here is the lack of clear messaging. There has been no announcement of the change, just subtle changes to articles and documents. It leaves us asking if ExpressVPN has tried to brush this change under the carpet.

Essentially, anyone who paid for ExpressVPN in the past believed they had access to Keys for life. These users will now find they can't add new passwords or logins to their app, potentially risking their account security and resulting in a need to switch to another password manager.

We have contacted ExpressVPN about this change, when it was introduced, and if this limit on Keys has always been the case.

ExpressVPN isn't the only VPN to offer a password manager. NordVPN has NordPass, which is included in NordVPN Plus plans and above, as well as a standalone app. Proton Pass is included in the Proton Unlimited subscription – which also includes Proton VPN.

Both apps have free versions with limited features. ExpressKeys was effectively free to use for ex-ExpressVPN subscribers, and it is a far more comprehensive app.

Disclaimer

We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone the illegal or malicious use of VPN services. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.

George Phillips
Staff Writer

George is a Staff Writer at Tom's Guide, covering VPN, privacy, and cybersecurity news. He is especially interested in digital rights and censorship, and its interplay with politics. Outside of work, George is passionate about music, Star Wars, and Karate.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.