Zoho Vault
The cheapest business tier here and the most generous free plan: unlimited passwords, passkeys and devices for nothing, with passkey and YubiKey unlock and a built-in authenticator; Professional at £3.13 a user with folder sharing, a CLI and break-glass access; Enterprise at £6.30 with SSO; monthly billing on every tier. The gaps: SSO only at Enterprise with a five-seat floor, no published audit, no MCP server, and a data centre assigned by signup region with no UK option confirmed.
How we testZoho Vault is one product in Zoho Corporation's suite (Chennai, private, self-funded), sold to UK and EU customers through Zoho Corporation B.V. in Utrecht. It encrypts with AES-256 in the client so that the master password never reaches Zoho, and claims SOC 2 without saying which type; we found no ISO 27001 statement for Vault, no named auditor and no public audit report, no bug bounty page, and no breach on the record. The clients and server are closed source, there is no self-hosting, and Zoho assigns a data centre by the region you sign up from, with a US or EU centre the likely outcome for a UK company and no UK centre confirmed; the privacy policy says data may be stored in the US, the EEA and other countries where Zoho operates.
Prices in pounds, stated as before VAT, on 8 September 2026, and every tier can be paid monthly, which almost nobody else here offers. Free is remarkable on paper: unlimited passwords, passkeys, devices and storage, a two-factor authenticator, audit trails, and passwordless unlock with a passkey, Windows Hello, Touch ID or a YubiKey, with no sharing. Standard is £0.90 a user a month on annual billing or £1 monthly and adds sharing, TOTP sharing, one-time sharing with outsiders, ownership transfer for offboarding and, on the business view, centralised admin controls and roles. Professional at £3.13 (£3.50 monthly, minimum five users) is the tier a team needs: user groups, folder sharing, breached-password alerts, a break-glass account for emergencies, the command-line tool and webhooks. Enterprise at £6.30 (£7 monthly, minimum five) brings SSO for cloud apps, Okta and OneLogin integration, Active Directory provisioning and SIEM integration. A 15-day Enterprise trial needs no card and downgrades to Free.
For automation there is a documented REST API and the Professional-tier CLI, but no MCP server and no secrets-manager product. Support is email on Standard and priority email, phone and remote assistance from Standard upward, with no published SLA. There is no Vault-specific Trustpilot page; zoho.com as a whole scores 3.9 on 6,118 invited reviews, 73% five-star and 12% one-star, with export limits and outsourced support the recent one-star themes, mostly about other Zoho products. As in our CRM comparison, the price is hard to argue with and the polish is what you give up.
Not yet tested by Saaskly: assessed on published pricing, documentation, audit reports and third-party reviews.
Pros
- +The most generous free plan in the category and the cheapest paid tiers: £0.90, £3.13 and £6.30 a user, all with monthly billing
- +Passkey, YubiKey and biometric unlock, a built-in authenticator, one-time sharing with outsiders, break-glass emergency access, a CLI and a REST API
- +EU contracting entity for UK customers; phone support from the Standard tier
Cons
- −SSO only at Enterprise with a five-seat minimum; SCIM not confirmed as standards-based
- −No published audit or ISO 27001 statement, no bug bounty page, no MCP server
- −Data centre assigned by signup region with no UK centre confirmed; no Vault-specific reviews
Pricing
Minimum commitment: £0.90 (£0.90/yr for the entry licence). The least you can spend before walking away; excludes numbers, minutes and add-ons.
Standard (individual)
£1/mo · month-to-month
£0.90/yr on an annual commitment
Month-to-month costs 11% more
- ✓£0.90/user/mo annual, £1 monthly, ex VAT, 8 Sep 2026. Free: unlimited passwords, passkeys, devices, TOTP authenticator, passkey/YubiKey unlock, no sharing. No family plan.
Professional
£3.50/mo · month-to-month
£3.13/yr on an annual commitment
Month-to-month costs 12% more
- ✓£3.13/user/mo annual, £3.50 monthly, minimum 5 users: groups, folder sharing, breach alerts, break-glass access, CLI, webhooks. Enterprise £6.30 (£7 monthly), min 5, adds SSO, AD provisioning, SIEM. 15-day Enterprise trial, no card.
Specifications
| Rating | 3.5 |
| Business per user* | £3.13/user/mo annual · £3.50 monthly (Professional) |
| Individual | £0.90/mo annual · £1 monthly |
| Free tier | Full-featured |
| Seat minimum | 5 |
| Breach on record | No |
| Last audit | None published |
| Open source | No |
| Self-host | No |
| Passkeys | Store + unlock |
| TOTP codes | ✓ |
| Hardware key | ✓ |
| SSO | Extra cost |
| SCIM | No |
| Shared vaults | ✓ |
| Secrets manager | No |
| CLI | ✓ |
| MCP server | No |
| Owned in** | Other |
| Data location | Zoho data centre by signup region (US or EU); UK centre not confirmed |
| Trustpilot (reviews) | 3.9 (6,118) |
| Family plan | None |
| Scored tier | Professional |
| Tier above | Enterprise (£6.30/user) |
| Free tier limits | Unlimited passwords, passkeys and devices; no sharing |
| Money-back (days) | 0 |
| Encryption | AES-256, client-side; key derivation not published |
| Zero-knowledge | ✓ |
| Bug bounty | No |
| Email aliases | No |
| Built-in VPN | No |
| Admin console | ✓ |
| Role-based permissions | ✓ |
| Password health reports | ✓ |
| Dark-web monitoring | No |
| External sharing | ✓ |
| Guest accounts | No |
| Emergency access | ✓ |
| Audit logs | ✓ |
| Browser extensions | Chrome, Firefox, Edge, Safari, Brave, Vivaldi, Ulaa |
| Desktop apps | ✓ |
| Linux | No |
| API | ✓ |
| HQ | India |
| Owner | Zoho Corporation |
| SOC 2 | ✓ |
| ISO 27001 | No |
| Live chat | No |
| Phone support | ✓ |
| Support channels | Email, Phone (Standard and above), Remote assistance |
*Business per user: the business or teams tier the score is set on, per user per month on annual billing and then month-to-month, in the currency the vendor shows a UK visitor on the research date; see each profile for the VAT basis, the seat minimum and what the tier above adds.
**Owned in: where the company that owns the provider answers to. A US-owned provider is subject to US law (including the CLOUD Act) wherever the vault is stored; with a zero-knowledge design the vendor cannot read the vault either way, so this column is about the company, not the encryption. "Data location" records where the encrypted vault is stored.
Researched and drafted with AI assistance; reviewed and approved by Tim Meredith. How we use AI
Work at Zoho Vault? Something not look right? Register in the vendor portal to see what we publish and send corrections.