Terms of Service

Last updated: 12 March 2026

1. Acceptance

By using Lockbox (the browser extension, CLI tool, VS Code extension, or dashboard at dashboard.yourlockbox.dev), you agree to these terms. If you don't agree, don't use the service.

2. What Lockbox is

Lockbox is a local-first, zero-knowledge tool for storing and managing API keys and secrets. It includes a Chrome extension, a command-line interface, a VS Code extension, and an optional cloud dashboard for sync and team features.

3. Your responsibilities

• Master password: You are solely responsible for your master password and 12-word recovery phrase. We cannot recover your vault if you lose both. Store them safely.
• Lawful use: You agree to use Lockbox only for lawful purposes and in compliance with all applicable laws.
• Account security: You are responsible for maintaining the security of your account credentials and devices.

4. Free and Pro tiers

Free tier: Lockbox's core functionality (local vault, browser auto-fill, CLI) is free and always will be.

Pro tier: Cloud sync, team vaults, and advanced features require a paid subscription at $5/month. Payments are processed by Stripe. You can cancel anytime from the dashboard; your subscription remains active until the end of the billing period.

5. Open source

Lockbox's source code is available under the MIT License at github.com/Waldo777-bh/lockbox. You are free to fork, modify, and self-host. These Terms apply to the hosted service at yourlockbox.dev and dashboard.yourlockbox.dev.

6. Data and encryption

Lockbox uses client-side encryption. Your vault is encrypted before it leaves your device. We cannot access, read, or recover your stored secrets. See our Privacy Policy for details on what data we do and don't collect.

7. Availability

We aim for high availability but provide the service "as is" without uptime guarantees. The local extension and CLI work entirely offline. Cloud sync and dashboard features depend on third-party infrastructure (Supabase, Railway, Clerk).

8. Limitation of liability

To the maximum extent permitted by law, Lockbox and its contributors are not liable for any indirect, incidental, or consequential damages arising from your use of the service. This includes, but is not limited to, loss of data, loss of access to secrets, or security breaches resulting from compromised master passwords.

9. Termination

You can stop using Lockbox at any time by uninstalling the extension, deleting the CLI config, and/or deleting your dashboard account. We may suspend accounts that violate these terms or applicable law.

10. Changes

We may update these terms. Material changes will be communicated through the dashboard and extension changelog. Continued use after changes constitutes acceptance.

11. Contact

Questions about these terms? Email dev@yourlockbox.dev.