Rivault Review (2026): Pricing, Features & Honest Verdict

Rivault Review: The Verdict

Rivault is a zero-knowledge vault that stores your personal data so AI agents can complete tasks with it without ever holding it in plain text. Every access needs a Face ID or passkey approval, and values are redacted after the task ends. Best for: people running agents that book, buy and fill in forms. Price: free plan, Pro $9.90/mo. Rating: 7/10.

We found Rivault at #14 on Product Hunt with 111 upvotes, sitting in a category that barely existed six months ago. Everyone shipping agent tools this year has been racing to make agents do more. Almost nobody has been asking what happens to your passport number after the agent is done with it.

What is Rivault?

Rivault is an encrypted vault built specifically for the moment an AI agent asks you for something private. You store personal data and context in it once: name, date of birth, passport number, card details, shipping address, dietary restrictions, insurance information, whatever your agents keep needing. When an agent hits a task that requires one of those items, Rivault sends you an authorization request. You review exactly what is being asked for and why, approve it with a passkey or Face ID, and the agent gets the value for the duration of that task only. Afterwards it is redacted from the agent’s memory and logs.

The founder is Hyu Lim, who previously shipped data tooling at Uber, Reddit and TikTok. The pitch rests on a statistic Rivault puts on its own homepage: half of surveyed AI adopters admit to pasting sensitive data into AI tools, and 18% have shared highly sensitive information. That is the behaviour Rivault is trying to replace. Right now it connects to OpenClaw, Claude and any agent that speaks MCP or takes an API key, with ChatGPT marked as coming soon. It launched on Product Hunt in July 2026 under AI infrastructure and security.

What Are Rivault’s Key Features?

Zero-knowledge encryption

Your data is encrypted in your browser before it is stored, using a key derived from a passkey that Rivault says it never holds. Their servers only ever see ciphertext. Decryption happens on your device, either in the Rivault desktop app or in your agent’s runtime. This is the correct architecture for the problem, and it is the same design pattern the serious password managers use. What we cannot do is verify it. There is no open-source client, no published audit and no third-party attestation, so today the claim rests entirely on Rivault saying so.

Per-item authorization with a passkey

Nothing leaves the vault silently. When an agent needs an item you get a request showing the reason, the specific fields being asked for and a sensitivity level per field. You approve or you do not. The flow they demonstrate is a flight booking where the agent asks for full name, date of birth, passport number and travel preferences, and each one is listed separately rather than bundled into a single yes. That granularity is the whole product. A vault that hands over everything on one tap would just be a slower autofill.

Redaction after every task

Once the task finishes, the decrypted values are stripped from the agent’s memory and logs. This is the feature nobody else is offering and the reason the product exists. The failure mode Rivault is targeting is not the agent misusing your data during the task, it is your passport number sitting in a chat transcript six months later, in a session log you forgot about, on a server you do not control. Understand the boundary, though: redaction is performed by Rivault’s desktop app on the local side. Once a value has been decrypted into a third-party model provider’s runtime, whether that provider retained a copy on their own infrastructure is outside Rivault’s reach.

Access rules and an audit log

You define per item whether an agent can take it freely or must request authorization each time. Everything an agent touches lands in an audit log, and that log is on the free tier rather than paywalled behind Pro, which is the right call. Security features that only exist on the paid plan are a bad look on a security product. Rivault avoided that, and every plan carries the same encryption, the same authorization flow and the same logging.

How Much Does Rivault Cost?

Rivault starts free and Pro is $9.90 a month. There are only two tiers. Basic costs nothing and gives you up to 10 items in your vault, one-tap authorization, the audit log and the full encryption model. Pro at $9.90/mo removes the item cap and changes nothing else. No card is needed to start, and there is no annual discount published.

Ten items sounds generous until you list what you would actually store. Full name, date of birth, passport number, driving licence, home address, one card, one phone number, one email, travel preferences and insurance details is exactly ten. Anyone with a second card, a partner’s details or a work address is over the line on day one. The free tier is a demo, not a plan, and that is worth knowing before you set it up expecting to stay on it.

As a paid product the pricing is reasonable but not cheap for what it is. 1Password Individual is $3.99/mo on annual billing or $4.99 billed monthly, after the March 2026 increase. Bitwarden Premium is $1.65/mo, billed annually at $19.80 a year. So Rivault is asking roughly 2.5 times a full password manager for something that does one narrower job. The counter-argument is fair: neither of those products does per-task authorization or post-task redaction for agents, and 1Password’s MCP work is aimed at giving coding agents access to secrets without exposing them, which is a different problem from letting a consumer agent book a flight with your passport. But $9.90 is priced like a category leader, and Rivault launched three weeks ago.

Who is Rivault Best For?

Use Rivault if you are already running agents against the real world. If you have an OpenClaw or Claude setup that books travel, orders things, fills in applications or schedules appointments, you are currently either typing sensitive details into a chat window or not using the agent for those tasks at all. Rivault is built for exactly that gap, and it is the only product we have seen that treats post-task cleanup as a first-class feature rather than an afterthought.

It also makes sense for anyone whose agent work touches medical, insurance or financial details, where the exposure from a leaked transcript is materially worse than an embarrassing email draft. The use cases Rivault lists, prescription refills and insurance-backed appointment booking among them, are the ones where a chat log is a genuine liability.

Skip Rivault if your agents only write code, draft copy or summarise documents. There is nothing here for you: the vault holds personal data, not API keys and deployment secrets, and 1Password’s Environments MCP server already covers the credentials-for-coding-agents case with a company behind it. Skip it too if you are the sort of buyer who requires a SOC 2 report before installing a security product, because there is not one yet. And skip it if you cannot tolerate an unpublished recovery story: the site says your passkey is the only key to your vault and that Rivault never stores it, which is the honest cryptographic position, but no recovery process is documented anywhere. Losing that passkey may mean losing the vault.

Best Rivault Alternatives

1Password. $3.99/mo for Individual on annual billing, $4.99 monthly. The Environments MCP server lets coding agents use secrets without the values ever entering the model’s context, and it is available on personal as well as business accounts. It is a real company with real audits, which is the thing Rivault most obviously lacks. But it is built for developer credentials, not for handing your passport number to a travel agent, and there is no per-task redaction step.

Bitwarden. Premium is $1.65/mo, billed annually at $19.80. The cheapest credible vault you can buy and genuinely open source, which matters if you want to verify the encryption claims yourself rather than take them on trust. No agent authorization layer at all, though, so you are back to copying values into a chat window by hand.

Doing nothing. Free, and it is what most people will keep doing. Browser autofill plus a password manager covers the checkout case reasonably well, and if your agent workload is light, the exposure may not justify another subscription and another passkey to protect. This is the real competitor and Rivault has to beat it on convenience, not just on security.

Final Verdict: Is Rivault Worth It?

Rivault has identified a problem that is real, growing and almost entirely unaddressed, and it has designed a sensible answer to it. Encrypt on the device, authorize per item, redact after the task. Nothing in the architecture is wrong. The audit log on the free tier and the per-field authorization screen both suggest someone who has thought about this properly rather than bolting security language onto a form filler.

What holds the score at 7 is that this is a security product with a three-week track record, one named founder, no audit, no open-source client and no published recovery path, asking you to concentrate every sensitive detail you own into one place. That concentration is the point of a vault, and it is also exactly why the trust bar is higher here than for any other tool launching this month. Our recommendation: try it free, put your low-stakes context in it first, and watch for an independent audit or an open-sourced client before you move your passport and card details across. The idea deserves to win. Give the implementation another six months to earn that.