HCP Terraform legacy free plan ends March 31, 2026. Step-by-step migration guide: stay on enhanced free tier, migrate to Spacelift, Scalr, Terragrunt Scale, or self-host with OpenTofu. Decision matrix included.

HCP Terraform Migration Guide — March 31 Deadline

Published 2026-03-26 · Not yet reviewed · Deadline: March 31, 2026 · Affects legacy free plan users

Mar 31
Legacy Plan Ends
500
New Resource Cap
5
Migration Paths
9
Free Alternatives

HCP Terraform's legacy free plan ends on March 31, 2026. All users on the legacy plan will be auto-migrated to an enhanced free tier with different limits: 500 managed resources (previously unlimited for small teams), unlimited users, SSO, and policy as code (Sentinel + OPA).

If you have fewer than 500 managed resources, you may not need to do anything — the auto-migration preserves your workflows. But if you're approaching the cap, want more concurrent runs, or are concerned about vendor lock-in under HashiCorp's BSL license, this guide covers your options.

From our tracker: HashiCorp legacy free plan for HCP Terraform ends March 31, 2026. All legacy free plan users auto-migrated to enhanced free tier with different limits: 500 managed resources (previously unlimited for small teams), unlimited users, 1 concurrent run, SSO, and policy as code (Sentinel + OPA) Source ↗

In This Guide

  1. What's Changing on March 31
  2. Who's Affected
  3. 5 Migration Paths
  4. Decision Matrix
  5. Step-by-Step Migration
  6. Free IaC Alternatives Comparison

1. What's Changing on March 31

HashiCorp is ending the legacy free plan for HCP Terraform (formerly Terraform Cloud) and auto-migrating all users to an enhanced free tier with new capabilities — and new limits.

FeatureLegacy Free PlanEnhanced Free Tier (New)Change
Managed ResourcesUnlimited (small teams)500Cap added
Users5UnlimitedImproved
SSONot includedIncludedNew
Policy as CodeNot includedSentinel + OPANew
Concurrent Runs11Same
State ManagementIncludedIncludedSame
Remote OperationsIncludedIncludedSame
LicenseBSL 1.1BSL 1.1Same
Key takeaway: The enhanced free tier is actually better for teams that need SSO and policy — but the 500 resource cap is the critical constraint. If your Terraform state manages more than 500 resources, you will need a paid plan or an alternative.

2. Who's Affected

Not everyone needs to migrate. Here's how to assess your situation.

No action needed

Teams with <500 managed resources on the legacy free plan. You'll be auto-migrated to the enhanced free tier on March 31 and actually gain SSO, unlimited users, and policy as code. Check your resource count: terraform state list | wc -l

Should evaluate alternatives

Teams with 300-500 resources that are growing. You're safe today but may hit the cap soon. Start trialing alternatives now so you're not forced into a paid plan under time pressure.

Must act before March 31

Teams with >500 managed resources on the legacy free plan. After March 31, you'll be on the enhanced tier and over the resource cap. You'll need to either upgrade to a paid plan ($0.00125/resource/hour for Standard) or migrate to an alternative.

3. Five Migration Paths

Each path has trade-offs between migration effort, feature coverage, and long-term flexibility.

Stay on HCP Terraform Enhanced Free
Best for: Teams with <500 managed resources who want zero migration effort
Resources: 500 managed resources
Users: Unlimited
Cost: $0/month
Migration Effort: None — auto-migrated
Key Features: SSO, Sentinel + OPA policy, 1 concurrent run
Pros: Zero effort, keeps existing workflows, SSO + policy included free
Cons: 500 resource cap, 1 concurrent run bottleneck, vendor lock-in (BSL license)
View details →
Migrate to Spacelift
Best for: Teams wanting managed IaC with credential-less cloud integration
Resources: Unlimited (1 stack limit on free tier)
Users: 2
Cost: $0/month
Migration Effort: Medium — reconfigure backend + CI
Key Features: OIDC integration, cost estimation, 1 public worker, policy as code (OPA)
Pros: No resource cap, credential-less cloud access, OPA policy, cost estimation
Cons: 2 user limit, 1 public worker, single stack on free tier
View details →
Migrate to Scalr
Best for: Teams needing unlimited resources and workspaces with managed state
Resources: Unlimited
Users: Unlimited
Cost: $0/month (50 runs/mo)
Migration Effort: Medium — reconfigure backend
Key Features: Full Terraform CLI, OPA policy, SAML SSO, hierarchical config, 5 concurrent runs
Pros: Unlimited resources + users + workspaces, 50 free runs/month, OPA policy, SSO
Cons: 50 runs/month cap, 5 environment limit on free tier
View details →
Migrate to Terragrunt Scale
Best for: Gruntwork users or teams wanting GitOps-native IaC orchestration
Resources: 500+ managed resources
Users: N/A
Cost: $0/month
Migration Effort: Medium-High — adopt Terragrunt wrapper
Key Features: GitOps from GitHub/GitLab, dependency-ordered plan/apply, drift detection, module updates
Pros: Drift detection, GitOps-native, dependency ordering, automatic module updates
Cons: Requires Terragrunt adoption, newer platform (launched 2026)
View details →
Self-Host with OpenTofu
Best for: Teams wanting full control, no vendor lock-in, and unlimited everything
Resources: Unlimited
Users: Unlimited
Cost: $0 (+ hosting costs)
Migration Effort: High — set up state backend, CI/CD, locking
Key Features: Full Terraform compatibility (MPL 2.0 fork), state encryption, provider-defined functions
Pros: No limits, no vendor lock-in, MPL 2.0 license, Linux Foundation governed, active community
Cons: Must manage state backend (S3/GCS), CI/CD pipeline, locking, no managed UI
View details →

4. Decision Matrix

Match your situation to the recommended migration path.

Your SituationRecommended PathWhy
Small team, <500 resources, no rush Stay on Enhanced Free Zero migration effort, auto-migrated, SSO included
Growing team, approaching 500 resources Scalr Unlimited resources + users, 50 runs/month, SSO, OPA policy
Need credential-less cloud integration Spacelift OIDC integration, cost estimation, managed workers
Already using Terragrunt Terragrunt Scale Native integration, drift detection, GitOps, module updates
Want zero vendor lock-in OpenTofu (self-hosted) MPL 2.0 license, Linux Foundation governed, full control
Large team, >1000 resources, need SSO Scalr Unlimited everything on free tier, SAML SSO, hierarchical config
Compliance-heavy, need policy as code Spacelift or Scalr Both offer OPA policy on free tier; HCP enhanced also has Sentinel + OPA
Want to evaluate before March 31 Stay on Enhanced + trial alternatives Auto-migration buys time; trial Scalr/Spacelift in parallel

5. Step-by-Step Migration

If you've decided to move off HCP Terraform, here's the general migration process. Specific steps vary by target platform.

1

Audit Your Current State

Run terraform state list | wc -l to count managed resources. Export your state: terraform state pull > backup.tfstate. Document workspace names, variable sets, and policy configurations.

2

Choose Your Target Platform

Use the decision matrix above. Sign up for a free account on your target platform and verify the free tier meets your needs before starting migration.

3

Migrate State Backend

Update your backend block in your Terraform config. For self-hosted (OpenTofu): use S3, GCS, or Azure Blob with DynamoDB/Cloud Storage locking. For managed platforms: follow their backend configuration docs. Run terraform init -migrate-state to move state.

4

Update CI/CD Pipeline

Replace HCP Terraform remote execution with your new platform's CI/CD integration. Most alternatives support GitHub/GitLab native integration. Update environment variables, secrets, and API tokens.

5

Verify & Validate

Run terraform plan on the new platform — it should show no changes if state migrated correctly. Test a small, non-destructive apply. Confirm policy enforcement and drift detection work as expected.

New entrant: Terragrunt Scale launched its free tier specifically to capture teams migrating from HCP Terraform. From our tracker: Gruntwork launches free tier for Terragrunt Scale IaC orchestration platform, positioned as HCP Terraform free tier alternative ahead of HashiCorp March 31, 2026 EOL. Includes GitOps, drift detection, and module update automation Source ↗

6. Free IaC Alternatives Comparison

All 9 IaC tools in our index tagged as HCP Terraform alternatives, with verified free tier details.

PlatformFree TierCategoryVerified
Pulumi Individual Infrastructure 2026-09-09
Spacelift Free Infrastructure 2026-09-02
HCP Terraform Free (Enhanced) Infrastructure 2026-04-19
Brainboard Free Infrastructure 2026-08-01
Scalr Free Infrastructure 2026-08-22
Terragrunt Scale Free Infrastructure 2026-08-12
Terramate Free CI/CD 2026-07-11
Terrateam Free CI/CD 2026-07-09
Checkov Open Source Security 2026-07-29

Bottom Line

If you're under 500 resources:

Do nothing. The auto-migration to the enhanced free tier gives you SSO and policy as code for free. Monitor your resource count and have a backup plan ready.

If you're over 500 resources:

Scalr offers the most generous free tier (unlimited resources, users, and workspaces). Spacelift is strong on cloud integration. For zero vendor lock-in, self-host with OpenTofu.

If you're concerned about BSL lock-in:

OpenTofu (MPL 2.0, Linux Foundation) is the only fully open-source option. All managed alternatives are proprietary platforms with their own lock-in trade-offs.

Related Guides

More resources for evaluating IaC tools and tracking pricing changes.

Methodology: Free tier details sourced from HashiCorp's pricing page. Verified April to September 2026. Migration steps based on official Terraform backend migration documentation. Resource counts and feature comparisons from our index of 1,547 tracked developer tools.

This guide covers HCP Terraform migration before the March 31, 2026 deadline. For post-deadline cost analysis and expanded alternatives, see Terraform Cloud Free Tier Removed. For a full comparison of IaC alternatives, see HCP Terraform Alternatives. Browse all 1,547 developer tools at /search.

Get this data in your AI editor

Track HCP Terraform pricing changes and find free IaC alternatives from your AI assistant. Get alerts on free tier changes and compare infrastructure tools — directly in your editor.

claude mcp add agentdeals -- npx -y agentdeals