Password managers

A client’s form asks how your team stores passwords, and the honest answer is a spreadsheet. A business password manager fixes that for about $4 a person a month, billed annually. From 5 to 50 people, buy Keeper Business; under 5, Bitwarden Teams. Here’s what each costs at 5, 15 and 40 people. Prices are in US dollars.

Buy the plan that works the day someone leaves

The product matters less than the plan. Keeper Business Starter is $2 a user a month, and it has no vault transfer and no shared team folders, so a leaver’s records can’t move to whoever takes over. Proton Pass Essentials is $1.99, and group sharing and activity logs wait on its Professional plan. Pay the difference: Keeper Business costs $120 a year more than Starter at 5 people. Check it during the trial with the steps for the day someone leaves.

Ignore single sign-on, and don’t choose on SOC 2

Pay for single sign-on only if your team already signs in through Microsoft 365, Google Workspace or Okta, because then closing a leaver’s work account closes the password manager too. Don’t let SOC 2 decide it either: Keeper, Bitwarden and 1Password all list it. Down to two tabs? Keeper or Proton Pass comes down to that same leaver handover.

Move the shared logins before you invite anyone

Set up recovery and a second admin, put the shared logins in, and only then send invitations, so people arrive to something useful. There’s an afternoon’s plan for rolling it out to staff. If an insurer is the one asking, the password manager is only part of it: see what the renewal form wants.