Best Business Password Managers for 2026: 11 tools compared for buyers
This page helps you find the best password manager for business, whether you run a ten-person agency or an IT department with thousands of seats. The tools below store employee logins in an encrypted vault, let teams share access without pasting secrets into chat, and give admins a way to enforce policy and shut off accounts when someone leaves.
Each tool was compared on how well it fits a given team, which sharing and admin features it offers, how easy the apps are for employees, and how openly the vendor publishes pricing. The listings also show what each vendor states about security, directory sync and contract terms, so you can prepare questions before a trial.
Our shortlist at a glance
- Best for small teams that want a smooth rollout
1PasswordA flat Starter Pack covers up to 10 members, reviewers praise the polished apps, and SSO unlock works with Okta, Entra ID, OneLogin or Duo on Business.
$24.95 per month for up to 10 members (Teams Starter Pack, $299.40/yr) - Best for audit and compliance reviews
Keeper SecurityLists FedRAMP High, FIPS 140-3, SOC 2 and ISO 27001, which suits regulated buyers, and can later grow into privileged access management.
$2 per user/month (Business Starter, third-party reported) - Best for EU hosting with hands-on support
UniqkeyDanish vendor with EU-only hosting, ISO 27001 certification, SCIM 2.0, passkey support and phone support with a customer success manager.
Contact sales - Best open-source option with a free tier
BitwardenOpen-source code, a free organization plan, collections for sharing and SAML or OIDC SSO on the Enterprise plan.
Free organization plan; Teams $4 per user per month - Best for technical teams that want to inspect the code
PassboltFully open source with per-user OpenPGP encryption, Cure53 audits and a self-hosting option, though first-time onboarding is harder for non-technical staff.
$4.90 per user per month (Pro, billed annually, min 10 users) - Best employee-facing app experience
DashlaneReviewers describe clean apps, strong autofill and password health scoring, and SSO-based login is supported in a mainstream tier.
$2 per seat/month (Starter, third-party reported)
What are business password managers?
A business password manager is a shared, encrypted vault for the credentials a company depends on. Employees get a personal vault plus shared spaces for team logins, and the software fills passwords in the browser, generates strong ones and warns about weak or reused entries. Administrators sit on top of this with a console for inviting and removing people, setting master-password and MFA rules, and reading activity reports. Most products connect to an identity provider such as Okta or Microsoft Entra ID, so accounts follow the HR record. The category is used by IT leads, security teams and office managers who need to replace spreadsheets and sticky notes with something auditable.
Business Password Managers side by side
| Tool | Best for | Starting price | Free plan or trial |
|---|---|---|---|
| 1Password | Best for small teams that want a smooth rollout. | $24.95 per month for up to 10 members (Teams Starter Pack, $299.40/yr) | Free trial |
| Keeper Security | Best for audit and compliance reviews. | $2 per user/month (Business Starter, third-party reported) | Free trial |
| Uniqkey | Best for EU hosting with hands-on support. | Contact sales | Free trial |
| Bitwarden | Best open-source option with a free tier. | Free organization plan; Teams $4 per user per month | Free plan, Free trial |
| Passbolt | Best for technical teams that want to inspect the code. | $4.90 per user per month (Pro, billed annually, min 10 users) | Free plan |
| Dashlane | Best employee-facing app experience. | $2 per seat/month (Starter, third-party reported) | Free trial |
 LastPass | Teams already on LastPass wanting familiar admin tooling. | $4 per user/month (Teams, billed annually) | Free plan, Free trial |
 RoboForm | Small teams that want a cheap per-user business password manager. | From about $39.95 per user per year (third-party reported; business tiers drop with team size) | Free trial |
 NordPass | Cost-focused SMBs on Google Workspace. | $1.79 per user/month (Teams, 2-year plan, Cybernews) | Free trial |
 Zoho Vault | Teams already on Zoho or Microsoft/Okta wanting very low prices. | Free; paid from $0.90 per user/month (Standard, annual) | Free plan, Free trial |
 Proton Pass | Privacy-first teams in Europe. | $1.99 per user/month (Pass Essentials, billed annually) | Free plan, Free trial |
Prices as published by each vendor on October 24, 2026. "Contact sales" means the vendor publishes no price.
The 11 business password managers tools in detail
Best for small teams that want a smooth rollout
1Password
Password manager with a flat-price starter pack for small teams and per-user Business and Enterprise plans.
Teams of up to 20 get a flat-price Starter Pack, and larger groups move to per-user Business or Enterprise plans. Reviewers like the apps and easy sharing, while the Secret Key can irritate some staff. Expect to pay about twice Bitwarden Teams, and note there is no self-hosting.
- Best for
- Small teams of up to 20 via the Starter Pack.
- Company size
- Small teams to enterprise.
Key features
- Shared vaults and permissions
- Shared vaults with group permissions (Business)
- SSO and directory sync
- Unlock with SSO via Okta, Entra ID, OneLogin, Duo on Business; user and group provisioning listed on Business page.
- Admin console and reporting
- Custom business reports on account activity; Events Reporting streams to SIEM.
- Encryption and security record
- SOC 2 Type 2 listed on pricing comparison.
Pros
- Polished apps and UX.
- Strong security model.
- Easy sharing.
Cons
- Higher price than alternatives.
- Secret Key setup friction for some users.
Pricing: $24.95 per month for up to 10 members (Teams Starter Pack, $299.40/yr) · Free trial
Best for audit and compliance reviews
Keeper Security
Zero-knowledge business password manager that scales into a privileged access management suite, with the most compliance certifications of this group.
Keeper is a zero-knowledge business vault that can grow into privileged access management. It stands out for the longest certification list in this group, though add-ons for reporting make the final bill harder to predict.
- Best for
- Regulated or government-adjacent buyers needing FedRAMP, FIPS 140-3 or HIPAA alignment.
- Company size
- SMB through enterprise and government.
Key features
- Shared vaults and permissions
- Shared folders and records (vendor product, details not re-verified)
- SSO and directory sync
- SSO/SAML and SCIM listed on the Enterprise plan.
- Admin console and reporting
- Advanced Reporting & Alerts and Compliance Reporting sold as add-ons.
- Encryption and security record
- Zero-knowledge, end-to-end encryption; FedRAMP High, ISO 27001/27017/27018, SOC 2, FIPS 140-3 listed.
Pros
- Broad security certifications.
- Deep admin and PAM extensions.
Cons
- Add-ons make total cost hard to predict.
- No public price for higher tiers.
Pricing: $2 per user/month (Business Starter, third-party reported) · Free trial
Best for EU hosting with hands-on support
Uniqkey
Danish EU-hosted business password and access manager sold as one bundled quote-based package.
European firms that insist on EU-only hosting can ask this Danish vendor for a single bundled quote. The package lists group sharing, audit logs, SCIM 2.0 and passkeys, with phone support and a customer success manager. No public prices exist, and SSO is not mentioned, so confirm it.
- Best for
- European companies wanting EU-only hosting.
- Company size
- SMB to mid-market.
Key features
- Shared vaults and permissions
- Secure password sharing, group management.
- SSO and directory sync
- SCIM 2.0 listed; SSO not mentioned.
- Admin console and reporting
- Audit log, security scores, verified domains.
- Passkey and MFA support
- Passkeys supported.
Pros
- Group sharing and license savings.
- Support included.
Cons
- Help center thin.
- Few reviews.
Pricing: Contact sales · Free trial
Best open-source option with a free tier
Bitwarden
Open-source password manager with low per-user Teams and Enterprise prices, a free organization tier and self-hosting.
Cost-conscious or open-source-minded teams can begin with the free organization tier, then pay $4 per user monthly for Teams. SSO and self-hosting require Enterprise at $6. It works across platforms, though reviewers find the interface less polished than competitors and some admin features need Enterprise.
- Best for
- Budget-conscious teams: $4 per user per month for Teams.
- Company size
- SMB to enterprise.
Key features
- Shared vaults and permissions
- Collections and unlimited sharing in organization (Teams)
- SSO and directory sync
- SAML 2.0/OIDC SSO for Enterprise organizations; SCIM listed on Teams page.
- Admin console and reporting
- Event logs and API (Teams)
- Encryption and security record
- Open source, end-to-end encrypted; certifications not confirmed by the vendor.
Pros
- Ease of use and cross-platform support.
- Security and open source transparency.
- Low price.
Cons
- Interface less polished than rivals.
- Some advanced admin features need Enterprise.
Pricing: Free organization plan; Teams $4 per user per month · Free plan, Free trial
Best for technical teams that want to inspect the code
Passbolt
An open-source, OpenPGP-based password manager for teams that can be self-hosted or run as a hosted service.
Technical teams who want to audit the code and host it themselves are the intended users, with a free Community edition. Pro adds LDAP provisioning, SSO and activity logs, from $4.90 per user monthly for at least 10 users. Non-technical staff may struggle with first-time onboarding.
- Best for
- Technical teams that want to self-host and audit the code.
- Company size
- SMB to enterprise, technical teams.
Key features
- Shared vaults and permissions
- Per-secret OpenPGP encryption for each authorized user; folder and group sharing.
- SSO and directory sync
- Pro: LDAP (AD/OpenLDAP) provisioning and SSO via Microsoft, Google, OpenID; SCIM and AD FS listed as Pro features but checkmarks not confirmed.
- Admin console and reporting
- Pro: activity log of changes; log export to syslog listed (plan not confirmed)
- Encryption and security record
- OpenPGP, secrets encrypted per user, fully open source; Cure53 audits through 2026; SOC 2 Type II (2021)
Pros
- Easy password sharing in teams.
- Open source and auditable.
Cons
- First-time user onboarding is hard.
- Browser extension can be flaky.
Pricing: $4.90 per user per month (Pro, billed annually, min 10 users) · Free plan
Best employee-facing app experience
Dashlane
Business password manager with shared vaults, admin policy controls and phishing-alert style monitoring, sold in Starter, Team and Business tiers.
Small and mid-size firms that want an app employees enjoy using can test Starter, Team and Business tiers, with shared collections, policy controls and phishing-style alerts. Sources disagree on plan names and prices, so get a written quote. SSO is reported, but SCIM details are thin.
- Best for
- Small and mid-size teams that want a polished employee-facing app.
- Company size
- SMB to mid-market.
Key features
- Shared vaults and permissions
- Shared collections and group sharing (not confirmed by the vendor)
- SSO and directory sync
- SSO supported per expertinsights.com review; SCIM not confirmed.
- Encryption and security record
- Zero-knowledge design (vendor claim, not re-verified)
Pros
- Clean, easy-to-use apps and browser extension.
- Strong autofill and password health scoring.
Cons
- Pricing tiers and plan names are unclear across sources.
- Few details published on SCIM.
Pricing: $2 per seat/month (Starter, third-party reported) · Free trial
LastPass
Long-established business password manager with Teams, Business and Business Max tiers, still carrying the reputational weight of its 2022 breach.
Teams already familiar with its admin tooling can stay, with a free plan and Teams, Business and Business Max tiers. Before renewing, put the 2022 breach and the later UK ICO fine to your security reviewer. Business covers SSO for only three apps, so unlimited SSO means Business Max.
- Best for
- Teams already on LastPass wanting familiar admin tooling.
- Company size
- SMB to mid-market.
Key features
- SSO and directory sync
- Business: SSO for 3 apps, directory integrations (Okta, Entra ID); Business Max: unlimited SSO. SCIM not named.
- Encryption and security record
- 2022 breach exposed encrypted vault backups and metadata; ICO fined LastPass 1.2M GBP in December 2025.
- Dark web and breach monitoring
- Dark web monitoring features in Business Max (AI/Web monitoring)
Pros
- Familiar interface and broad integrations.
- Low entry price.
Cons
- Trust damaged by 2022 breach.
- SSO capped at 3 apps on Business.
Pricing: $4 per user/month (Teams, billed annually) · Free plan, Free trial
RoboForm
A long-running password manager from Siber Systems with a low per-user business price and form-filling as its signature feature.
Small teams that fill many web forms and have little budget can look at per-user yearly pricing that falls as headcount grows. Autofill is the main draw. Enterprises wanting a deep audit trail or PAM will need more. Ask the vendor to confirm SSO and SCIM details before any trial.
- Best for
- Small teams that want a cheap per-user business password manager.
- Company size
- SMB to mid-size; custom quotes above 1,000 users.
Key features
- Shared vaults and permissions
- Shared folders with role-based access reported by third-party review; not confirmed by the vendor.
- SSO and directory sync
- SSO and SCIM listed; SCIM options reported for Okta, OneLogin and Microsoft Entra ID (eSecurityPlanet)
Pros
- Quick login and form autofill work well.
- Simple browser extension and password generator.
Cons
- Support quality scores lower than rivals in G2 comparisons.
Pricing: From about $39.95 per user per year (third-party reported; business tiers drop with team size) · Free trial
NordPass
Business password manager from Nord Security with low per-user prices on Teams, Business and Enterprise tiers.
NordPass, from Nord Security, offers Teams, Business and Enterprise tiers with low per-user prices. It keeps the vault simple and fits cost-focused teams on Google Workspace, but offers less depth than Keeper or 1Password.
- Best for
- Cost-focused SMBs on Google Workspace.
- Company size
- SMB to enterprise.
Key features
- SSO and directory sync
- Google Workspace SSO on Teams per Cybernews; SCIM not confirmed.
Pros
- Low entry price.
- Simple interface.
Cons
- Pricing numbers differ across sources.
- Feature depth below Keeper or 1Password.
Pricing: $1.79 per user/month (Teams, 2-year plan, Cybernews) · Free trial
Zoho Vault
Low-cost password manager from Zoho with a free tier and Standard, Professional and Enterprise plans.
Small teams already using Zoho, Microsoft or Okta can start free and pay from $0.90 per user monthly on Standard. Shared folders and audit logs begin on Professional, and cloud app SSO on Enterprise. Reviewers call the interface dated, and SCIM is not published.
- Best for
- Teams already on Zoho or Microsoft/Okta wanting very low prices.
- Company size
- SMB.
Key features
- Shared vaults and permissions
- Shared folders and user groups from Professional.
- SSO and directory sync
- SSO for cloud apps on Enterprise; user/group sync from Professional (Azure, Google), Okta on Enterprise; SCIM not named.
- Admin console and reporting
- Audit logs from Professional.
Pros
- Very low price.
- Free plan available.
Cons
- Dated interface.
- Fewer features than top vendors.
Pricing: Free; paid from $0.90 per user/month (Standard, annual) · Free plan, Free trial
Proton Pass
Swiss end-to-end encrypted password manager with business plans from Pass Essentials to the full Proton Workspace bundle.
Privacy-minded European teams that want email aliases and built-in 2FA can buy from Pass Essentials upward, from $1.99 per user monthly with a 3-user minimum. Group sharing and SSO sit on Professional. Newer than rivals, it has a shorter track record and lighter admin tooling.
- Best for
- Privacy-first teams in Europe.
- Company size
- SMB.
Key features
- Shared vaults and permissions
- Group sharing on Professional.
- SSO and directory sync
- SSO listed under Pass Professional; SCIM not stated.
- Admin console and reporting
- Detailed activity logs and enterprise policies on Professional.
- Passkey and MFA support
- Passkey support on Essentials and up.
Pros
- Strong privacy posture.
- Email alias and 2FA built in.
Cons
- Fewer enterprise admin features.
- Newer product with short track record.
Pricing: $1.99 per user/month (Pass Essentials, billed annually) · Free plan, Free trial
What to look for in business password managers
Start with how your team shares logins today, because the right password manager for business follows that habit rather than replacing it. Then check who has to administer it, which identity provider you already run and what proof your auditors or customers expect. The criteria below separate tools that only store passwords from tools that let IT control access across the whole company. Work through them in order and test each one in a trial with real accounts.
Shared vaults and permissions
Sharing is the main reason to buy a business plan over personal ones. Strong tools let you create shared vaults, folders or collections, assign read or edit rights to groups, and see who can open each item. Weak ones share by copying a password, which leaves no control once it is sent. In a demo, share a login with one group and confirm you can remove access without changing the password.
- 1Password: Shared vaults with group permissions (Business)
- Keeper Security: Shared folders and records (vendor product, details not re-verified)
- Uniqkey: Secure password sharing, group management.
- Bitwarden: Collections and unlimited sharing in organization (Teams)
- Passbolt: Per-secret OpenPGP encryption for each authorized user; folder and group sharing.
SSO and directory sync
Single sign-on lets employees open the vault with the company identity provider, and SCIM or directory sync creates and removes accounts automatically. Together they make onboarding and offboarding follow the HR process instead of an admin's memory. Several vendors reserve SSO for upper tiers or cap it, so confirm which plan includes SSO, SCIM and your provider, such as Okta or Entra ID.
- 1Password: Unlock with SSO via Okta, Entra ID, OneLogin, Duo on Business; user and group provisioning listed on Business page.
- Keeper Security: SSO/SAML and SCIM listed on the Enterprise plan.
- Uniqkey: SCIM 2.0 listed; SSO not mentioned.
- Bitwarden: SAML 2.0/OIDC SSO for Enterprise organizations; SCIM listed on Teams page.
- Passbolt: Pro: LDAP (AD/OpenLDAP) provisioning and SSO via Microsoft, Google, OpenID; SCIM and AD FS listed as Pro features but checkmarks not confirmed.
Admin console and reporting
The admin console is where IT sets policy, invites users and proves that rules are followed. Look for activity logs, password health and weak or reused password reports, and an export to your SIEM if you use one. Some vendors sell reporting as an add-on rather than including it. Ask to see a sample report before you commit.
- 1Password: Custom business reports on account activity; Events Reporting streams to SIEM.
- Keeper Security: Advanced Reporting & Alerts and Compliance Reporting sold as add-ons.
- Uniqkey: Audit log, security scores, verified domains.
- Bitwarden: Event logs and API (Teams)
- Passbolt: Pro: activity log of changes; log export to syslog listed (plan not confirmed)
Passkey and MFA support
Passkeys and multi-factor authentication reduce the risk of phishing for both the vault and the accounts inside it. A good tool can store passkeys, enforce MFA for every member and support hardware keys or authenticator apps. Many vendors in this category do not state their passkey support clearly, so test saving and using one in a trial.
- Uniqkey: Passkeys supported.
- Proton Pass: Passkey support on Essentials and up.
Encryption and security record
This criterion covers how the vault is encrypted and what the vendor can prove. Zero-knowledge design means the provider cannot read your data, and third-party audits, SOC 2 or ISO 27001 reports and a clear incident history add evidence. Ask for the latest audit summary and how the vendor handled any past breach. Open-source products let you inspect the code yourself.
- 1Password: SOC 2 Type 2 listed on pricing comparison.
- Keeper Security: Zero-knowledge, end-to-end encryption; FedRAMP High, ISO 27001/27017/27018, SOC 2, FIPS 140-3 listed.
- Uniqkey: ISO 27001 certified, EU-hosted (OMR)
- Bitwarden: Open source, end-to-end encrypted; certifications not confirmed by the vendor.
- Passbolt: OpenPGP, secrets encrypted per user, fully open source; Cure53 audits through 2026; SOC 2 Type II (2021)
Dark web and breach monitoring
Breach and dark web monitoring checks whether employee credentials show up in known leaks and alerts the user or admin. It adds proactive protection on top of the vault but is usually a secondary feature. Check whether it is included in the plan you are quoted, and whether alerts reach admins or only individual users.
- 1Password: Watchtower, reported as Business feature (one review)
- LastPass: Dark web monitoring features in Business Max (AI/Web monitoring)
- Proton Pass: Dark Web Monitoring on Essentials.
Pricing model
Business password managers are almost always priced per user per month, but details vary. Watch for minimum seat counts, flat starter packs for small teams, add-ons for reporting or privileged access, and features such as SSO that only appear in higher tiers. Ask for a written quote for your actual headcount and the features you need, including the renewal terms.
- 1Password: Flat $24.95/mo for 10 members, then $8.99 per user per month.
- Keeper Security: Per user per month billed annually, add-ons extra.
- Uniqkey: One bundled per-user price via quote.
- Bitwarden: $4 Teams / $6 Enterprise per user per month, annual.
- Passbolt: Free Community, per-user Pro with 10 user minimum, custom Enterprise.
Target company size
Some products are built for ten-person teams, while others aim at enterprises with privileged access management and directory-driven rollouts. A tool aimed at the wrong size either lacks admin depth or burdens a small team with complexity. Match the vendor's stated company size to your own and ask for a reference customer of similar size.
- 1Password: Small teams to enterprise.
- Keeper Security: SMB through enterprise and government.
- Uniqkey: SMB to mid-market.
- Bitwarden: SMB to enterprise.
- Passbolt: SMB to enterprise, technical teams.
Buying business password managers: security, admin and vendor checks
Once a tool fits the team, the purchase depends on what the vendor commits to in writing: single sign-on, user provisioning, audit logs, where data lives and the contract. The checks below use each vendor's public pages, so a blank means "ask", not "no".
- Try before you buy
- 11 of 11
- Publish SAML SSO
- 7 of 11
- Publish SCIM provisioning
- 3 of 11
- Publish a DPA
- 0 of 11
6 free trials, 5 free plans
ask the rest in writing
Keeper Security, Bitwarden and RoboForm
request it before signing
Must-haves and what each vendor publishes
A blank is not a no, but it is work for your security review. Bitwarden publishes the most (3 of 5); Dashlane publish none of these controls, so every question goes to their sales team. Tick what your team requires; vendors that drop out show why, and the budget check prices the plan that actually includes single sign-on when you require it.
All 11 vendors shown. Tick a must-have to filter. ● published with the plan, ◐ mentioned without plan or details, ○ not on the vendor's public pages.
| Vendor | SAML SSO | SCIM | Audit logs | Data residency | DPA |
|---|---|---|---|---|---|
| Bitwarden3 of 5 published | ● PublishedEnterprise | ● PublishedTeams | ● PublishedTeams | ○ Not published | ○ Not published |
| 1Password2 of 5 published | ● PublishedBusiness | ○ Not published | ● PublishedBusiness | ○ Not published | ○ Not published |
| Keeper Security2 of 5 published | ● PublishedEnterprise | ● PublishedEnterprise | ○ Not published | ○ Not published | ○ Not published |
| Passbolt1 of 5 published | ◐ MentionedPro (Microsoft, Google, OpenID); AD FS listed as Pro… | ◐ Mentioned | ● PublishedPro | ○ Not published | ○ Not published |
| Proton Pass2 of 5 published | ● PublishedPass Professional | ○ Not published | ● PublishedPass Professional | ○ Not published | ○ Not published |
| RoboForm2 of 5 published | ● PublishedBusiness | ● PublishedBusiness | ○ Not published | ○ Not published | ○ Not published |
| Uniqkey1 of 5 published | ○ Not published | ◐ Mentioned | ◐ Mentioned | ● PublishedEU-only (OMR) | ○ Not published |
| Zoho Vault2 of 5 published | ● PublishedEnterprise | ○ Not published | ● PublishedProfessional | ○ Not published | ○ Not published |
| LastPass1 of 5 published | ● PublishedBusiness | ○ Not published | ○ Not published | ○ Not published | ○ Not published |
| NordPass0 of 5 published | ◐ MentionedGoogle Workspace SSO on Teams (Cybernews); others unconfirmed | ○ Not published | ○ Not published | ○ Not published | ○ Not published |
| Dashlane0 of 5 published | ○ Not published | ○ Not published | ○ Not published | ○ Not published | ○ Not published |
How to evaluate password managers in a trial
A password manager holds the keys to everything else, so evaluation should go deeper than a feature checklist. This section explains how to test each criterion in a trial and what to ask the vendor. Set up a pilot group, connect your identity provider, share a few real folders and review the admin reports. Then compare answers on security design, breach history and exit options, and record anything the vendor will not put in writing.
Shared vaults and permissions
In the trial, create a shared folder for a pilot team and test permission levels: view only, edit and manage. Check whether you can share without revealing a password, revoke access immediately and see who accessed which item. Ask how sharing works when an employee leaves and who owns their shared items.
SSO and directory sync
Connect the trial to your identity provider, such as Okta, Entra ID or Google Workspace, and test login, provisioning and deprovisioning with a real user. Ask which plan includes SSO and SCIM, because vendors differ: Bitwarden lists SSO on Enterprise only, while 1Password lists identity provider integrations on Business. Confirm what happens to the vault when an account is removed.
Admin console and reporting
Open the admin console and look for weak, reused and old password reports, MFA adoption and activity logs. Ask whether logs can be exported to your SIEM and for how long they are kept. If you need compliance evidence, request a sample report rather than relying on the feature name.
Passkey and MFA support
Test saving, filling and sharing a passkey with a pilot user, and check which browsers and devices work. Ask whether administrators can enforce multi-factor authentication and which methods are supported. Confirm how recovery works if an employee loses their device.
Encryption and security record
Ask for the vendor's security whitepaper, independent audit reports and incident history, and read how encryption keys are handled. For LastPass, the 2022 breach and UK ICO fine are listed as disqualifying for some buyers, so ask what changed. If you want to inspect code or self-host, Passbolt and Bitwarden offer those options.
Dark web and breach monitoring
Check whether the tool alerts users and admins when credentials appear in known breaches, and where those alerts show up. Ask how the vendor sources breach data and whether alerts cover shared items. Decide whether you need this in the password manager or already have monitoring elsewhere.
Pricing model
Ask for a quote for your headcount that includes SSO, SCIM, reporting and support. Confirm minimum seats, billing period and renewal terms, since several vendors bill annually and some tiers apply only to small teams. Compare quotes on identical assumptions.
Target company size
Ask the vendor for a reference customer with similar headcount and industry. Check whether the product scales to your size without changing plan structure, and whether support and onboarding are included. Keeper is positioned for regulated buyers who may later add privileged access management, which may be more than a small team needs.
Questions to ask password manager vendors
Because password managers hold your most sensitive data, sales calls should cover security, administration and contract terms in real detail, not only pricing and features. Public pages leave gaps in this category, including unconfirmed SSO plans, undisclosed add-on prices and missing data residency statements. Use the questions below with every shortlisted vendor, write down the answers and ask for key commitments in the contract.
Is the vault zero-knowledge, and has it been audited?
Ask how encryption keys are generated and stored, and whether the vendor can read vault contents. Request recent independent audit reports. This sets the baseline of trust before you compare features.
Which plan includes SSO and SCIM?
Vendors place these on different tiers, and some pages do not confirm the plan. Ask for the exact plan name, the supported identity providers and whether SCIM is included. This decides how onboarding and offboarding will work.
What is your breach and incident history?
Ask whether the vendor has had security incidents, what happened and what changed afterwards. Ask how customers are notified and how fast. A clear and specific answer matters more than a clean record claim.
Where is data stored, and can we choose?
Ask about hosting regions and whether you can pick one. Uniqkey is listed for EU-only hosting, while Passbolt is described as lacking a published data-residency statement for its hosted service, so verify this for each vendor. Ask for the data processing agreement.
How do we export and exit?
Ask for the export formats, whether shared items and attachments are included and whether an administrator can export for the whole organization. A password manager is hard to leave, so test the export in the trial.
What are the minimum seats and renewal terms?
Ask for minimum user counts, notice periods and any cap on renewal increases. Passbolt Pro lists a minimum of 10 users and no custom terms review under EUR 20K per year. Know these limits before negotiating.
How to run the decision
Run the decision as a security review with a pilot. Define requirements for sharing, SSO, SCIM and reporting, shortlist two or three vendors and request audit reports and incident history up front. Pilot with a small group and your identity provider, test export and offboarding, and get plan names, minimum seats and renewal terms in writing. Involve security, IT and one daily user before you choose.
Our recommendation
Pick the tool that fits how your team shares logins, then confirm it supports your identity provider and gives IT the reports it needs. Small teams can start with a simple, well-reviewed product, while regulated or larger buyers should shortlist vendors that publish audits and directory sync. Ask each finalist for a trial, a written quote and its latest security documentation, and decide with IT, security and finance in the same review.
Business Password Managers: frequently asked questions
What is a business password manager?
This is a shared encrypted vault for company logins, managed by IT. Admins can set password rules, decide who opens each shared credential and cut off a departing employee quickly. Browser autofill and reports on weak or reused passwords are typical extras.
What is the best password manager for a small business?
For teams of up to about 20 people, 1Password offers a flat Starter Pack and polished apps, while Bitwarden and Zoho Vault have free tiers and low per-user prices. Choose based on whether you value ease of rollout, open source or the lowest cost, and run a trial with real accounts first.
Is there a free business password manager?
Yes, several vendors offer free plans: Bitwarden has a free organization tier, Zoho Vault and LastPass have free plans, Proton Pass lists a free option and Passbolt has a free Community edition. Free plans usually limit sharing, SSO or admin reporting, so check what you actually need.
What features should a business password manager have?
Start with shared vaults and group permissions, SSO with directory sync, and an admin console showing activity and password health. Add MFA, passkey support and a clear security history. Regulated or larger teams should also weigh breach monitoring and privileged access management.
Do password managers support SSO and SCIM?
Many do, but often only in higher tiers. Keeper lists SSO and SCIM on Enterprise, Bitwarden offers SSO on Enterprise and SCIM on Teams, and 1Password supports SSO unlock on Business. Several vendors do not state SCIM support clearly, so ask for it in writing.
Which business password managers include SSO below the enterprise plan?
1Password (Business (identity provider integrations)); Passbolt (Pro (Microsoft, Google, OpenID); AD FS listed as Pro, unconfirmed); Dashlane (Supported; plan not confirmed); LastPass (Business (3 apps); Business Max (unlimited)); RoboForm (Reported on Business plan (third-party, not confirmed by the vendor)); NordPass (Google Workspace SSO on Teams (Cybernews); others unconfirmed); Proton Pass (Pass Professional). The other tools either reserve SAML SSO for their top tier or do not say on their public pages.