UK BUYER’S GUIDE · 3 PRODUCTS
Business password management
Can we give each person or agent the access needed, then remove it without losing control of business credentials?
Compare shared credential controls and the administration needed when staff or automated agents change.
YOUR SHORTLIST STARTS HERE
Compare the options.
Highest documented score first. Fit adds up the 20 feature checks below, including AI, across documented plans. Entry prices may exclude scored capabilities. The upper end of a range represents unverified points.
3 of 3 products · Highest documented score first
| Product / good fit for | Pricing context | Documented fit | Next step |
|---|---|---|---|
Keeper Business and Enterprise Keeper Business and Enterprise Organisations needing structured sharing and a route to privileged-access governance. | Request pricingConfigured subscription VAT basis not stated quote | 100/100 documented fit100% evidence coverage | Details ↗ |
1Password Business 1Password Business Teams combining employee password management with controlled developer credentials. | US$8.99user/month, paid yearly VAT basis not stated annual | 90–100/100 documented fit90% evidence coverage | Details ↗ |
Bitwarden Business Bitwarden Business Teams seeking published per-user pricing and configurable deployment options. | US$4.00user/month, paid yearly excl. VAT annual | 90–100/100 documented fit90% evidence coverage | Details ↗ |
Prices retain their original currency, billing basis and VAT status. Check the evidence and plan requirements before buying.
| Capability & demo question | Keeper Business and Enterprise100/100 documented fit | 1Password Business90–100/100 documented fit | Bitwarden Business90–100/100 documented fit |
|---|---|---|---|
Core workflowEncrypted business vault5.0 points availableAsk in the demoStore and retrieve a demonstration credential. | ✓ Supported Encrypted credential vault. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported End-to-end encrypted vaults. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Encrypted business credential storage. 5.0 / 5.0 pointsEvidence ↗ |
Core workflowBrowser and app autofill5.0 points availableAsk in the demoFill a test sign-in without copying the password. | ✓ Supported Passwords, passkeys and codes autofill. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Autofill for login records. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Credential autofill is documented. 5.0 / 5.0 pointsEvidence ↗ |
Core workflowPassword and passphrase generation5.0 points availableAsk in the demoCreate a unique password under a chosen policy. | ✓ Supported Password and passphrase generator. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Configurable password generator. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Secure password generator. 5.0 / 5.0 pointsEvidence ↗ |
Core workflowShared team credentials5.0 points availableAsk in the demoShare a record with a named team. | ✓ Supported Shared records and team folders. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Role-based shared vaults. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Shared organisation collections. 5.0 / 5.0 pointsEvidence ↗ |
Core workflowPasskey storage5.0 points availableAsk in the demoSave and use a supported passkey. | ✓ Supported Passkeys stored and shared. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Save and use browser passkeys. 5.0 / 5.0 pointsEvidence ↗ | ? Not verified Not established by the reviewed official evidence; request a demonstration. 0.0–5.0 / 5.0 points |
Core workflowAuthenticator-code storage5.0 points availableAsk in the demoGenerate a test one-time code from a saved record. | ✓ Supported Stored two-factor codes autofill. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Integrated one-time authentication codes. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Paid organisations include integrated TOTP. 5.0 / 5.0 pointsEvidence ↗ |
Core workflowMobile vault access5.0 points availableAsk in the demoUse a record on a supported mobile device. | ✓ Supported iOS and Android applications. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported iOS and Android access. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Cross-device password access. 5.0 / 5.0 pointsEvidence ↗ |
Core workflowDesktop vault access5.0 points availableAsk in the demoOpen the vault in the supported desktop application. | ✓ Supported Mac, Windows and Linux applications. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Windows, Mac and Linux access. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Cross-device password access. 5.0 / 5.0 pointsEvidence ↗ |
Core workflowWeak or exposed credential checks5.0 points availableAsk in the demoIdentify a deliberately weak test credential. | ✓ Supported Strength and reuse audit. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Watchtower flags credential risks. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Vault health reports. 5.0 / 5.0 pointsEvidence ↗ |
Workflow depthGranular vault permissions5.0 points availableAsk in the demoRestrict a team to a defined shared vault. | ✓ Supported Team and record permissions. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Vault permissions and custom groups. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Collection permissions and user groups. 5.0 / 5.0 pointsEvidence ↗ |
Workflow depthDirectory provisioning5.0 points availableAsk in the demoAdd and remove a demonstration user through the identity provider. | ✓ Supported Enterprise SCIM and directory provisioning. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Identity-provider user/group provisioning. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported SCIM and Directory Connector. 5.0 / 5.0 pointsEvidence ↗ |
Workflow depthBusiness single sign-on5.0 points availableAsk in the demoShow the supported SSO sign-in and recovery route. | ✓ Supported Enterprise SAML sign-on. 5.0 / 5.0 pointsEvidence ↗ | ? Not verified Not established by the reviewed official evidence; request a demonstration. 0.0–5.0 / 5.0 points | ✓ Supported Enterprise SSO. 5.0 / 5.0 pointsEvidence ↗ |
Workflow depthAdministrative event history5.0 points availableAsk in the demoLocate a membership or access change. | ✓ Supported ARAM adds detailed event trails. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Account activity reporting. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Teams and Enterprise event logs. 5.0 / 5.0 pointsEvidence ↗ |
Workflow depthEnforced security policies5.0 points availableAsk in the demoApply an organisation-wide sharing or login rule. | ✓ Supported User, role and team policies. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Business security policies. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Enterprise policy controls. 5.0 / 5.0 pointsEvidence ↗ |
Workflow depthLeaver vault recovery or transfer5.0 points availableAsk in the demoRecover or transfer company records from a departing user. | ✓ Supported Departing employee vault transfer. 5.0 / 5.0 pointsEvidence ↗ | ? Not verified Not established by the reviewed official evidence; request a demonstration. 0.0–5.0 / 5.0 points | ? Not verified Account recovery is documented, but a complete departing-user vault transfer was not established. 0.0–5.0 / 5.0 pointsEvidence ↗ |
Workflow depthExportable security events5.0 points availableAsk in the demoSend or export an event for independent review. | ✓ Supported SIEM event feed requires ARAM. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Events stream to supported SIEMs. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported CSV export and documented events API. 5.0 / 5.0 pointsEvidence ↗ |
Workflow depthDeveloper secret tooling5.0 points availableAsk in the demoRetrieve a demonstration secret using supported developer tools. | ✓ Supported CLI and developer SDKs. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported CLI, SDK and developer integrations. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Secrets Manager developer tooling; separate entitlement. 5.0 / 5.0 pointsEvidence ↗ |
AIRuntime secrets for AI agents5.0 points availableAsk in the demoRetrieve a task credential without hardcoding it in the agent. | ✓ Supported Secrets Manager supplies runtime credentials. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported SDK retrieves secrets at runtime. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Runtime encrypted secret injection. 5.0 / 5.0 pointsEvidence ↗ |
AIRestricted AI-agent credential scope5.0 points availableAsk in the demoDemonstrate an agent denied a secret outside its allowed scope. | ✓ Supported Agent roles, scopes and time limits. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Service accounts restricted by vault. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Approved-agent access is scoped. 5.0 / 5.0 pointsEvidence ↗ |
AIAttributable AI-agent access history5.0 points availableAsk in the demoFind a credential access event linked to a specific agent identity. | ✓ Supported Actions linked to AI identities. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Activity Log attributes service-account access. 5.0 / 5.0 pointsEvidence ↗ | ✓ Supported Timestamped AI and machine-access logs. 5.0 / 5.0 pointsEvidence ↗ |
“Not verified” means the recorded evidence does not settle this specific check. It does not mean the feature is absent. Read the scoring method.
Focus on up to three products →ASK BETTER QUESTIONS
Before you buy business password management software.
What to look for
- Pilot everyday autofill and sharing with non-technical staff.
- Run a leaver exercise before importing production credentials.
- Keep AI agents on separate identities with limited secret access.
What changes the cost
- Per-user subscriptions and minimum team sizes.
- Secrets management, privileged access and reporting add-ons.
- Directory integration and recovery administration.
What to watch out for
- Sharing a single administrator login between staff.
- Assuming personal vaults become company-owned automatically.
- Calling ordinary password generation an AI capability.
Common questions
Why include AI in a password comparison?
Agents may need credentials. We score runtime delivery, restricted access and an attributable record of use; these are governance controls.
Does paying for an enterprise tier reduce the feature score?
No. Supported features receive credit, with the required tier or add-on identified separately.
Is a UK office the same as UK storage?
No. Confirm the selected service region, subprocessors, support access and contract terms.