Teams & Business

Security your whole company
will actually use.

Shared team vaults, role-based access, and admin recovery that stays zero-knowledge — from a 3-person startup to the whole org chart. Looking for personal plans? See consumer features.

Built for how teams work

Team vaults

Shared vaults for engineering, finance, support — each end-to-end encrypted, each with its own members. People see only what their team needs.

Groups, roles & permissions

Owners, admins, and members with role-based access on every vault. Onboard by group, not by spreadsheet.

Zero-knowledge admin recovery

When someone forgets their Master Password, an admin can restore their access — via encrypted key escrow that still never lets us (or the admin's laptop thief) read a vault.

Enforced policies

Require 2FA, set Master Password strength rules, and control sharing behavior across the org — enforced by the clients, not the honor system.

Audit log

Every org event — sign-ins, shares, membership changes, recoveries — recorded and reviewable. Answers "who had access to what, when."

Team security reports

Security health for the whole org: weak, reused, and breached credentials rolled up per team — computed client-side, so reporting never weakens encryption.

Plugs into your identity stack

Single sign-on

SAML SSO with Okta, Microsoft Entra ID, OneLogin, and Duo. One identity for sign-in — the vault stays end-to-end encrypted.

SCIM provisioning

Joiners get seats automatically; leavers lose access the moment your directory says so. No manual seat management.

Hardware security keys

Add a YubiKey or any WebAuthn key as an unlock factor for the vaults that guard your crown jewels.

CLI & service accounts

Zero-knowledge service accounts inject secrets into CI/CD with kp run — no more credentials pasted into pipeline configs.

The credentials teams actually share

SSH keys

A first-class item type for SSH keys — generate, store, and share deploy keys inside a team vault instead of a wiki page.

Files & 2FA, shared

Attach certificates and licence files to items, and share TOTP codes with the team — the on-call engineer always has the code.

Share outside the org

Hand a contractor one credential with an expiring, email-gated link — not a seat, and not a Slack DM they'll screenshot.

Two plans. No surprises.

Teams "Starter"

15 seats included

$15/month

Includes 15 seats · add up to 15 more at $0.50/seat

Get Early Access
  • Shared team vaults & groups
  • Share passwords, files, SSH keys & 2FA
  • Role-based permissions
  • Security alerts & activity log
  • Zero-knowledge admin recovery

Need more than 30 seats or custom terms? Talk to us about Enterprise — SSO, SCIM, and volume pricing.

Bring your team.

Join the waitlist and lock in 25% off for life — or talk to us about Enterprise.

Free during beta. Waitlist members lock in 25% off for life.