Clear Path step · Business · Accounts you know and control
Move the team onto a business password manager
Every work login lives in one manager, so someone who leaves takes no passwords with them.
Why it matters: Shared passwords in spreadsheets and chats are how one compromised laptop becomes a compromised company. A manager also makes offboarding a five-minute job.
Best after: Name an owner and map what you'd lose
Do it
- Choose a business plan with shared vaults and admin recovery.
- Create vaults by role: finance, operations, marketing, admin.
- Move shared logins in, change any password that lived in a spreadsheet, and delete the spreadsheet.
- Require the manager for all work accounts and turn on its breach and reuse reports.
Say this: If someone asks me to send a password in chat or email, I share it through the password manager instead.
Check it worked: Every work login lives in the business password manager, shared logins sit in role-based vaults, and the old spreadsheet is gone.
If an outside IT company handles your IT, send them this:
Hi, we're moving the team onto a business password manager with shared vaults. Could you please help us set up vaults by role (finance, operations, marketing, admin), move our shared logins in and turn on the breach and reuse reports? We'll change any password that lived in our old spreadsheet. Please set admin recovery so [owner] holds it, and confirm when the vaults are ready.
Simply put
A shared password spreadsheet is like an unlocked key cabinet in the middle of the office. A business manager puts each key in a locked drawer by role, and taking a key back takes minutes.
In detail
Where accounts support passkeys, store them in the business manager rather than personal phones so they move with the role, not the person.
If this is new to you: Moving everyone over sounds big? Do it in stages: shared logins first, then each person's own as they go. Change anything that lived in the spreadsheet, then delete it.
Points toward the Long View: passkeys that belong to the role, not the person who set them up.