Most small businesses already have a password manager. It is a spreadsheet called “logins,” a sticky note under the receptionist’s keyboard, and whatever Chrome saved on the office manager’s laptop. The question is not whether you have one. It is whether the company owns it, and whether you can take access away from someone on their last day.

This is our take on the best password manager for small business in 2026, written from the side that deploys and supports them. We compare 1Password, Bitwarden, Keeper, Dashlane and NordPass, plus the free option built into your browser, against the things that actually matter once you have 10 or 40 people in it. Prices are as of October 2026, pulled from vendor pages except where we say otherwise, and we say which billing term each one is.

The short answer

For most 10 to 75 person offices, Bitwarden is the value pick and 1Password is the polish pick. Keeper is a solid third and often the cheapest on paper. Dashlane is fine but priced like 1Password without the same ecosystem. NordPass is cheap for the first term and quiet about what renewal costs, which tells you something about how the price will move.

If you are a five-person shop with no compliance pressure, you may not need to pay anyone. More on that below, because recommending a free option when it fits is part of how we work.

What actually matters in a business password manager

Feature grids run 40 rows deep. A handful decide whether the tool works for a business:

SSO, so people unlock the vault with their Microsoft 365 or Google login instead of one more master password.
SCIM or directory sync, so disabling someone in Entra ID or Google suspends them in the vault. This is the offboarding feature.
Shared vaults, so “Finance” and “Vendor portals” are shared by group, not by forwarding logins.
Admin account recovery, because someone will forget their master password the week the quarterly filing is due.
Audit logs, so you can see who opened the bank login and when. Your cyber insurer may ask.

Plus price and passkeys, covered in the table.

1Password vs Bitwarden vs Keeper vs the rest

All prices below are per user per month, billed annually, as listed in October 2026.

Option	Price (annual billing)	SSO	SCIM / directory sync	Admin recovery	Audit logs	Best for
Bitwarden Teams	$4	No	Yes	No	Yes (event logs)	Budget-conscious teams that still want automated offboarding
Bitwarden Enterprise	$6	Yes	Yes	Yes	Yes	The best value with everything a 40-person firm needs; self-host option
1Password Teams Starter Pack	$2.49 (10 to 20 users)	No	No	Yes (recovery group)	Basic	Small teams that want 1Password’s apps and nothing else
1Password Business	$8.99	Yes	Yes	Yes	Yes (activity reports)	Mixed Mac/PC offices that value ease of use over price
Keeper Business Starter	$2 (5 to 10 seats)	No	No	Account transfer	Basic	Very small teams on the tightest budget
Keeper Business	$3.75 (5 seat min)	No	No	Account transfer	Advanced reporting is a paid add-on	Cheap per seat if you can live without SSO
Keeper Enterprise	From $5, quoted	Yes	Yes	Yes	Add-on	Firms that want Keeper with SSO; get a real quote
Dashlane Password Management	$8	Yes	Yes	Admin-assisted	Yes	Teams already on Dashlane; little reason to switch in
NordPass Teams / Business / Enterprise	$1.99 / $3.99 / $5.99, 1-year first-term price; renews higher	Google only below Enterprise	Enterprise only	Yes	Business and up	Only if you get a written quote you are happy with at renewal
Chrome / Edge built-in	$0	n/a	n/a	No	No	Sole proprietors and very small offices, with caveats

Every paid option above stores passkeys. That used to be a differentiator. It no longer is.

Sources: 1Password business pricing, Bitwarden business pricing and plan comparison, Keeper’s own January 2026 plan comparison (its pricing page renders numbers in the browser, so confirm at checkout), and Dashlane’s August 2026 pricing explainer. NordPass’s plans page loads prices in the browser alongside rotating discount codes, so its numbers come from Cybernews’ September 2026 NordPass pricing breakdown, which matches Security.org’s April 2026 review.

The honest verdict on each

Bitwarden

Bitwarden Teams at $4 includes SCIM and directory sync, which is the feature most cheap plans leave out. What it does not include is SSO or admin account recovery. For a 10-person office that is a fair trade. For a 40-person office, Enterprise at $6 is the right tier: you get login with SSO, the account recovery workflow, enterprise policies, and a free Families plan for every user, which helps people stop mixing personal and work logins.

Bitwarden is open source, and Enterprise can be self-hosted. Do that only if a contract or regulator requires it and someone will patch the server every month. An unpatched self-hosted vault is worse than the cloud one.

There is also a free organization tier, limited to two users and two collections. That is enough for two partners sharing the firm’s bank and domain registrar logins, and not much else.

1Password

1Password Business at $8.99 is about 50% more than Bitwarden Enterprise. For it you get the smoothest apps on Mac, iPhone and Windows, Watchtower alerts for weak and breached passwords, SSO with Entra ID, Okta and others, and SCIM provisioning. Adoption is the hardest part of any rollout, and 1Password is the one staff complain about least.

The Teams Starter Pack at $2.49 per user (10-user minimum, 20-user cap) is a good deal for a small office that does not need SSO. Once you pass 20 people you are on Business whether you like it or not, so budget for the jump.

Keeper

Keeper’s list prices are the lowest for a full business tier: $3.75 for Business. The catch is that SSO and SCIM live in Enterprise, and the detailed audit and reporting module (ARAM) is a paid add-on on every plan. By the time a 40-person firm has SSO and reporting, the price gap with Bitwarden Enterprise is small or gone. Keeper’s own January 2026 comparison lists Enterprise at $5 billed annually, but Vendr’s Keeper buyer data puts Enterprise list pricing at $6.00 to $7.50 per user, so expect the quote to come in above $5. Keeper is a fine product. Get a written Enterprise quote with the add-ons you need before you compare it.

Dashlane

Dashlane now sells a Password Management tier at $8 billed annually, SSO and SCIM included. It works. At nearly 1Password’s price, we see no reason to pick it for a new deployment, and no reason to rip it out if staff already use it.

NordPass

NordPass covers the basics, and Enterprise adds Entra ID and Okta provisioning. Below Enterprise, SSO is Google Workspace only, which rules it out for most Microsoft 365 offices. The first-term prices are low: Teams at $1.99 per user per month on a 1-year plan (sold as a 10-user pack), Business at $3.99, and Enterprise at $5.99, with 2-year plans a little cheaper and month-to-month a lot dearer ($7.99 for Enterprise), per Cybernews. Cybernews also notes that renewal prices tend to run higher than what you first paid. Get the renewal price in writing before signing.

What about LastPass?

People still ask, usually because they are trying to leave it. In late 2022 LastPass disclosed that an attacker had copied backups of customer vault data. The usernames and passwords inside were encrypted, but some fields, including website URLs, were not, and customer names, emails and billing addresses were taken too (LastPass’s own incident notice). Those vaults can be attacked offline indefinitely, and the strength of each user’s master password is the only thing standing in the way. If your company used LastPass before 2023, moving is not enough. Rotate the passwords that matter: banking, payroll, domain registrar, email admin.

Is the browser’s built-in password manager enough?

For a sole proprietor, honestly, yes. Chrome’s Google Password Manager and Microsoft Edge’s built-in manager both generate strong passwords, sync across devices, warn about breached passwords and handle passkeys. That beats a spreadsheet by a mile.

It stops being enough the moment you have employees, for three reasons:

The passwords belong to the person, not the company. They live in the employee’s Google or Microsoft account. When that person leaves, the logins leave with them, and you cannot revoke a copy.
Sharing is built for families. Google Password Manager only lets you share a password with members of your Google family group. There are no team vaults, no groups, no “Accounting can see the bank login and nobody else can.”
No audit trail. You cannot see who used the payroll login last Tuesday.

Microsoft also pulled password autofill out of the Authenticator app and into Edge in 2025 (Microsoft’s notice). Free features move when the vendor decides. If even three employees share logins, pay for a business tool. The cheapest options above cost about $24 to $30 per person per year.

Business password manager cost: two worked examples

All figures are list price, billed annually, shown as the monthly equivalent, as of October 2026. Taxes and add-ons are excluded.

Example 1: a 10-person office. Everyone on Microsoft 365, one shared vault for vendor portals, no compliance requirement for SSO.

Plan	Monthly cost (10 users)
NordPass Teams ($1.99, first term)	$19.90, renews higher
Keeper Business Starter ($2)	$20.00
1Password Teams Starter Pack ($2.49)	$24.90
Keeper Business ($3.75)	$37.50
Bitwarden Teams ($4)	$40.00
Bitwarden Enterprise ($6)	$60.00
Dashlane Password Management ($8)	$80.00
1Password Business ($8.99)	$89.90

At this size we would pick 1Password Teams Starter Pack or Bitwarden Teams. The 1Password pack is cheaper and has a recovery process. Bitwarden Teams costs $15 more per month and gives you SCIM, which pays off the first time someone leaves on bad terms.

Example 2: a 40-person firm. Microsoft 365 with Entra ID, a cyber insurance application asking about access controls, five departments, staff turnover of a few people a year. At 40 users, SSO, SCIM and admin recovery are not optional.

Plan (with SSO and SCIM)	Monthly cost (40 users)
Bitwarden Enterprise ($6)	$240.00
Keeper Enterprise (from $5, before add-ons)	from $200.00, quoted
NordPass Enterprise ($5.99, first term)	$239.60, renews higher
Dashlane Password Management ($8)	$320.00
1Password Business ($8.99)	$359.60

Bitwarden Enterprise is about $1,435 a year cheaper than 1Password Business at this size. NordPass Enterprise matches Bitwarden in year one and then renews higher, so compare the year-two price, not the first invoice. Real money, but less than one bad offboarding costs you. Pick on fit, then let price break the tie. For how this line sits next to everything else in an IT budget, our small business IT budget breakdown has the full stack.

Pick X if

Pick Bitwarden Enterprise if you have 20 or more people, run Microsoft 365 or Google Workspace, and want SSO, SCIM and recovery at the lowest price.
Pick Bitwarden Teams if you are under 20 people, can live without SSO, and want automated deprovisioning.
Pick 1Password Business if your office is Mac-heavy, your staff are not technical, and adoption matters more to you than about $3 per user.
Pick 1Password Teams Starter Pack if you have 10 to 20 people and want the best apps at a starter price.
Pick Keeper if a written Enterprise quote with the reporting add-on comes in under Bitwarden Enterprise.
Stay on the browser’s manager if you are a one-person business with no shared logins.

Password manager rollout for a small business: a 40-person plan

The software is the easy part. Most failed rollouts we see were bought, emailed out with a link, and abandoned by week three. Here is the sequence we use for a firm around 40 people.

Week 1: set up the admin side before anyone else logs in. Connect SSO to Entra ID or Google. Turn on SCIM so the vault follows your directory. Set the policies: required MFA on the vault, minimum master password length if SSO is not in use, and the recovery method. Name at least two admins. One admin is a single point of failure.

Week 1: build the shared vault structure. Keep it boring and tied to your departments, not to people:

Company: All Staff (Wi-Fi guest password, building portal, shared printers)
Finance (bank, payroll, tax portals)
Operations (vendor and supplier portals)
Marketing (social accounts, website CMS, ad accounts)
IT Admin (domain registrar, DNS, Microsoft 365 or Google admin, firewall), restricted to two or three people

Map each vault to a directory group, so access follows group membership instead of manual sharing.

Weeks 2 to 3: pilot with five to eight people. One person from each department, plus whoever will complain loudest. They install the extension and phone app, import saved browser passwords, and move shared logins into the right vault. Fix what confuses them, then write a one-page internal guide.

Week 4: everyone else, in two waves. Short live session, 30 minutes, cameras on. Install, import, delete the browser’s saved passwords, turn off the browser’s offer to save new ones (both Chrome and Edge can enforce that by policy). Then retire the spreadsheet. Actually delete it. A rollout that leaves the old spreadsheet in SharePoint has created a second copy, not a password manager.

Ongoing: the offboarding step. This is why you bought it. When someone leaves:

Disable them in Entra ID or Google. SCIM suspends their vault access automatically.
Confirm in the password manager’s admin console that the account shows as suspended.
Pull the audit log for the shared vaults they could see.
Rotate the high-value shared logins they had access to: bank, payroll, social accounts, anything with money or reputation behind it.
If they kept work logins in a personal vault, recover or transfer that vault before you delete the account.

Step 4 is the one people skip. Removing access to the vault does not change the password they already saw.

A password manager will not save someone who types their credentials into a fake Microsoft login page. It does help, because autofill refuses to fill on a lookalike domain, which is a useful warning sign. Pair the rollout with the checks in our guide on how to spot a phishing email. Both belong inside a broader cybersecurity program with MFA, email filtering and backups.

Need a hand?

We roll out and administer business password managers as part of our managed IT services, including SSO and SCIM setup, vault structure, migrations off LastPass and spreadsheets, and the offboarding checklist that keeps it working. If you want a straight recommendation for your headcount, get in touch and we will tell you which one fits, even if the answer is the free one.

Best Password Manager for Small Business: 1Password vs Bitwarden vs Keeper (2026)