KeyCare Pass Enterprise

Control over every account, without seeing anyone's vault

Enterprise adds policies, account recovery and custom roles to everything in Teams, so you can set the rules and still keep every vault private.

R 229 per person per month

Get a quote

Prices and options by email

Start business trial

How to get started today

PoliciesSettings

Require two-step login

Master password requirements

Single organization

Account recovery administration

Remove Send

Remove Unlock with PIN

What Enterprise includes

Everything in Teams, plus:

Policies: require two-step login, set master password rules and more
Account recovery for members who forget their master password
Custom administrator roles

On the way

Single sign-on with OIDC and SAML 2.0 (Google Workspace, Microsoft Entra ID, Okta, AD FS) Coming soon
Vanta integration Coming soon

Who it is for

Organizations that answer to auditors, run several teams or need to enforce the same rules for every member.

Require two-step login and strong master passwords for everyone
Recover the account of a member who forgets their master password
Give people only the admin rights they need

Account recovery

Help people back in, safely

With the account recovery policy on, owners and admins can set a new master password for an enrolled member who has forgotten theirs. The member changes it the next time they sign in, and their two-step login stays on.

Account recovery in the help center

vault.keycarepass.com

Admin Console

Collections

Members

Groups

Reporting

Billing

Settings

MembersInvite member

Name	Role	Status
AMAlex Morgan[email protected]	Owner	Confirmed
SNSam Naidoo[email protected]	Admin	Confirmed
JKJo Kruger[email protected]	Custom	Confirmed
LPLee Pillay[email protected]	User	Needs confirmation
RDRobin Dube[email protected]	User	Invited

Custom roles

Admin rights, sliced the way you work

Give a person exactly the permissions their job needs, such as managing members or reading the event logs, without making them an admin of everything.

Roles and access control

Event logsReporting

09:41Sam Naidoo viewed the password of Payroll portal198.51.100.24

09:38Alex Morgan invited [email protected]203.0.113.7

09:12Jo Kruger signed in192.0.2.15

08:57Alex Morgan edited the policy Require two-step login203.0.113.7

08:30Sam Naidoo moved Build server to Engineering198.51.100.24

Compare business plans

Recommended

Teams

For teams that share passwords.

R149per person / month

From 1 seat, up to 5 000 per organization

Get started Purchase now

Includes:

Premium for every member
Share by team with groups and collections
Event log of member activity and sign-ins, with IP addresses
Public API for members, groups and collections
10 GB of encrypted file storage for the organization

SCIM provisioning from Microsoft Entra ID and Okta Coming soon
Event streaming to Splunk, Microsoft Sentinel and Datadog Coming soon
Breach monitoring for the organization Coming soon

Business

Coming soon

For growing companies.

Coming soonPrice to be announced

Per person

Ask us about it

Everything in Teams, plus:

The full list comes with the launch.

Enterprise

For organizations that need control over every account.

R229per person / month

From 1 seat, up to 5 000 per organization

Get started Purchase now

Everything in Teams, plus:

Policies: require two-step login, set master password rules and more
Account recovery for members who forget their master password
Custom administrator roles

Single sign-on with OIDC and SAML 2.0 (Google Workspace, Microsoft Entra ID, Okta, AD FS) Coming soon
Vanta integration Coming soon

See the full comparison

Frequently asked questions

Which policies are available?

Require two-step login, master password requirements, password generator rules, single organization, account recovery administration, centralize organization ownership, remove Send or limit its options, remove the card item type, remove Unlock with PIN, and the default URI match detection.

Can admins read members' personal vaults?

No. Policies and account recovery never give anyone access to a member's personal vault contents. Account recovery lets an admin set a new master password for an enrolled member, which the member is then asked to change.

Is single sign-on included?

Single sign-on with OpenID Connect and SAML 2.0 is being built for Enterprise. It is not available yet.

Get started with Enterprise

Tell us what you need, or set up your organization today.

Get a quote

Prices and options by email

Start business trial

How to get started today