Business onboarding hub

Set up KeyCare Pass for your organization

A practical path from the first login to the whole company, for the person who looks after it.

The rollout, step by step

Get your organization
Choose Teams or Enterprise on the plan page, or create it on your own server. How to start.
Turn on policies first
Before inviting anyone: require two-step login, set master password requirements, single organization, and account recovery with automatic enrolment. Policies.
Design collections and groups
A collection per system or client, a group per team. Collections.
Import shared credentials
Admin Console > Settings > Import puts existing logins straight into collections. Importing.
Deploy the extension
Use the ExtensionInstallForcelist policy on managed computers. For IT administrators.
Invite team by team
Invite, then confirm promptly after comparing fingerprint phrases. Managing members.

Owners, admins, users and custom roles, and the five collection permissions.

Enrol members so you can help them back in if they forget their master password.

Use centralize organization ownership to keep work items in collections.

Manage members, groups and collections and read event logs from your own tools.

Run KeyCare Pass on your own Docker host with a license from GovPAM.

Review activity and vault health for shared collections every month.

A short checklist for offboarding.

Tell us about your organization.