KeyCare Pass for business

The password manager your whole organization can use

Replace shared spreadsheets and passwords pasted into chats with one encrypted vault. Give each team the logins it needs, set rules for every account, and see who did what.

From R 149 per person per month

Get a quote

Prices and options by email

Start business trial

How to get started today

vault.keycarepass.com

Admin Console

Collections

Members

Groups

Reporting

Billing

Settings

MembersInvite member

Name	Role	Status
AMAlex Morganalex@example.com	Owner	Confirmed
SNSam Naidoosam@example.com	Admin	Confirmed
JKJo Krugerjo@example.com	Custom	Confirmed
LPLee Pillaylee@example.com	User	Needs confirmation
RDRobin Duberobin@example.com	User	Invited

End-to-end encrypted
Open source
Hosted in the EU
Self-hosting available
Monthly billing, per person

Built for the people who look after access

Everything an IT lead or office manager needs to get a team off sticky notes and shared documents.

Share by team, not by message

Collections hold the logins a team needs, and groups decide who sees which collection.

Set the rules once

Enterprise policies require two-step login, set master password rules and more, for every member.

Know who did what

Event logs record views, changes, sharing and sign-ins, with times and IP addresses.

On and off in minutes

Invite people by email, confirm them, and revoke access the day they leave.

Your vault is encrypted on each person's device, the code is open source, the service runs in the EU, and you can move it onto your own servers whenever you want.

Open and inspectable

The apps are GPL-3.0 and the server AGPL-3.0. We publish the source of every release we run.

EU hosting or your own

Our service runs on servers GovPAM operates in the European Union, or run KeyCare Pass yourself with Docker.

Simple, monthly pricing

Pay per person per month in rand through PayFast. R 149 for Teams, no annual lock-in.

Features your team will actually use

Collections and groups

The right logins for the right people

Create a collection for each team, client or system. Give a group or a person one of five permissions, from viewing items to managing the collection.

View items, or view them with hidden passwords
Edit items, or edit them with hidden passwords
Manage the collection and who can use it

Shared collections

CollectionsNew

FinanceFinance group · 4 peopleEdit items

Social accountsMarketing group · 6 peopleView items

ServersIT group · 3 peopleManage collection

Front deskLee PillayView, hidden passwords

Policies (Enterprise)

Security rules that apply to everyone

Turn on the policies you need before you invite anyone. Most apply to every member except owners and admins.

Require two-step login
Master password requirements
Single organization and account recovery

Admin Console and policies

PoliciesSettings

Require two-step login

Master password requirements

Single organization

Account recovery administration

Remove Send

Remove Unlock with PIN

Event logs (Teams and Enterprise)

A record of who did what

Every view of a password, every change, every invitation and every sign-in is logged with its time and IP address. Read it in the Admin Console, or fetch it with the public API.

Event logs

Event logsReporting

09:41Sam Naidoo viewed the password of Payroll portal198.51.100.24

09:38Alex Morgan invited lee@example.com203.0.113.7

09:12Jo Kruger signed in192.0.2.15

08:57Alex Morgan edited the policy Require two-step login203.0.113.7

08:30Sam Naidoo moved Build server to Engineering198.51.100.24

Solutions for your sector

How teams in different fields use KeyCare Pass.

IT teams

Admin accounts, SSH keys and API tokens, shared without sharing too much.

Learn more

Marketing & advertising

Social, ad and client accounts for staff and freelancers.

Learn more

Finance

Banking, payroll and tax logins with an audit trail.

Learn more

Corporate services

Client portals and confidential credentials for firms.

Learn more

Manufacturing

Plant systems, vendor portals and shared shift accounts.

Learn more

Non-profits

Volunteers come and go; your passwords stay put.

Learn more

Government

Open source, auditable and deployable on your own servers.

Learn more

Prefer to keep it in house?

Run KeyCare Pass on your own Docker host, with the database and every encrypted file on your infrastructure. GovPAM issues the license for your server.

Self-hosting Ask for the server package

keycare-host

$ docker compose -p keycare -f deploy/docker/compose.yml \
    --env-file /etc/keycare/keycare.env up -d --build
 ✔ Container keycare_db      Healthy
 ✔ Container keycare_server  Started
$ docker logs -f keycare_server
keycare: ready

Plans and pricing

Every plan gives each member all Premium features. Pay per person, per month.

Recommended

Teams

For teams that share passwords.

R149per person / month

From 1 seat, up to 5 000 per organization

Get started Purchase now

Includes:

Premium for every member
Share by team with groups and collections
Event log of member activity and sign-ins, with IP addresses
Public API for members, groups and collections
10 GB of encrypted file storage for the organization

SCIM provisioning from Microsoft Entra ID and Okta Coming soon
Event streaming to Splunk, Microsoft Sentinel and Datadog Coming soon
Breach monitoring for the organization Coming soon

Business

Coming soon

For growing companies.

Coming soonPrice to be announced

Per person

Ask us about it

Everything in Teams, plus:

The full list comes with the launch.

Enterprise

For organizations that need control over every account.

R229per person / month

From 1 seat, up to 5 000 per organization

Get started Purchase now

Everything in Teams, plus:

Policies: require two-step login, set master password rules and more
Account recovery for members who forget their master password
Custom administrator roles

Single sign-on with OIDC and SAML 2.0 (Google Workspace, Microsoft Entra ID, Okta, AD FS) Coming soon
Vanta integration Coming soon

Compare business plans in detail

Frequently asked questions

How is KeyCare Pass billed for businesses?

Teams costs R 149 and Enterprise R 229 per person per month. PayFast charges the organization's card every month, in rand, until you cancel. You can add seats at any time; they work straight away.

Is there a minimum number of seats?

No. Teams and Enterprise start at one seat, and one organization can have up to 5,000 seats. Contact us if you need more.

Can we try KeyCare Pass before we buy?

Free business trials are on the way. Until then you can start with a few seats on a monthly plan and cancel at any time, or ask us about an evaluation. Ways to get started.

Does KeyCare Pass support single sign-on or SCIM?

Not yet. Single sign-on with OpenID Connect and SAML 2.0 and SCIM provisioning from Microsoft Entra ID and Okta are being built. Today, members sign in with their email address and master password, and you can require two-step login for everyone.

Can we run KeyCare Pass on our own servers?

Yes. KeyCare Pass runs on a Docker host with PostgreSQL, behind your own reverse proxy. Email support@keycarepass.com for the server package and a license. Self-hosting.

What happens when someone leaves?

Revoke or remove them in the Admin Console and they lose access to every shared collection straight away. Their personal vault stays theirs. Change the passwords they used, which the event log helps you find.

Ready to get your team set up?

Tell us about your organization, or start right away.

Get a quote

Prices and options by email

Start business trial

How to get started today