Proton Pass

Create separate vaults for teams, projects or types of credentials. Proton says each vault has its own encryption key, and the user guide says sharing permissions are set per vault. Design the vault structure so granting one group access does not expose unrelated accounts.

Store logins, notes and payment-card details; the browser extension can create and autofill passwords, while web and mobile apps provide other access paths. Test one harmless login on each device your staff rely on before importing the real vault.

Items or whole vaults can be shared by invite or link, and the sharer chooses an access level for a vault invite. Check whether the intended plan and admin policy permit outside sharing or individual-item links before sending one to a vendor.

A vault owner can remove a person’s access in Manage access. For offboarding, inventory shared vaults, remove access, and rotate any credential the departing person may have copied or used elsewhere. A harmless sample vault can show what the remaining team retains after removal.

The web app supports importing items from another password manager. Try a small, non-sensitive sample to check field mapping, duplicates and item ownership before moving a team’s working credentials.

Pass Essentials includes sharing and everyday password tools in the captured business pricing table. Pass Professional adds SSO/SCIM, enterprise policies and activity logs. Ask how those features map to administrator seats, end-user access and any Proton Workspace bundle you already have.

With a qualifying Professional or Workspace admin account, team policies can control password generation, external sharing and two-factor authentication. Decide those rules before broad rollout; changing an export or sharing toggle later can affect how staff work.

Qualifying administrators can review usage logs for activity on members’ Pass accounts. Proton lists event time, user, event and originating IP; filters include email or IP, event type and date. Treat logs as an audit aid and test the event types and retention you need before relying on them for an investigation.