SaaS Ranking
Menu

SaaS transparency ranking · Security and compliance

Password management software

30 vendors · updated 2026-10-17 · 8 without enough data for a score

Password managers and secret vaults for teams, ranked by what they publish about how they handle your data.

Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.

=exactly at the median of every category we measure

  • Password management17
  • All categories17
Median transparency score, out of 100. Password management sits at the median across every category we measure.
  1. A0 0%
  2. B0 0%
  3. C1 5%
  4. D0 0%
  5. E5 23%
  6. F16 73%
22 vendors with a score; 8 more without a score because we could measure too little. Bands have fixed thresholds, see how the score works.
All filters
Show only vendors where we found

Transparency band

8 without enough data for a band

30 vendors

Sort by

Before the demo

Business password managers: a trial checklist

Follow a fictional credential from onboarding to offboarding.

Choose the service and its operating boundary

Separate an employee password vault from machine-secret storage, privileged-session access and single sign-on. Those jobs may overlap, but they require different trials. Record the edition, hosting arrangement, supported clients and the features included in the quote. If your team operates the deployment, name who handles updates, monitoring and recovery. If the supplier operates it, obtain the relevant service documents. Test the browsers and devices your staff actually use, including a fresh browser profile. Record any task that depends on an extension, another identity service or a higher subscription tier.

Check sharing with the ordinary user role

Create a private record, a team record and a project-only record. Share each according to the written access plan and attempt the same task from all three accounts. Change group membership and repeat the check in an existing session and a new session. Inspect whether users can copy, reveal or export the sample data, and record the distinction between viewing a credential and using it. Review the audit events that your administrators can actually obtain. Do not treat a marketing claim about encryption as evidence that your chosen sharing configuration has the intended boundary.

Rehearse recovery before relying on it

Use the documented trial process to simulate a lost device or unavailable sign-in method. Ask which recovery paths exist, who approves them and which independent materials are needed. Test one path using only trial material and retain a record of the steps and notifications. Establish who can recover a business vault when the usual administrator is absent. Keep recovery access distinct from everyday administration. NIST discusses password-manager compatibility and authenticator lifecycle requirements; our purchasing exercises apply those topics to a team trial and do not establish a product’s compliance with the publication.

Full trial checklist and CSV worksheet

A trial you can repeat

Create an isolated trial vault with invented credentials for fictional services. Give one person an administrator role, one an ordinary team role and one a temporary project role. Decide which records each person should see before configuring the product. Keep the test separate from your real passwords and recovery material. The useful comparison is whether the same people can complete the same tasks, and what happens when their access changes.

NIST addresses password-manager compatibility and the lifecycle of authentication methods. The team-sharing, purchasing and migration tasks here are editorial trial exercises. Completing them does not certify a product or demonstrate a particular authentication assurance level. NIST SP 800-63B-4: authentication and authenticator management. Source reviewed 2026-10-03. The trial questions are editorial guidance, not additional measured criteria.

Narrow it down

Each of these lists the Password management vendors that meet one condition, with the source for each, and appears only where at least 8 of them meet it.

This category, criterion by criterion

How this market does on each criterion, with its own share and how it compares with the rest.

Every result links its source on the vendor page. A grey segment means we could not measure it, not that it is missing. See how we score.