MoatKey Get MoatKey
SharingSecurityPlansHelpFor business
MoatKey · Small teams

A password manager for small business teams

A team of five does not need an enterprise suite. It needs one place for the vendor logins, the shared inbox and the domain registrar, and a clean way to take access back when someone leaves.

Shared Castles, one per team or role

MoatKey groups accounts into Castles. With Team you can make as many shared Castles as you like. One Castle per department, client or system keeps access simple: marketing logins in one, bookkeeping in another, the domain and hosting accounts in a third. Each Castle has its own members, and each person also keeps a private vault. See the MoatKey for business page for an overview.

Price

$5 per person a month or $50 per person a year, with a minimum of 3 people. You can add or remove seats any time. Payments are handled by Stripe. Cancel any time; it takes effect at the end of the period you've paid for. More in the plans section and the billing help.

Admins and roles

  • Viewer uses and copies logins but changes nothing.
  • Editor uses, adds and changes logins.
  • Castle Admin also invites and removes people, and can see the activity log.
  • The owner created the Castle. Owners also sign every change of the Castle's key.

The activity log shows who added, changed or removed items and who joined or left. Only owners and Castle Admins can see it. For your most important accounts, such as payroll or the registrar, the Dungeon asks for proof it's you every time an item is opened. See The Dungeon.

Onboarding a new person

  1. The Team owner creates the account and buys seats in the browser extension. Keys are made on the device, so sign-up starts in Chrome or Edge. See how to sign up.
  2. Create a shared Castle and invite each person by email, choosing a role.
  3. They create a MoatKey account with that email, finish setting up their vault and save their Emergency Kit, then choose Accept.
  4. An owner or Castle Admin confirms them on the Members screen after comparing safety numbers.

Invitations stay open for 7 days, and after someone accepts you have 14 more days to add them.

Safety numbers

A safety number is a short fingerprint of a person's sharing key. Comparing it on a call or in person shows you are adding the real person, and not someone who swapped a key in between. MoatKey asks for this comparison before adding people by default. Safety numbers.

Offboarding

When someone leaves, open the Castle's Members, find them and choose Remove. They lose access right away, and MoatKey changes the Castle's key so nothing saved from now on can be read with the old one. If a Castle Admin removes them, the key change happens the next time an owner opens MoatKey. MoatKey shows a checklist of passwords to change at each service.

Be realistic here: someone who was removed may have kept what they already saw, so change the passwords that matter. Roles can't be edited in place yet. To change a role, remove the person and invite them again.

The honest limits

MoatKey is designed so we can't read your vault, and logins are encrypted on each device before they sync. There has been an internal security review and no independent audit yet. A forgotten master password can't be reset by us, so every person on your team needs to keep their Emergency Kit safe.

Questions

How much does MoatKey cost for a small team?

$5 per person a month or $50 per person a year, with a minimum of 3 people. You can add or remove seats any time.

Where do we start the Team sign-up?

In the browser extension for Chrome or Edge, because your keys are made on your computer. Then open Settings, Plan & billing, and choose Team. See the business page.

What happens when an employee leaves?

Remove them from the Castle's Members screen. They lose access right away and MoatKey changes the Castle's key. You should also change the passwords they could see.

Can different people see different logins?

Yes. Use one shared Castle per team or role, and invite each person only to the Castles they need. Roles control what they can change.

Does my team need to keep a master password?

Each person has their own. We can't reset it, so each person should save their Emergency Kit.

Get MoatKey

MoatKey is out now on iPhone, iPad, Android, Chrome and Edge. Your account works on all of them.

DOWNLOAD ON THEApp Store ADD TOChrome ADD TOEdge GET IT ONGoogle Play

Honest status: MoatKey has had an internal security review and no independent audit yet. If you forget your master password and lose your Emergency Kit, we can't get your data back. See the Security page.

Related

Help pages for the details: