Agencies hold credentials for dozens of client systems simultaneously. SealedKeys gives you isolated client vaults, controlled freelancer access and an audit trail — so you can manage client credentials professionally without credential sprawl.
In short
SealedKeys is a zero-knowledge password manager for agencies, with separate vaults per client, role-based team access and clean offboarding when projects end. All client credentials are encrypted in the browser with AES-256-GCM and tracked in a per-organisation audit log.
Built for the multi-client, multi-team reality of agency work.
Create a separate organisation for each client. Their credentials are completely isolated — no risk of cross-client access.
Add the right team members to each client vault. A developer on one account doesn't automatically get access to another.
Pull an access log for a specific client's vault at any time. Useful for client security reviews and demonstrating due diligence.
Freelancers get read-only access to exactly the client vault they need — nothing else.
Credentials are encrypted in the browser. The server never sees plaintext — even if SealedKeys were breached, client credentials remain encrypted.
When a client relationship ends or a team member leaves, remove their access. The audit log shows what to rotate.
Yes. You create a separate organisation for each client. Members only see the organisations they are added to — there is no cross-org visibility.
The free plan supports one organisation. The Pro plan at £3.49/user/month supports multiple organisations. Contact us if you need custom enterprise arrangements.
Yes. Freelancers have their own SealedKeys accounts and are added to specific client organisations with the appropriate role. They see only what they are explicitly granted access to.
Yes. The audit log records every access event — item views, copies, edits and deletions — with user, timestamp and IP. You can filter by organisation to produce a per-client access history.
SealedKeys is Cyber Essentials certified and uses zero-knowledge AES-256-GCM encryption. It may be suitable depending on your clients' specific requirements. For highly regulated sectors, discuss your requirements with us at hello@sealedkeys.com.
Free to start — no credit card. Isolated client vaults from day one.