Per-client vaults · Audit trail · Cyber Essentials certified

Password Manager
for Agencies

Agencies hold credentials for dozens of client systems simultaneously. SealedKeys gives you isolated client vaults, controlled freelancer access and an audit trail — so you can manage client credentials professionally without credential sprawl.

The agency credential problem

Client credentials mixed together in one shared vault
One breach or wrong access exposes all clients
Freelancers and contractors given access to more than they need
Overprivileged access you can't easily revoke
No process when a client relationship ends
Former clients' credentials stay accessible longer than they should
No audit trail for client security reviews
Can't demonstrate who accessed client credentials and when

How SealedKeys solves it

Built for the multi-client, multi-team reality of agency work.

Isolated client vaults

Create a separate organisation for each client. Their credentials are completely isolated — no risk of cross-client access.

Per-client team access

Add the right team members to each client vault. A developer on one account doesn't automatically get access to another.

Audit trail per client

Pull an access log for a specific client's vault at any time. Useful for client security reviews and demonstrating due diligence.

Contractor scoping

Freelancers get read-only access to exactly the client vault they need — nothing else.

Zero-knowledge encryption

Credentials are encrypted in the browser. The server never sees plaintext — even if SealedKeys were breached, client credentials remain encrypted.

Offboarding built in

When a client relationship ends or a team member leaves, remove their access. The audit log shows what to rotate.

Frequently asked questions

Can I keep each client's credentials completely separate?+

Yes. You create a separate organisation for each client. Members only see the organisations they are added to — there is no cross-org visibility.

How many organisations can I create?+

The free plan supports one organisation. The Pro plan at £3.49/user/month supports multiple organisations. Contact us if you need custom enterprise arrangements.

Can a freelancer access one client's vault without seeing others?+

Yes. Freelancers have their own SealedKeys accounts and are added to specific client organisations with the appropriate role. They see only what they are explicitly granted access to.

Can I produce an access report for a client?+

Yes. The audit log records every access event — item views, copies, edits and deletions — with user, timestamp and IP. You can filter by organisation to produce a per-client access history.

Is SealedKeys suitable for agencies handling credentials for regulated clients?+

SealedKeys is Cyber Essentials certified and uses zero-knowledge AES-256-GCM encryption. It may be suitable depending on your clients' specific requirements. For highly regulated sectors, discuss your requirements with us at hello@sealedkeys.com.

Related

Manage client credentials properly

25 items free. No credit card. Isolated client vaults from day one.