Zero-knowledge by design
Your master password derives the encryption key on each device. The server holds ciphertext only — there is no admin "view all" mode, even for us. A breach of our infrastructure leaks nothing readable.
Your master password derives the encryption key on each device. The server holds ciphertext only — there is no admin "view all" mode, even for us. A breach of our infrastructure leaks nothing readable.
Admin manages members and account settings. Manager creates and edits vaults. View only reads what they're given. Per-vault user permissions sit on top. No matrix of obscure permissions to learn.
Free for 1 user, $5/mo flat for Family (up to 5), $10/mo flat for Business (up to 12). Not per-user. Hard limits visible in the app — no surprise overage, no per-seat scaling as you grow.
When you remove a member or revoke vault access, affected vault keys rotate. They cannot decrypt anything they previously had access to — even cached copies.
Each user generates a one-time recovery key at master-password setup. They keep it. We have no copy. Lost master password means using the recovery key, not asking us.
New employee signs in, picks a master password, gets their recovery key, joins shared vaults. The whole flow takes under three minutes.
| Capability | Why it matters | LitePassword |
|---|---|---|
| Zero-knowledge architecture | Vendor can't read your secrets, even if breached. | YES |
| Role-based access control | Limits who can edit, share, or delete. | 3 ROLES |
| Per-user vault permissions | Finer-grained than account role. | YES |
| Master-password derived key | You hold the only key that opens your data. | PBKDF2 |
| Key rotation on member removal | Revoked users can't decrypt cached data. | AUTOMATIC |
| Predictable, capped pricing | No surprise overage bills. | PER USER |
| Recovery key issued on setup | Self-recover without phoning the vendor. | ONE-TIME KEY |
| Hard limits visible in app | You always know how close you are to upgrading. | YES |
A small business password manager should be zero-knowledge, role-based, and flat-priced (not per-seat). LitePassword fits the bill for teams of 1 to 12 — encrypted vaults that only your team can open, three clear roles (Admin, Manager, View only), and flat pricing that caps at $10/mo for the entire team. No surprise per-seat scaling, no SSO upsell.
Stop sharing passwords in chat. Move shared credentials into a zero-knowledge vault that gates access by role and per-user permission. Set up a master password that derives the encryption key on each employee's device. Use the built-in generator for new credentials, and revoke access through the Users page when someone leaves — vault keys rotate automatically.
LitePassword Business is $10/mo flat for up to 12 users (about $90/year with annual billing). It includes 150 vaults, 600 secrets, role-based access, and email support. Compare to Free ($0 for 1 user) and Family ($5/mo flat for up to 5 users).
Yes. Startups typically grow from 1 founder to 10–12 people in the first year or two. LitePassword's Family plan covers the first 5 ($5/mo flat); Business covers up to 12 ($10/mo flat). Past 12 users the product isn't for you — look at 1Password Teams or Bitwarden Business.
Because LitePassword is zero-knowledge, a breach of our servers exposes only ciphertext — your master password never leaves your device. We can't decrypt it; an attacker who steals our database can't either. Recovery is gated by a one-time recovery key you generate at setup.
An admin invites them by email through the Users page. The new employee signs up, sets their own master password, and gets a personal recovery key. The admin then grants per-vault access — vault keys are wrapped with a one-time invitation key for the new user and unwrapped client-side on first unlock.
Free for one user, $5/mo flat for 5-user Family, $10/mo flat for Business up to 12. No credit card to start, no per-seat scaling.