Store a shared team password safely with a password manager

TL;DR — Stop sharing passwords in spreadsheets, chat, or email. Put the password in a team password manager, store it in a shared vault, give access only to the people who need it, and turn on two-factor authentication (2FA, a second login check) for every person with access. Reading time: ~5 min

Goal

When you finish, your team password will live in a shared vault inside a password manager instead of a spreadsheet, only approved teammates will be able to open it, and you will be able to confirm access by signing in as a team member and seeing the saved item.

Prerequisites

• A team password manager account with shared vaults or shared collections enabled (in your provider's dashboard)
• Admin access in that password manager so you can invite people and manage sharing
• The username and current password you want to move out of the spreadsheet
• The names and email addresses of the people who should have access
• A phone or authenticator app for 2FA if your password manager supports it
• Access to the spreadsheet so you can delete the password after the move

Steps

Step 1: Pick the password manager your team will use

Open your password manager's admin area in the browser. In most providers, the path is one of these:

• Admin Console → Users
• Admin Console → Vaults or Collections
• Settings → Security

If you do not already have a team password manager, create one first with any provider that supports all three of these features:

What you should see: an admin area where you can add users and create a shared place for passwords.

Step 2: Create a shared vault for the team password

In your provider's dashboard, create one shared vault or collection. Use a literal name so people know what belongs there.

Exact menu path, depending on provider UI:

• Admin Console → Vaults or Collections → New
• Enter name: Client Shared Logins
• Save

If your provider asks for permissions, set these literal values for the group that will use it:

• View items: On
• Edit items: On only for the smallest admin group possible
• Export vault: Off
• Manage sharing: Off for regular users

What you should see: a new shared vault or collection named Client Shared Logins.

Step 3: Add only the people who need access

In the same admin area, invite users by email, then grant them access to the shared vault.

Exact menu path, depending on provider UI:

• Admin Console → Users → Invite User
• Enter each work email address exactly
• Role: User for normal teammates, Admin only for the person managing access
• Save
• Admin Console → Vaults or Collections → Client Shared Logins → Members → Add Members
• Select only the invited users who need this password
• Save

Use this rule when deciding access:

• People who use the password: User
• People who add/remove access: Admin
• Everyone else: do not add them

What you should see: the shared vault shows the correct member list, and nobody extra is listed.

Step 4: Turn on 2FA for every person with access

In the password manager admin area, require 2FA before anyone can open the shared vault.

Exact menu path, depending on provider UI:

• Admin Console → Settings → Security → Two-Factor Authentication
• Set Require 2FA for all users to On
• Save

If your provider requires each user to finish setup themselves, send them this instruction:

• Sign in → Account Settings → Security → Two-Factor Authentication → Enable
• Scan the QR code with an authenticator app
• Enter the 6-digit code
• Save recovery codes in a safe place

What you should see: the security page shows 2FA as required or enabled for all users.

Step 5: Save the password as a shared login item

Now move the password out of the spreadsheet and into the shared vault.

Exact menu path, depending on provider UI:

• Open the shared vault: Client Shared Logins
• Click New Item or Add Item
• Item type: Login
• Name: Client Portal
• Username: enter the real username
• Password: enter the current password
• Website: enter the real login URL, for example https://portal.example.com/login
• Notes: add only helpful context, for example Used by support team for monthly report download
• Vault or Collection: Client Shared Logins
• Save

If the password manager offers a password health check and the password is weak or reused, rotate it now in the target system before saving the final value.

⚠️ If you change the password in the target system, tell the affected team first. Changing it without warning can lock people out of a live service.

What you should see: a saved login item named Client Portal inside Client Shared Logins.

Step 6: Remove the password from the spreadsheet

After the shared login is saved and visible to the right people, delete the password from the spreadsheet.

Exact action:

• Open the spreadsheet
• Replace the password cell with this exact text: Moved to team password manager on 2026-10-30
• Save the spreadsheet
• If the spreadsheet exists only for passwords, delete the file entirely from your document storage and then empty the trash or recycle bin in that storage system

What you should see: the spreadsheet no longer contains the actual password.

Step 7: Share the new access path with the team

Send one short message so people stop using the spreadsheet.

Copy and paste this message into your team chat or email:

The shared login for Client Portal has been moved out of the spreadsheet and into our password manager.
Open the vault/collection named "Client Shared Logins" and use the item named "Client Portal".
If you cannot see it, reply here and include your work email address.

What you should see: teammates confirm they can find the item in the password manager.

Verify it works

Do these checks end to end:

1. Sign in as an approved team member.
2. Open the password manager.
3. Open the shared vault Client Shared Logins.
4. Confirm the item Client Portal is visible.
5. Open the item and use the username/password to sign in to the target site.
6. Sign in as a person who should not have access, or ask them to check.
7. Confirm they cannot see Client Shared Logins or the Client Portal item.

Expected result:

• Approved users can see and use the saved login.
• Unapproved users cannot see the item.
• The spreadsheet no longer contains the password.
• The password manager account shows 2FA enabled or required.

Common pitfalls

The password was saved in a personal vault, not the shared vault

Mistake: You clicked New Item while your personal vault was selected.

Symptom: You can see the login, but your teammates cannot.

Fix: Open the item, move it to Client Shared Logins, or create it again with Vault or Collection: Client Shared Logins.

Too many people were given access

Mistake: You shared the vault with the whole company or a broad default group.

Symptom: People who do not need the password can see it.

Fix: Admin Console → Vaults or Collections → Client Shared Logins → Members, then remove everyone except the named users who need access.

2FA was optional, so some users skipped it

Mistake: You enabled 2FA for yourself but did not require it for the team.

Symptom: The security page shows some users without 2FA, or access is blocked later when you try to enforce it.

Fix: Admin Console → Settings → Security → Two-Factor Authentication → set Require 2FA for all users to On.

The old spreadsheet still has the real password in version history

Mistake: You deleted the visible cell but left old file versions available.

Symptom: Someone can open version history and recover the password.

Fix: Delete the file if it was only used for passwords, then remove old versions in your document storage if that option exists.

The team kept sharing the password in chat after the move

Mistake: The storage changed, but the habit did not.

Symptom: New copies of the password appear in chat, tickets, or email.

Fix: Send the exact message from Step 7 and reply to any pasted password with Please store and share this only through the password manager.

This article was written by an AI system and published pending human review. Verify anything you intend to act on.