In short
Keeper, 1Password, NordPass and LastPass are all zero-knowledge password managers with business plans for small teams up to large organisations. They differ in how the vault is unlocked, how the entry plans are sized and which plans include single sign-on and provisioning: 1Password Business includes Unlock with SSO, while Keeper and NordPass put Entra ID sign-in on Enterprise.
Want an impartial recommendation?
Tell us about your users, systems and priorities and we will tell you which option fits, and why.
The four business password managers at a glance
This comparison covers four password managers: Keeper, 1Password, NordPass and LastPass. Here is what each one publishes about its business offer, in its own terms:
| Keeper | 1Password | NordPass | LastPass | |
|---|---|---|---|---|
| Made by | Keeper Security, Inc., headquartered in Chicago | AgileBits Inc. | Nord Security, the team behind NordVPN | LastPass (marks of LastPass US LP) |
| Vault encryption | AES-256 GCM, encrypted and decrypted on your device (zero knowledge) | AES 256-bit end-to-end encryption, with Secure Remote Password sign-in | xChaCha20-encrypted vault, zero-knowledge architecture | 256-bit AES with zero-knowledge security |
| Business plans | Business Starter (5 to 10 seats), Business (minimum 5 seats), Enterprise; KeeperMSP for IT providers | Teams Starter Pack (10 users minimum, up to 20), 1Password Business (1 user minimum), Enterprise Password Manager (quote only) | Teams (10-user pack), Business (from 5 users), Enterprise (from 5 users) | Teams (up to 50 users), Business and Business Max (no user limit) |
| Family accounts with business plans | Free Family Plan for every user on Business and Enterprise, for up to 5 family members | Free 1Password Families membership for every 1Password Business user | A 'Free Premium plan for all users' row on Business and Enterprise | Free Families account with 5 licences for each Business and Business Max user |
| Business trials | Free trials of Business and Enterprise | 14-day free trial, no credit card | 14-day free business trial, no credit card | 14 days, no credit card and no seat limit; new customers also get a Business Max trial |
The detailed pair comparisons further down this page go row by row through sign-in, provisioning, SIEM, sharing and admin. Every fact comes from the provider's own website: our method page explains the sources.
Still not sure which way to go? Ask us
Tell us what matters most to you and we will recommend one, with the trade-offs explained.
Security models compared
All four encrypt each vault on the user's own device before it is stored, so the provider cannot read your organisation's passwords. Where they differ is in how the encryption key is protected and how staff unlock the vault:
| How the vault is protected | What the provider publishes | |
|---|---|---|
| Keeper | AES-256 GCM on the device; the key is derived from the master password with PBKDF2 on the device, and Enterprise can unlock through SAML 2.0 single sign-on (Keeper security (opens in a new tab)) | ISO 27001, 27017 and 27018; SOC 2 Type 2; FIPS 140-3 validated encryption; quarterly penetration testing |
| 1Password | Two secrets: an account password only the user knows and a Secret Key of "128 bits of entropy" created on the device, which 1Password has no record of (1Password (opens in a new tab)) | SOC 2 Type 2; ISO 27001, 27017, 27018 and 27701 |
| NordPass | An xChaCha20-encrypted vault with zero-knowledge architecture (NordPass (opens in a new tab)) | ISO 27001 and SOC 2 Type 2 |
| LastPass | 256-bit AES and PBKDF2 with SHA-256, with iterations "increased to 600,000" (LastPass (opens in a new tab)) | SOC 2 Type II, ISO 27001, SOC 3, BSI C5 and TRUSTe |
The NCSC's advice applies whichever you choose: "pick a reputable company with a strong security track record. Enable two-step verification (2SV) for your account" (NCSC: Trusting the tech (opens in a new tab)). Our guide are password managers safe for business? explains what zero knowledge protects against.
Plans, sign-in and provisioning
For an organisation, the plan you need usually depends on two things: how many people need it, and whether accounts should be created and signed in from your identity provider.
| Business plans | Directory sign-in and provisioning | Family benefit for staff | |
|---|---|---|---|
| Keeper | Business Starter (5 to 10 seats), Business (minimum 5 seats), Enterprise; KeeperMSP for IT providers | Enterprise: SAML 2.0 SSO, SCIM provisioning, AD and LDAP sync; Entra ID, Okta, Google Workspace and Ping | Free Family Plan for every user on Business and Enterprise, for up to 5 family members |
| 1Password | Teams Starter Pack (10 users minimum, up to 20), 1Password Business (1 user minimum), Enterprise Password Manager (quote only) | 1Password Business: Unlock with SSO over OpenID Connect; SCIM provisioning with Entra ID, Google Workspace, Okta, OneLogin and JumpCloud | Free 1Password Families membership for every 1Password Business user |
| NordPass | Teams (10-user pack), Business (from 5 users), Enterprise (from 5 users) | Google Workspace SSO on every business plan; Entra ID, Microsoft ADFS and Okta SSO, plus provisioning with Entra ID and Okta, on Enterprise | A 'Free Premium plan for all users' row on Business and Enterprise |
| LastPass | Teams (up to 50 users), Business and Business Max (no user limit) | Business and Business Max: directory integrations with Active Directory, Entra ID, Google Workspace, Okta and OneLogin; SSO for 3 apps on Business, unlimited on Business Max | Free Families account with 5 licences for each Business and Business Max user |
Each business line-up in detail: Keeper, 1Password, NordPass and LastPass. Our guide to choosing a business password manager turns these differences into a short checklist, and small business password managers covers teams of under 50.
We can quote Keeper, 1Password, NordPass and LastPass for your business, so we can recommend the one that fits rather than the only one we sell. The plan and terms are confirmed at quote, and licences can be billed monthly. Contact us for free advice or a quote.
Weighing up the options?
We can compare them against your own requirements and recommend what fits.
Reporting, SIEM and breach monitoring
What each vendor publishes about reporting and breach alerts on its business plans:
| SIEM | Breach and password monitoring | |
|---|---|---|
| Keeper | SIEM integration add-on (requires Advanced Reporting & Alerts) | BreachWatch dark web monitoring, an add-on |
| 1Password | Event streaming to SIEM tools including Splunk, Microsoft Sentinel, Elastic and Sumo Logic | Watchtower alerts for breaches and weak, reused or expiring passwords |
| NordPass | Microsoft Sentinel and Splunk integrations on Enterprise | Data Breach Scanner on Business (1 domain) and Enterprise (up to 10 domains) |
| LastPass | Splunk and Microsoft Sentinel on Business and Business Max | Dark web monitoring in every plan |
If your auditors or insurers ask for evidence of who accessed which credentials, check the plan that carries the SIEM feed before you choose. The enterprise password manager guide covers governance and audit in more depth.
Looking for an alternative to 1Password, LastPass or NordPass?
If your organisation already uses one of the four and wants to know what the others do differently, here is one published business fact about each alternative:
Alternatives to 1Password
- Keeper: Enterprise adds SAML 2.0 single sign-on, SCIM and Active Directory or LDAP sync, and Keeper Business includes a free Family Plan for every user
- NordPass: Google Workspace single sign-on on every business plan, Teams included
- LastPass: dark web monitoring in every plan, and LastPass Teams covers up to 50 users
Alternatives to LastPass
- 1Password: every account is protected by a 128-bit Secret Key as well as the account password
- Keeper: Keeper offers a Europe (EU) data region and publishes FIPS 140-3 validated encryption (NIST certificate #4743) (Keeper security (opens in a new tab))
- NordPass: an xChaCha20-encrypted vault, and the Data Breach Scanner on Business for a company domain
Alternatives to NordPass
- 1Password: Unlock with SSO and SCIM provisioning come with 1Password Business, not only an enterprise plan
- Keeper: Business Starter is sized for 5 to 10 seats, and Keeper Enterprise syncs with Active Directory and LDAP
- LastPass: Business includes over 100 security policies and a free Families account for each user
Keeper, 1Password and NordPass can each import straight from a LastPass account, and all four accept a CSV file from another manager. Our switching guide covers each route step by step.
Every comparison on this site
Each pair comparison sets the two providers' published business facts side by side, row by row, with a 'which suits you?' section by use case:
- Keeper vs 1Password: master-password key derivation against the Secret Key, and Keeper Enterprise's directory sync against 1Password Business's Unlock with SSO
- 1Password vs LastPass: the two security models, the LastPass security changes since 2022, and single sign-on to other business apps
- NordPass vs 1Password: xChaCha20 against the Secret Key, and where each puts single sign-on
- NordPass vs LastPass: entry plan sizes, Google Workspace sign-in and moving from LastPass
- NordPass vs Keeper: Data Breach Scanner against BreachWatch, and enterprise provisioning
- LastPass vs Keeper: LastPass Teams against Keeper Business Starter, dark web monitoring and policy controls
Each of the four against Bitwarden
- Keeper vs Bitwarden: where SCIM and directory sync sit in each range, FIPS 140-3, and self-hosting
- 1Password vs Bitwarden: the Secret Key against open source, and OIDC single sign-on on Business against SAML or OIDC on Enterprise
- NordPass vs Bitwarden: Google Workspace sign-in on every NordPass plan, domain breach monitoring and Access Intelligence
- LastPass vs Bitwarden: two PBKDF2 designs at 600,000 iterations, SSO to other apps, and moving from LastPass
Explore Compare password managers
How we help with business password managers
We can quote Keeper, 1Password, NordPass and LastPass for your business, so we can recommend the one that fits rather than the only one we sell.
- Help you choose: we compare the plans against your identity platform (Microsoft Entra ID, Google Workspace or Okta), your team size and how you share credentials
- Set-up: we can help you connect single sign-on and user provisioning, set policies and create shared folders or vaults for each team
- Moving in: we help you import passwords from browsers, spreadsheets or another password manager
- Licensing in one place: licences can be billed monthly, with the plan and terms confirmed at quote
We work with businesses, schools, charities and public sector organisations. Contact us to talk it through.
Frequently asked questions
Which business password manager is best?
There is no single answer, because the right one depends on your identity platform, team size and how your teams share logins. The NCSC puts it this way: "The best password manager to choose is the one that best meets your needs, and which you find easiest to use" (NCSC (opens in a new tab)). The tables above set out what each of the four offers so you can match one to your needs.
Can we trial them before we buy?
Yes. 1Password, NordPass and LastPass each describe a 14-day business trial with no credit card, and LastPass says its trial has no seat limit. Keeper offers free trials of Keeper Business and Enterprise. Our business password manager free trial guide compares the trials.
Which of them work with Microsoft Entra ID?
All four. Keeper connects on Enterprise, NordPass on Enterprise, LastPass on Business and Business Max, and 1Password on 1Password Business, where Unlock with SSO uses OpenID Connect and provisioning creates and suspends users from Entra ID.
Do they store passkeys?
Yes. Each of the four lists passkey storage, and the FIDO Alliance names third-party apps such as 1Password as passkey providers that store and sync passkeys (FIDO Alliance (opens in a new tab)). Our passkeys for business guide covers how to adopt them alongside passwords.
Which ones keep staff's personal logins separate from the work vault?
Keeper Business includes a Family Plan for every user, 1Password Business includes a 1Password Families membership, and LastPass Business and Business Max include a Families account with five licences, so staff keep personal logins in their own account rather than in the work vault. NordPass lists a "Free Premium plan for all users" on Business and Enterprise.
Can you help us choose and set one up?
Yes. We can quote Keeper, 1Password, NordPass and LastPass for your business, with the plan and terms confirmed at quote, help you choose against your identity platform and team size, and set up single sign-on, policies and shared folders. Contact us for free advice.
Still deciding?
Ask us and a member of our team will get back to you.