The Passbolt Alternative, Run For You

One reason is that we run the vault without locking your own people out. We train your staff on the extension, the mobile app, and safe sharing, train your admins on the settings they own, and leave written notes behind for the next hire. You handle the daily work and send us the structural changes.

Zoho Vault is a password manager built for teams. It stores passwords, API keys, licenses, certificates, and secure notes in an encrypted vault, then controls who can see and use each one through chambers, folders, and privilege levels. Staff log in through a browser extension or mobile app rather than remembering credentials, and administrators get audit trails showing who accessed what and when.

Yes. Your Zoho license is billed by Zoho directly and we do not mark it up. Our fee covers the management work only. If Zoho Vault is already included in a Zoho One subscription you hold, there is nothing extra to buy for the software and you are only paying us to run it properly.

Yes, and that is usually the first piece of work. We export from your current tool, whether that is LastPass, 1Password, Bitwarden, Keeper, Dashlane, a browser password store, or a spreadsheet, then clean the data before it goes anywhere near Vault. Duplicates, dead entries, and credentials for systems you retired years ago get removed rather than carried across.

Most organizations are live within two to three weeks. The first week covers the vault structure, policies, and the migration itself. The second covers directory sync, single sign on, extension and mobile rollout, and training. Larger teams with more systems to import or a stricter compliance requirement can take four to six weeks, and we will tell you which one you are before we start.

Vault encrypts your data before it leaves your device using a master password that Zoho never stores, so nobody at Zoho or at Cascadia can read your secrets. Security in practice depends just as much on configuration, which is the part we own: enforced two factor, sensible sharing, IP and session controls, prompt offboarding, and an audit trail somebody actually reads each month.

Vault has account recovery through a designated super administrator and through emergency contacts, but only if those are configured before you need them. We set both up during onboarding, document the procedure, and test it. If nothing is configured and the master password is lost, the encrypted data cannot be recovered, which is exactly why we do this in week one.

Yes. Vault supports Zoho OneAuth, TOTP apps such as Google Authenticator, hardware keys including YubiKey, and passkeys on supported devices. We turn on enforcement at the organization level, roll it out with a grace period and written instructions, and help your staff through the first few days so it lands as a policy rather than a wave of support tickets.

Removing someone from Vault is straightforward. Doing it correctly is not, because shared secrets need new owners and anything that person could see should be rotated. We write the offboarding runbook, transfer ownership of the chambers they held, rotate the credentials that matter, and remove the account, so access ends on the day the person does.

Yes. Vault syncs with Zoho Directory, Active Directory, Microsoft Entra ID, Okta, and Google Workspace, so accounts are created and disabled from one place. We configure the sync, map your groups to Vault roles, and set up single sign on, which means your team gets in with the same credentials they already use everywhere else.