Passwords are still the easiest way in
In most growing companies the picture is the same: passwords reused across work and personal accounts, saved in whichever browser someone happened to use, and shared over Slack when a colleague needs into a tool. It only takes one leaked password from an unrelated site for an attacker to try it on your email. A company password manager, set up properly and used by everyone, closes most of that gap.
What we set up
1Password Business for the whole team. It is the password manager we use ourselves and the one we recommend for most Mac-first companies. If you already run another one that works, we will tell you whether moving is worth it.
Vaults that match how you work. Shared vaults by team, client or project, with a private vault for each person. Access follows the role, so someone joining finance gets the finance vault and nothing else.
Sign-in through your identity provider. We connect 1Password to Okta, JumpCloud, Entra ID or Google, so people unlock it with their company login. When someone leaves and their account is switched off, their access to the vaults goes with it.
Admin policies. Rules for password strength, two-factor on the account itself, and who can share what outside the company.
Passkeys where apps support them. 1Password stores passkeys too, which removes the password from sites that offer one. Our passkeys guide covers where that works today.
How it works
Week 1: Plan. We agree the vault structure, who administers it, and which shared logins exist today. The shared ones are usually the riskiest, so they come first.
Week 2: Migrate. We export saved passwords from Chrome, Safari and Firefox, and from LastPass, Dashlane or Bitwarden if you are moving off one of those. Duplicates are merged and weak or reused passwords are flagged for changing.
Week 3: Roll out. Short sessions with each team on the browser extension, the iPhone app, and sharing a login safely. Once everyone is in, we switch off browser password saving through your device management so passwords stop drifting back into Chrome.
Afterwards. We watch the 1Password reports for reused and weak passwords, and leavers are removed as part of offboarding.
Why Stabilise
We run the same set-up for our own company, and we look after the Macs and identity platform it sits on, so the password manager, sign-in and offboarding are handled by one team. If you are weighing it against the built-in Apple Passwords app, we compared the two in Is Apple Passwords enough for your business?
Frequently Asked Questions
Is a password manager safe if it holds everything? For a business, yes. 1Password encrypts the vault on the device with a key only the user holds, so a breach of 1Password's servers would not expose the contents. The bigger risk is the passwords it replaces.
Can we just use Apple Passwords? For a very small team it can work. Most companies outgrow it once they need shared vaults, admin control, Windows or Android users, or reporting on weak passwords.
What happens to passwords saved in browsers? We import them into 1Password, then turn off browser saving on company Macs so new ones go to the right place.
How long does it take? Around three weeks for most teams, most of which is giving people time to move their own logins across.
