Skip to content
ClientKeeps
The password manager built for web agencies

Every client login, in one locked place.

Hosting, WordPress, domains, FTP and email logins for every client, encrypted in your browser and shared safely with your team and your clients. No more spreadsheets, no more passwords in chat.

  • Zero-knowledge encryption
  • Two-factor sign-in
  • Tamper-evident audit log

Every login your clients have, in one place

  • WordPress
  • Hosting & cPanel
  • Domains & DNS
  • Cloudflare
  • FTP & SFTP
  • Email & newsletters
  • SSL certificates
  • Anything else
Why agencies switch

From scattered to sorted

Client passwords tend to end up everywhere. ClientKeeps gives every one of them a single, safe home.

Without it
  • A spreadsheet nobody trustsOut of date, shared by link, and copied into a dozen inboxes.
  • Passwords in chat and emailSearchable forever by anyone who ever had access.
  • Ex-staff who still know themNo list of what someone could see when they leave.
  • Clients emailing loginsIn plain text, often to the wrong person.
With ClientKeeps
  • One home for every loginOrganised by client and website, found in a second with search.
  • Encrypted before it leaves your browserNot even we can read it.
  • Access you can see and take backPer client, per person, for a set time. Offboarding is one queue.
  • Clients share through a secure linkEncrypted in their browser, for your team only.
Features

Built for the way agencies work

Not a personal password manager with a team plan bolted on: every screen starts from your clients.

Organised by client

Hosting, WordPress, domain, FTP, DNS and email logins grouped under each client and website, with a search that finds any of them in a second.

Ask clients for their logins

Send a secure link instead of an email thread. Clients share each login, or add your team as a user, one section at a time.

Access per client and per person

Roles, per-client access and time-limited shares with people or teams. Take access back in one click.

Password health

Weekly checks for breached, reused and overdue passwords, with a list of what to change first.

A record of every action

Who opened, copied or changed which login, and when, in a tamper-evident audit log.

Import from anywhere

Bring a spreadsheet, or an export from Bitwarden, 1Password or LastPass. Clients and websites are matched for you, and the file is read in your browser.

Clean offboarding

When someone leaves, see every login they could open and rotate them from one queue.

Client requests

Stop chasing clients for their passwords

Send one secure link. Your client sees exactly what you need, shares each login at their own pace, or adds your team as a user instead. Everything they type is encrypted in their browser, for your team only.

  • Pick what to ask for: hosting, domain, WordPress, FTP, Cloudflare, SSL and more
  • Partial answers are saved; you see progress as it happens
  • Optional passcode, your logo and colours on the page
Getting started

Up and running in an afternoon

  1. 1

    Create your workspace

    Pick your address, set your master password and print your recovery sheet.

  2. 2

    Bring your logins

    Import from a spreadsheet or another password manager, or ask clients for their logins with a secure link.

  3. 3

    Invite your team

    Give each person the clients they work on. Everything they open is recorded.

We can’t read your logins. Nobody else can either.

ClientKeeps uses zero-knowledge encryption. Your master password never leaves your browser, and every login is encrypted there before it reaches our servers.

Read how it works
  • Encrypted in your browser XChaCha20-Poly1305 with keys per client and per login.
  • Keys you can verify Each member’s key is approved by an admin who compares its security code.
  • Two-factor sign-in Authenticator apps and passkeys, for anyone who wants them, or required for everyone by an admin.
  • Tamper-evident audit log Every entry is chained to the one before, so edits show.
Tour

See it in action

A 90-second tour: set up a workspace, add a client and a login, and ask a client for their logins without email.

Blog

Guides for agencies

All posts
FAQ

Questions, answered

Can ClientKeeps see our passwords?

No. Every login is encrypted in your browser before it is saved, with keys only your team holds. Our servers store the encrypted version and can’t open it.

What happens if someone forgets their master password?

They reset it from the sign-in page with their email (and their two-factor code, if they use one). An admin on your team then confirms them by phone and gives their access back. Nobody else, including us, can open their logins.

How do clients send us their logins?

You send them a secure link. They pick what to share for each account, or add your team’s email as a user. Their answers are encrypted in their browser for your team only.

Is two-factor sign-in required?

A new computer always needs a second step: a code we email, or a code from an authenticator app. An admin can require the app for everyone in Settings, and passkeys can be added too.

Can we bring our existing passwords?

Yes. Import a CSV, or an export from Bitwarden, 1Password or LastPass. The file is read in your browser.

Who is it for?

Web agencies, freelancers and IT teams who look after websites and accounts on behalf of their clients.

Get every client login out of spreadsheets.

Create your workspace in a few minutes. Your first logins can be in before lunch.