About ClientKeeps
A password manager made for web agencies and the client logins they look after.
ClientKeeps started inside a web agency that looks after hundreds of client websites. Every one of those sites came with its own set of keys: a hosting panel, a domain registrar, a WordPress admin, FTP or SFTP, Cloudflare, an email account and usually a few plugins with licences of their own.
For years those logins lived where most agencies keep them: a shared spreadsheet, old email threads, chat messages and the memory of whoever set the site up. It worked until it didn't. A developer left and nobody knew which passwords they had seen. A client emailed their hosting password to the wrong person. A late-night fix took an hour because the right login was buried in a thread from two years ago.
We tried personal password managers with a team plan added on. They were built around one person's accounts, not around clients and websites. So we built the tool we needed.
What ClientKeeps is
ClientKeeps is a password manager for web agencies. Every login belongs to a client, and usually to one of that client's websites. Open a client and you see everything you need to work on their site, in one place, with a clear record of who opened what and when.
It also fixes the part of agency life that personal tools ignore: getting logins from clients. Instead of chasing hosting and domain passwords by email, you send a secure client request and the client fills in only what you asked for.
Who it is for
- Web design and development agencies, from two people to large teams
- WordPress, WooCommerce and Shopify specialists who manage many client sites
- Freelancers who look after websites and accounts for several clients
- IT and support teams who hold logins on behalf of their clients
Our security commitment
Client logins are the keys to our customers' clients' businesses, so we treat them that way:
- Zero-knowledge encryption. Every login is encrypted in your browser before it reaches our servers. We can't read your logins, and neither could anyone who broke into our servers.
- Audited cryptography, nothing home-made. We use the libsodium library: XChaCha20-Poly1305 for logins and Argon2id for your master password.
- A record you can trust. Every time a login is opened, copied or changed, it goes into a tamper-evident audit log.
- Access you control. Each person sees only the clients you give them, and offboarding shows every login a leaver could open.
Read the full security details or the plain-English version.
Talk to us
ClientKeeps is free during early access, and we read every message. Questions, a feature your agency needs, or a walkthrough for your team: contact us or email [email protected]. Security reports go to [email protected].