Gateholm

Passwords for Business

Your organization gets its own private password server — not a shared one with your company partitioned off inside it. Your people keep using the official Bitwarden apps they already know; you get the administration.

Prices are loading…

What you get

  • Your own server. A dedicated instance on its own address, not a slice of a shared one.
  • Manage your team from one dashboard. Add people, choose which shared logins each of them can reach, and remove access the moment someone leaves.
  • Password resets you can handle yourself. If someone forgets their master password, you can get them back in instead of the account being lost.
  • An activity record. Account and permission changes over time, exportable — for when you need to show who had access to what.
  • Policies and groups. Require two-step login, set master-password rules, and organize shared logins by team.
  • Security reports. Find exposed, reused and weak passwords among the logins your team shares.
  • Bring your data. Direct import from Dashlane, 1Password, LastPass, Bitwarden and others.

Being straight with you

  • We can't read your vaults. Not the shared ones, not private ones. The encryption doesn't allow it — that's the point of buying this rather than keeping a spreadsheet.
  • Admins manage accounts and shared logins — not private items. The dashboard, reports and activity record cover your organization's shared collections and who has access to them. What a member keeps in their own private vault stays theirs. The one exception is a password reset, which members opt into and are notified about when it's used.
  • Single sign-on: yes, on request. Because you get your own server, we can point it at your identity provider — any OpenID Connect one — so people sign in the way they already do everywhere else, from the official Bitwarden browser extension included. We configure it with you rather than it being a self-serve setting, so raise it before you buy. Your people still keep a master password: signing in and decrypting are two different things, and only the second protects the vault.
  • No automatic directory sync. People are added by invitation rather than pulled from your directory (no SCIM).
  • We're small. Support runs through a ticket system you can follow and reply to from your account, and a person answers it. What we don't have is a 24/7 hotline or a contractual response time — if you need those in writing, talk to us first.