Most small businesses still keep shared logins in a spreadsheet, a notes file or a chat thread, which means no control over who has what and no record of who used it. Zoho Vault is Zoho’s password manager for teams: passwords are stored encrypted, shared with the right people at the right level, filled automatically in the browser, and every access is logged. It is included in Zoho One and in Zoho Workplace’s Professional plan, and sits in the security corner of our Development & Automation hub.
What Zoho Vault Does
- Encrypted storage for passwords, passkeys, notes, cards and files, under a master password only you know.
- Sharing with individuals or groups, with view, use or manage levels per password.
- Browser extensions and mobile apps that autofill logins.
- Folders that mirror your teams, so Marketing sees marketing logins and nothing else.
- Audit trails: who accessed which password and when.
- Password policies, expiry alerts and breached-password checks.
- Single sign-on for supported cloud apps and MFA via Zoho OneAuth.
Why Teams Outgrow Browser-Saved Passwords
| Browser or spreadsheet | Zoho Vault |
|---|
| Passwords tied to one person’s profile | Owned by the business, shared by role |
| No record of access | Every view and use logged |
| Leavers keep whatever they memorized | Access revoked in one click, passwords rotated |
| Same weak password reused | Generator and policies enforce strong, unique ones |
Zoho Vault Pricing
| Plan | Price (per user, per month, billed annually) | Highlights |
|---|
| Free | $0 | Personal use, unlimited passwords and passkeys |
| Standard | ~$1 | Secure sharing, folders, basic policies |
| Professional | ~$4.50 | Groups, user provisioning, reports |
| Enterprise | ~$7.20 | SSO for cloud apps, directory integration, advanced controls |
Zoho has recently stopped publishing exact Vault prices on its pricing page, so treat these as close anchors and confirm on the official pricing page. Vault is included in Zoho One, so Zoho One customers can roll it out at no extra cost.
Choosing a Vault Plan
Standard covers teams that mainly need safe storage and folder sharing. Professional adds user groups and reports, which matter from roughly ten people or several departments. Enterprise earns its price when you want SSO for cloud apps or directory integration. Zoho One customers skip the decision entirely, since Vault comes with the bundle. Whichever plan, enable OneAuth MFA on day one; a password manager protected by a weak login defeats its own purpose.
Passkeys and the Shift Beyond Passwords
Vault stores passkeys as well as passwords, including on the free personal plan, so logins for sites that support passwordless sign-in live in the same place as everything else. For a small business, that means one tool carries you through the transition: passwords for the systems that still need them, passkeys for the ones that have moved on, and the same sharing, policies and audit trail over both.
Vault and Compliance Questions
When a client, insurer or auditor asks how credentials are controlled, Vault gives concrete answers: encrypted storage, named access per credential, logged usage, enforced password policies and immediate revocation on departure. For SMBs pursuing cyber-insurance or SOC-style questionnaires, replacing the shared spreadsheet with Vault closes one of the most commonly flagged gaps.
Rolling Vault Out to a Team
- Import existing passwords from browsers or another manager.
- Create folders by team or client, and user groups to match.
- Share each folder with the right group at the right level: most people need use, not manage.
- Install the browser extension and mobile app on every device.
- Turn on MFA with OneAuth and set a password policy.
- Retire the old spreadsheet, and rotate every password it contained.
Everyday Features People End Up Loving
- The password generator, one click to a strong, unique password at save time.
- Search from the extension, faster than remembering which folder holds a login.
- Secure sharing links for one-off handovers to contractors, with expiry.
- Password assessment reports that flag weak, old and reused credentials.
- Offline access from mobile, for the login you need in a basement server room.
None of these is dramatic alone; together they are why teams stop resisting a password manager within a week of using one.
Vault for Agencies and Client Work
Agencies hold logins for dozens of client systems, which makes them a target and makes offboarding risky. Folders per client, groups per account team and use-level sharing mean staff can open a client’s ad platform without ever seeing the password, and when the engagement ends, one revocation closes everything. The audit trail also answers the awkward client question of who accessed what, with a report instead of a guess.
What Vault Does Not Do
Vault manages secrets and sign-ins; it is not a full identity platform. If you need SCIM provisioning across hundreds of third-party apps or conditional access policies, that is Zoho Directory territory, and Vault plugs into it. For most SMBs, Vault plus OneAuth MFA covers the real risks: weak passwords, shared spreadsheets and departed staff.
Vault in the Zoho Ecosystem
Vault pairs with Zoho OneAuth for multi-factor authentication and ties into Zoho Directory for provisioning on larger setups. Because it is part of Zoho One, the same account your team uses for CRM and Mail covers password management too, one less vendor and one less bill.
- OneAuth adds fingerprint or face-based MFA to every Vault login.
- Zoho Directory handles provisioning and policies for larger teams.
- Cliq and Mail stay inside the same signed-in Zoho session, so adoption is effortless.
The First Week With Vault
Expect a little friction in week one as autofill replaces memory and sticky notes; it fades fast. Run the rollout in one short session per team: install the extension together, import that team’s passwords into its folder, show the search shortcut, and delete the old source in front of everyone. Teams that skip the ceremonial deletion keep using the spreadsheet; teams that do it switch in days.
Vault Alongside Personal Password Managers
Staff can keep a personal manager for personal life; Vault’s free personal plan even gives them one. The rule that matters is simple: anything the business owns lives in the business Vault, under business policies, never in a personal account the company cannot see or revoke.
Good Practices Once Vault Is Live
- One login per system per person where the app allows it; share only true shared accounts.
- Review access quarterly and when someone changes role.
- Rotate passwords on staff departure, Vault’s reports show what they could access.
- Store recovery codes and license keys in Vault too, not in email.
Questions People Ask About Zoho Vault
Short answers, drawn from the guide above.
What is Zoho Vault?
Zoho Vault is Zoho’s password manager for teams. It stores passwords encrypted, shares them with controlled access levels, autofills logins in the browser and keeps a full audit trail.
Is Zoho Vault free?
Yes, for personal use, with unlimited passwords and passkeys. Team plans with sharing and admin controls are paid, and Vault is included in Zoho One.
How much does Zoho Vault cost?
Team plans run roughly $1, $4.50 and $7.20 per user per month billed annually for Standard, Professional and Enterprise. Zoho no longer publishes exact figures on the pricing page, so confirm current rates there.
Is Zoho Vault secure?
Vault encrypts data with AES-256, uses a zero-knowledge model where only you know your master password, and supports multi-factor authentication through Zoho OneAuth.
Can I share passwords safely with Zoho Vault?
Yes. Passwords are shared with individuals or groups at view, use or manage levels, and every access is logged.
Does Zoho Vault work with browsers and phones?
Yes. Extensions for the major browsers and apps for iOS and Android autofill logins, and changes sync across devices immediately.
Can Zoho Vault import from another password manager?
Yes. Vault imports from browsers and from most password managers via CSV or their export formats, so migration is usually an afternoon’s work.
Does Zoho Vault support single sign-on?
Yes. The Enterprise plan provides SSO for supported cloud apps, and Vault works with Zoho OneAuth for multi-factor authentication across Zoho.
What happens to passwords when an employee leaves?
An admin revokes their access in one click, and Vault’s reports show every credential they could reach so those passwords can be rotated. That offboarding report is one of Vault’s biggest advantages over browser-stored passwords.
{"@context":"https://schema.org","@type":"FAQPage","mainEntity":[{"@type":"Question","name":"What is Zoho Vault?","acceptedAnswer":{"@type":"Answer","text":"Zoho Vault is Zoho's password manager for teams. It stores passwords encrypted, shares them with controlled access levels, autofills logins in the browser and keeps a full audit trail."}},{"@type":"Question","name":"Is Zoho Vault free?","acceptedAnswer":{"@type":"Answer","text":"Yes, for personal use, with unlimited passwords and passkeys. Team plans with sharing and admin controls are paid, and Vault is included in Zoho One."}},{"@type":"Question","name":"How much does Zoho Vault cost?","acceptedAnswer":{"@type":"Answer","text":"Team plans run roughly $1, $4.50 and $7.20 per user per month billed annually for Standard, Professional and Enterprise. Zoho no longer publishes exact figures on the pricing page, so confirm current rates there."}},{"@type":"Question","name":"Is Zoho Vault secure?","acceptedAnswer":{"@type":"Answer","text":"Vault encrypts data with AES-256, uses a zero-knowledge model where only you know your master password, and supports multi-factor authentication through Zoho OneAuth."}},{"@type":"Question","name":"Can I share passwords safely with Zoho Vault?","acceptedAnswer":{"@type":"Answer","text":"Yes. Passwords are shared with individuals or groups at view, use or manage levels, and every access is logged."}},{"@type":"Question","name":"Does Zoho Vault work with browsers and phones?","acceptedAnswer":{"@type":"Answer","text":"Yes. Extensions for the major browsers and apps for iOS and Android autofill logins, and changes sync across devices immediately."}},{"@type":"Question","name":"Can Zoho Vault import from another password manager?","acceptedAnswer":{"@type":"Answer","text":"Yes. Vault imports from browsers and from most password managers via CSV or their export formats, so migration is usually an afternoon's work."}},{"@type":"Question","name":"Does Zoho Vault support single sign-on?","acceptedAnswer":{"@type":"Answer","text":"Yes. The Enterprise plan provides SSO for supported cloud apps, and Vault works with Zoho OneAuth for multi-factor authentication across Zoho."}},{"@type":"Question","name":"What happens to passwords when an employee leaves?","acceptedAnswer":{"@type":"Answer","text":"An admin revokes their access in one click, and Vault's reports show every credential they could reach so those passwords can be rotated. That offboarding report is one of Vault's biggest advantages over browser-stored passwords."}}]}