As of 13 August 2026, AI can choose a password manager for your business.

What to actually do

1. Hand it to a person

   The route this page recommends

   A person who owns the outcome does this end to end, worth it when the failure is dear.

2. Use a tool built for this

   Second choice

3. Do it yourself

   The distant third

   A chat interface, chat-fluent skill, and roughly 1 hour until you can act on the result.

   How to actually do it

   1. Open a document or spreadsheet and record the business requirements, user numbers, devices, identity provider, integrations, recovery needs, compliance obligations and budget.
   2. Ask the person responsible for IT or security to add any must-have controls, especially administration, multi-factor authentication, recovery, audit logs, account removal and migration.
   3. Collect current product pages, security documentation, support terms, data-location details, export documentation and price pages for the password managers you are considering.
   4. Paste the requirements and the source links into the prompt, then ask the model to produce the weighted comparison and mark every unsupported claim as unknown.
   5. Compare the drafted product claims against the current vendor documents, correcting the table where the sources do not support what the model wrote.
   6. Take the recommendation and runner-up into a trial, create test users and groups, test onboarding, sharing, offboarding, recovery, audit logging, export and multi-factor authentication, and record the results.
   7. Ask the model to update the scoring with the pilot results, then have the business owner and IT or security colleague approve the final choice and purchase terms.

   Prompt

   Act as a cautious UK business technology buyer. Help me choose a password manager for this business, but do not pretend to have current prices, certifications or product features that I have not supplied.
   
   Business context:
   - Business type: [type]
   - Number of users now: [number]
   - Expected users in the next few years: [number]
   - Devices and operating systems: [details]
   - Existing identity provider or single sign-on: [details]
   - Shared passwords, service accounts or machine credentials: [details]
   - Need to manage external contractors: [yes/no and details]
   - Required integrations: [details]
   - UK or other data-location requirements: [details]
   - Compliance or customer requirements: [details]
   - Maximum acceptable monthly or annual budget: [amount and currency]
   - Current password manager, if any: [details]
   
   Requirements, ranked as must-have, should-have or nice-to-have:
   [ paste the requirements here ]
   
   Candidate products and source links:
   [ paste current vendor pages, independent test results or procurement notes here ]
   
   Produce:
   1. A requirements checklist showing which candidates meet each must-have, should-have and nice-to-have.
   2. A comparison table covering administration, user and group management, sharing controls, single sign-on, multi-factor authentication, recovery, audit logs, reporting, integrations, mobile and desktop support, data location, export and migration, support, contract terms and price.
   3. A weighted score. Use these weights unless I provide different ones: security and recovery 30%, administration 20%, user experience 15%, integrations 10%, reporting and audit 10%, migration and exit 10%, cost 5%.
   4. A provisional recommendation and a runner-up, with the evidence and unknowns for each.
   5. A list of claims I must verify directly in current vendor documentation or a trial before buying.
   6. A short pilot plan using non-sensitive test accounts, including what success and failure look like.
   
   Do not recommend a product that fails a must-have. Do not treat marketing language as proof of encryption, certification, data location or recovery capability. Mark missing evidence as unknown rather than guessing. Do not ask me to paste passwords, recovery codes, secrets or personal data.

   Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.