As of 13 August 2026, AI can only partly set up a password manager for your business.

What to actually do

1. Hand it to a person

   The route this page recommends

   A person who owns the outcome does this end to end, worth it when the failure is dear.

2. Use a tool built for this

   Second choice

3. Do it yourself

   The distant third

   A chat interface, chat-fluent skill, and roughly 1 hour until you can act on the result.

   How to actually do it

   1. Open the password manager provider's current business documentation and record the available MFA, role, sharing, recovery, audit-log, export and account-recovery controls.
   2. Gather non-sensitive requirements from the business: user count, device types, administrator names, shared accounts, current identity provider, remote-working arrangements, offboarding process and any customer or contractual security requirements.
   3. Paste those requirements and the provider documentation links or relevant text into the prompt, leaving out passwords, recovery codes, private keys, API tokens and other secrets.
   4. Ask the chatbot to turn the information into a provider-specific setup checklist, and identify every decision that needs approval from the business owner or IT administrator.
   5. Create the business account directly on the provider's official website, assign two separately controlled administrators, enable MFA and configure roles and recovery settings by following the checklist and provider documentation.
   6. Migrate a small group of low-risk credentials first, test sign-in, sharing, recovery, audit logging and access removal, then compare the results with the checklist before migrating the remaining credentials.
   7. Send the staff policy and onboarding message to a pilot group, confirm that each person has enrolled MFA and can access only the vaults they need, then complete the wider rollout.
   8. Ask an experienced IT administrator or security professional to check the final permissions, recovery process, administrator separation and offboarding test before relying on the manager for critical accounts.

   Prompt

   Help me plan and document the setup of a password manager for a UK business. Do not ask me to paste passwords, recovery codes, private keys, API tokens or other secrets. First ask only for the non-sensitive details you need: business size, number and type of users, devices, current identity provider or single sign-on system, shared-account needs, administrator roles, remote-working arrangements, and any stated customer, contractual or regulatory security requirements. Then produce: 1. a provider-neutral setup plan; 2. recommended administrator and user roles with the reason for each; 3. a checklist for MFA, recovery, device access, vault sharing, offboarding, emergency access, audit logs and backup or export arrangements; 4. a staged migration plan that starts with low-risk accounts and keeps the old records until each item is tested; 5. a short staff policy and onboarding message; 6. a verification checklist that points me to the provider's current documentation for every setting. Mark anything that needs an IT security professional or the provider's support team. Do not claim that the setup is compliant with UK GDPR, Cyber Essentials or any contract unless the requirement is explicitly supplied and independently checked.

   Open it prefilled in ChatGPT or Claude, or copy it into Gemini, which takes no prefill link.