The social media login is in a spreadsheet. Three people who knew it left last quarter — JumpCloud Password Vault keeps shared logins, personal passwords and 2FA codes in one central cloud vault, switched on by user group and filled by the JumpCloud Go extension — the 2026 replacement for the device-based Password Manager, with no offline mode.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
This page covers JumpCloud Password Vault — the workforce credential vault, listed on JumpCloud’s price list as Password Management. The rest:
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
One cloud vault for shared logins and 2FA codes, switched on for JumpCloud user groups.
What consolidation actually replaces, dimension by dimension.
| Dimension | Passwords in a shared spreadsheet | JumpCloud Password Vault |
|---|---|---|
| Shared logins | A spreadsheet on a shared drive | Shared folders with four rights per item |
| Who sees a password | Everyone who can open the sheet | Auto-login without View Secrets, where set |
| Who gets access | Whoever was emailed the file | Enrolment by JumpCloud user group |
| 2FA codes | On one person’s phone | Stored in the vault, filled by the extension |
| Audit | None | Vault activity logged in Directory Insights |
| What it is NOT | — | A PAM tool, or a vault you can open offline |
The cheapest test is one team’s shared spreadsheet: move it into the vault for the 30-day trial and see who still asks for a password.
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Credentials are held in JumpCloud’s cloud, in your tenant’s region, not on each laptop: the break from the legacy Password Manager, and why there is no offline mode.
Admins switch the vault on for user groups, set up shared folders and permissions, and read vault activity in Directory Insights beside the tenant’s other events.
Each user gets a private space the organisation cannot open, plus the shared folders and tagged items their groups were granted; items are created and edited here.
The Go extension fills logins and 2FA codes on non-SSO sites in Chrome, Firefox and Edge; the Protect mobile app can view and autofill items but not edit them.
One cloud vault per tenant, run from the Admin Portal, opened in the User Portal and filled by the Go extension — nothing is cached on the device.
JumpCloud Password Vault puts every shared login in one cloud vault, opened from the same portal as your SSO apps.
Logins, notes and 2FA codes sit in a single cloud vault per tenant, replacing the copies the old app kept on every device.
Every user keeps a private area the organisation can’t access, so personal logins stay apart from shared company credentials.
Items are grouped into folders and labelled with tags, so a team finds the right shared login without asking for it on chat.
Grant Auto-login (Connect), View Secrets, View Details or Manage, so a colleague can be let in without being shown the password.
The vault is switched on for JumpCloud user groups, so the directory groups you already maintain decide who gets it.
Vault events are logged to Directory Insights, JumpCloud’s activity log, next to sign-ins and device events from the same tenant.
The JumpCloud Go extension fills logins on non-SSO sites in Chrome, Firefox and Edge; Safari support is listed as coming soon.
Stored 2FA codes are filled by the same extension, so a shared account behind an authenticator code stays usable by a team.
The JumpCloud Protect app shows vault items and autofills them on mobile; creating or editing items happens in the web portals.
Here’s what genuinely sets it apart — and exactly where it stops.
Most password managers arrive as a second console with a second user list. Here the vault is switched on for JumpCloud user groups, staff open it from the same User Portal that launches their SSO apps, and its activity lands in Directory Insights. For a team already on JumpCloud, that is one less system to provision and offboard.
Shared social accounts, supplier portals, government sites and older tools rarely speak SAML. The JumpCloud Go extension autofills those logins and their 2FA codes in Chrome, Firefox and Edge, and the Auto-login right lets a colleague sign in through the vault without being shown the password.
At $3 per user a month on annual billing ($4 month to month), it undercuts 1Password Business ($8.99) and Bitwarden Teams ($4), and the $11 SSO package bundles it with SSO, MFA, the cloud directory and user lifecycle. TechBag quotes either route in INR with GST.
No offline access: the 2026 design keeps nothing on devices. Safari has no extension yet, mobile is view-and-autofill only, and automatic password rotation is not documented for this vault. It is not PAM, which is JumpCloud’s separate VaultOne-based product, and legacy Password Manager users have a migration to run.
Choose à la carte at $3 or the $11 SSO package, and note that suspended users stay billable until they are removed.
New tenants pick the US, EU or India region at sign-up; if vault data must stay in India, settle that before anything else.
Enrol one user group, move its shared spreadsheet into folders, and test autofill and 2FA codes in Chrome, Firefox and Edge.
Move any legacy Password Manager users across, check shared items arrived, and warn field staff there is no offline mode.
Enrol the remaining groups, review vault events in Directory Insights, then settle the INR quote with GST through TechBag.
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
“We already ran SSO on JumpCloud, so switching the vault on for two user groups took an afternoon, not a new tool rollout.”
“The Auto-login right let our agency staff use shared ad accounts without ever seeing the passwords. That alone justified it.”
“Our field sales team works in low-signal districts. The new vault has no offline mode, and they felt it in the first week.”
“Cheaper than a separate password manager for 300 staff, because it came inside the SSO package we were already pricing.”
“Moving from the old Password Manager kept our shared folders intact, though a few users had to reinstall the extension.”
“We picked the India region at sign-up. Our compliance team’s first DPDP question was where vault data sits, so that helped.”
Analyst firms bury this view behind paywalls, and review-site grids score satisfaction, not fit for your estate. So here’s TechBag’s synthesis of the business password management market — tap any vendor to see why it sits where it does.
Execution strength vs product vision — the classic market map, minus the paywall.
$3 a user; a vault inside the JumpCloud identity platform.
The grid nobody publishes — how tightly a vault is bound to your identity directory vs how much it does on its own: offline use, rotation, clients and self-hosting.
Native to its directory; no offline mode, no rotation documented.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Against Securden Password Vault, 1Password Business, Bitwarden, Keeper Business and Zoho Vault — on deployment, offline use, clients, sharing, SSO, rotation, audit, price and India data.
| Dimension | JumpCloud Password Vault | Securden Password Vault | 1Password Business | Bitwarden | Keeper Business | Zoho Vault |
|---|---|---|---|---|---|---|
| What it is | Vault inside a directory | Enterprise vault | Standalone team vault | Open-source vault | Business vault + add-ons | Vault in the Zoho stack |
| Deployment | Cloud only | On-prem or SaaS | Cloud, three regions | Cloud or self-hosted | Cloud, six regions | Cloud, seven DCs |
| Offline access | None | Offline from Teams | Check in the trial | Read-only offline | Ask Keeper | Offline access listed |
| Browsers and apps | 3 browsers; Safari soon | Extension, apps, desktop | Apps + dev tools | Browser, desktop, mobile | Apps and autofill | 7 browsers + mobile |
| Sharing controls | 4 rights per item | Share without exposing | Vault permissions | Team sharing, policies | Team folders, delegation | Grant, revoke, external |
| Directory and SSO | Native to the directory | AD in Teams, SAML later | SSO from Business | SCIM in Teams | SAML SSO, SCIM | AD in Enterprise |
| Password rotation | Not documented | Auto-reset in PAM tier | Breach alerts | Risk view in Enterprise | Rotation is an add-on | Auto-change for sites |
| Audit and logs | Directory Insights | Every access logged | SIEM streaming | Event logs | SIEM via ARAM add-on | Real-time audit |
| Beyond passwords | Same console as MDM | PAM on one platform | Developer secrets | Secrets Manager apart | Paid add-on menu | Okta, OneLogin links |
| Pricing model | Per user, or bundled | Per user, quoted | Per user, list | Per user, list | Per user, annual | Per user; 5-user floor |
| Published entry price | $3/user/month | Free for 5 users | $8.99/user/month | $4/user/month | Not captured | Free plan; paid unread |
| India data region | India region for Vault | On-prem in India | No Indian region | Self-host in India | None of six regions | India DC |
| Lock-in and exit | Tied to the tenant | Your servers, your data | Region fixed at sign-up | Open code, self-host | Region set per tenant | One DC per account |
| Best fit | JumpCloud estates | On-prem, India-built | Developer-heavy firms | Budget or self-host | Add-ons from one vendor | Zoho shops in India |
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
TechBag has no password management guide yet, so JumpCloud Password Vault sits outside the category guides. Browse all products to compare it with the rest of the catalogue. →
Drag the sliders (staff who share logins; IT-hour cost). Estimates model the IT time spent on password resets, hunting for shared logins and changing credentials when people leave, at an assumed 2 hours per user a year, with 60% of it removed by a shared vault with autofill. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
JumpCloud lists Password Management at $3 per user a month on annual billing, or $4 month to month, bought à la carte. It is also part of the SSO package at $11 per user a month annually ($13 monthly), with SSO, MFA, Cloud Directory, Directory Insights and user lifecycle, and of the Platform packages, which are quoted. Suspended users remain billable, and new accounts get a 30-day trial, not a free tier. TechBag quotes in INR with GST.
Best for teams adding a vault to an existing JumpCloud tenant
Best for a broader rollout
Best when you also need SSO and MFA
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Tell us your requirements and current tools — we’ll model it against what you spend today.
Take this into your next vendor call — including ours.
Do any staff work without a connection? Since the 2026 rebuild the vault cannot be opened offline at all.
Do Mac users live in Safari? The JumpCloud Go extension covers Chrome, Firefox and Edge; Safari is still to come.
Is your tenant in the India region? Existing US or EU tenants move only through a paid custom migration.
Who can decrypt vault data? JumpCloud does not claim a zero-knowledge design for the vault; ask for the model.
Is Directory Insights in your licence? Vault events land there, and bought à la carte it is its own $3 line.
How are leavers removed? Suspended users stay billable, so the offboarding runbook should delete, not suspend.
Can field staff work with view-and-autofill on phones? Creating and editing items needs the web portals.
À la carte or SSO package? Ask TechBag to quote both routes in INR with GST for your exact seat count.
Tell us your seat count and which browsers and devices your staff use, or let a TechBag advisor compare à la carte with the SSO package and confirm the India region for your tenant.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.