Keyhold
Features

Live a calmer, better-defended life at home, at the office, and everywhere in between. See every feature that makes Keyhold the strongest security layer for teams, families, and individuals.

A person seated on a lounge sofa against a moss-green office wall, photo by cottonbro studio on Pexels

Build, use, and pass on strong passwords

Retire the reused and the half-remembered. Every credential is generated, encrypted, and filled in a single click, so no account is left as the weak link.

Credential generator

Nobody can invent, let alone recall, hundreds of tangled passwords. The built-in Keyhold generator proposes a strong, unrepeated credential each time you open or update an account.

Learn about the generator

Encrypted vaults

The safest home for your sign-ins and other private records is a fully encrypted Keyhold vault. Create, name, and arrange as many vaults as you need from the desktop and mobile apps.

Learn about vaults

Item sharing

Hand credentials to family or colleagues by granting them access to a shared vault. Or mint an expiring link for a single item — even for people who have never used Keyhold.

Learn about sharing

Protect a business that keeps growing

Hold off breaches with an enterprise credential manager: quiet provisioning and deprovisioning, insights you can act on, and integrations that meet the security tools you already run.

Unlock with SSO

Simplify security for your people by letting them sign in to Keyhold with their identity-provider credentials, rather than a separate Keyhold account password.

Learn about SSO unlock
Sign in with Northmark

Your account has switched to signing in with Northmark. For help, contact your administrator.

Access management

Keep the business tight by giving each person the credentials and records they need for the work in front of them, and nothing further.

Vault details
Platform team
Edit details
Share with the rest of the team
Give people and groups access to the items in this vault.
PEOPLE (1)
Luca Marchetti
GROUPS (2)
Owners
Administrators
INTEGRATIONS (0)
There are no integrations with access to this vault.
PERMISSIONS
Enable all View items Create items Edit items Archive items Delete items
CLIENT SETTINGS
Enable all View and copy View item history Import items Export items

Beacon

Beacon flags weak credentials and other security problems to your team members. Admins get one dashboard for password health, exposed data, user access, and more.

Learn about Beacon
Reports
Business Beacon report
Security issues shared with people, reported by Luca Marchetti on 14 May 2026
723Compromised
418Reused
1,690Total issues
92Weak
Accounting1422264
Design68719
Developers31143852
External partners2736
Finance9411113
People ops5649
Platform20322131

Custom policies

Every organisation has its own culture and its own exposure. Write, manage, and enforce policies that govern how and where your team members use Keyhold.

Learn about policies
Policies
Policies overview
Create rules that govern how and where your team uses Keyhold.
Authentication
Create rules to manage how your team authenticates with and into Keyhold.
Manage →
App usage
Create rules to manage how your team uses Keyhold — sharing, vaults, and more.
Manage →
Identity provider
Set up a provider to verify members' identity before they reach Keyhold.
Manage →
Firewall
Restrict where and how your team can reach Keyhold.
Manage →

Save, fill, and hand off everything

Credentials are only the start. Keep and fill everything your day actually runs on — addresses, card details, and one-time codes.

Sign-ins

No typing, no hunting. Sign in to sites and apps by filling your saved credentials on desktop, mobile, and every browser you use.

Passkeys

The passwordless turn is here. Sign in faster and more securely to a growing list of sites and apps that support passkeys.

Learn about passkeys

One-time codes

Get the extra layer of two-factor authentication without the errand of fetching codes from a separate app on a separate device.

Payment details

Save and fill bank account details, card numbers, and more in any browser you happen to use that day.

Learn about payment details

Addresses

Save time by letting Keyhold complete your address when you're finishing an order or filing paperwork online.

Learn about addresses

Secure notes

Write down and store sensitive information in encrypted notes. Ideal for travel documents, policy numbers, and much else.

Secure the way your engineers ship

Streamline how you manage SSH keys, API tokens, and other infrastructure secrets across the whole software development life cycle with Keyhold Developer.

SSH

Generate and store SSH keys in Keyhold, then scan your fingerprint to use them in any Git or SSH client through the built-in agent.

Learn about SSH
$ git add readme.md
$ git commit -m "Updated README file"
$ git push
Keyhold access requested
Allow Termina to use SSH key
Forgepoint SSH key
Approve for all applications
DenyAuthorise with fingerprint

Command-line tool

Reach your secrets from Keyhold while you build. Take plaintext credentials out of code, script the administrative chores, and sign into any CLI with your fingerprint.

Explore Keyhold CLI
$ kh item list --vault devops
TITLEVAULTEDITED
Northmarkdevops7 months ago
Forgepointdevops1 year ago
Crateboxdevops5 months ago
Sablestoredevops1 year ago
Relaykitdevops2 years ago

Secrets management

Hold, rotate, and pass along your secrets with Keyhold secrets management, right across the development life cycle.

Discover secrets management
Keyhold

Trusted by 4.6 million people and 127,400 businesses

ORBITAL cloudsill BrightWire ARCWELL Marlowe NEXOR quorum HALCYON

Secure every sign-in, on every app, on every device

Keyhold Extended Access makes sure every identity is genuine, every application sign-on is protected, and every device is in good health.

Unmanaged apps
Apps found in use but not managed with SSO
32 unmanaged apps found 16 apps with SSO available 18 vaults searched
AppLoginsTeam members
Kitewellkitewell.com125Manage with SSO
Dropstackdropstack.io120118Manage with SSO
Signfoldsignfold.com2121Manage with SSO
Dovetreedovetree.works75Manage with SSO
Expedraexpedra.com1810Manage with SSO
Forgepointforgepoint.dev142134Manage with SSO
Jotlinejotline.org55Manage with SSO
Weekdayweekday.com113108Manage with SSO

Application insights

See which apps your people are actually using. Steer them toward company-approved tools, or bring the unmanaged ones back under control.

PLATFORM
Terminal88
Desktop372
Laptop580
Handset23
Tablet47
ACCESS
Blocked6
Will block56
Notified130
All good916
FORM FACTOR
Computer1040
Tablet22
Phone28
Devices Add device
RegisteredUnregistered 3
Maya-Latitude-14Maya DanaiUGVUHDFF62XYUVCT
Matis-Nova-6Matis JacksonMDFGAP7VHG3V
Johanne-Verge-13Henning UtzVIAR2HRLHW0EQZ
Guanyu-Verge-13Guanyu HengPA3DTT5B2RW3FH
Bridgeta-FoliobookBridget Adetokunbo2I2HIRCEM5
Bridgeta-Nova-12Bridget AdetokunboUSLWFW82PJ
Rachel-Slate-ProRachel SmitKYVOHNNERXQ3MN
Johanne-Foliobook-ProJohanne ArnoldMMWDCAYCI
Joseph-Slate-ProJoseph HilbertJOEB9UUQVHEPZS
Johanne-Verge-13Johanne ArnoldNECS9RTVWCFZBU
Jason-Foliobook-ProJason SchmidtAIFW4LYK5L

Device insights

Check the health of every device and hold back access to apps until people have finished important security tasks, like updating their apps and browsers.

Keyhold Features FAQs

What can Keyhold do?

Keyhold is a credential manager you can use to store and manage account sign-ins, payment details, documents, and other sensitive records. It generates passwords, fills forms quickly, and syncs across every device you own. It also handles encrypted sharing and monitoring for accounts caught in a breach.

How does Keyhold work?

Everything is encrypted on your device before it leaves it, using a key derived from your account password and a secret key that never reaches our servers.

How do you open a Keyhold account?

Pick a plan, confirm your email address, and save the emergency kit that Keyhold generates for you. The whole thing takes about four minutes.

What plans are available with Keyhold?

Individual, Families, Teams Starter, and Business — plus an Enterprise tier with a dedicated account team and custom policy support.

Is Keyhold safe to use?

Keyhold is audited annually by an independent security firm, runs a public bug bounty, and publishes every report in our trust centre.

Why is Keyhold the best credential manager?

Two-secret key derivation, a mature admin console, and apps that people actually keep using after the first week.

How does Keyhold compare to competitors?

Keyhold pairs consumer-grade apps with enterprise controls, so the security team and the people they support are not fighting each other.

What is Keyhold Extended Access?

An add-on that extends credential management into device health, application discovery, and conditional access checks before a sign-on completes.

What are the differences between Extended Access and identity access management?

Identity access management decides who someone is. Extended Access also asks whether the app is sanctioned and whether the device in their hands is healthy enough to be trusted.

Get the business security briefing

Advice on running a secure, productive workplace, delivered straight to your inbox.