Cyber security
Password management
Strong, unique passwords for every account your team uses, stored in Keeper, shared through team vaults and managed centrally, so a leaver's access goes the day they do.
Who it is for
Businesses in Teesside and the North East where the supplier portal login lives in an email thread, the social media password is on a sticky note, three people share one accounts system login and nobody is sure the last leaver cannot still sign in. Also any business whose Cyber Essentials or insurer questionnaire asks how passwords are managed.
What you get
Keeper deployed to every user: a strong, unique password generated and stored for every account, filled in automatically so staff have less to remember and type, shared logins held in team vaults rather than sent round, and a dashboard from which the business sees who has access to what and removes it centrally. When someone leaves, their access is gone and the passwords they used stay with the business.
The problem
Reused and weak passwords are one of the commonest ways into a business, and shared logins passed round by email or on sticky notes make it worse.
A stolen password is the attacker's easiest way in, and it is usually stolen somewhere else: a reused password leaked from a shopping site, tried against your Microsoft 365. People reuse passwords because nobody can carry sixty logins in their head. The business sees the result as account takeover, fraud and, in a Cyber Essentials assessment, a failed user access control.
Shared logins make it worse. The accounts package, the supplier portal, the company social media and the courier account are often one password known to several people, passed round by email, and never changed when one of them leaves. Nobody can say who has it, and changing it means telling everyone again.
A password manager fixes both. Keeper generates a strong, unique password for every account and fills it in, so staff stop reusing and stop remembering. Shared logins go into team vaults with named access, so a leaver loses the vault and the password stays. The dashboard shows weak, reused and breached passwords across the business, and multi-factor authentication codes can live alongside the password for the services that need them.
What Odyssey provides
- Keeper password manager for every user, on computers, phones and in the browser
- Strong, unique passwords generated, stored and filled in automatically for every account
- Shared vaults for the logins teams need to share, with named access and no password ever sent round
- Central management and oversight from one dashboard, including weak, reused and breached passwords
- Access removed centrally when someone leaves, with the shared passwords they used staying with the business
- Staff shown how to use it, so it becomes easier than what it replaces
What is included
| Included | Detail |
|---|---|
| Set-up | Keeper deployed to every user and device, with single sign-on to Microsoft 365 where you have it, so one login opens the vault |
| Policies | Password length and complexity, multi-factor authentication for the vault, and sharing rules set to your standard |
| Vaults | Shared vaults created for teams and departments, and existing shared logins moved into them |
| Migration | Passwords saved in browsers and spreadsheets imported, and the browsers' own password saving switched off by policy |
| Onboarding | Staff shown how to use it in a short session, with written guidance |
| Administration | Users added and removed as staff join and leave, access to vaults changed as roles change |
| Reporting | The security dashboard of weak, reused and breached passwords reviewed with you |
| Privileged access | KeeperPAM, including Keeper Secrets Manager for system credentials and Keeper Connection Manager for recorded remote sessions on servers |
Not included, or sold separately
- Multi-factor authentication on the services themselves
- Switching MFA on across Microsoft 365 and every cloud service is Microsoft 365 management or Cyber Essentials remediation; Keeper stores the codes, it does not switch MFA on
- Identity monitoring
- Watching Microsoft 365 for a stolen password in use is endpoint and identity protection, a separate service
- Personal passwords
- Staff may keep a personal vault inside Keeper where the licence allows it, but the business manages only the business vaults
- Password policies inside other systems
- A line-of-business application's own password rules remain the vendor's to configure
How it is delivered
-
Find the logins
Which systems the business signs into, which logins are shared and by whom, and where the passwords live today: browsers, spreadsheets, email, sticky notes.
-
Set the policy
Password rules, multi-factor authentication for the vault, who may share what with whom, and whether staff may hold a personal vault. Agreed with you and set in the dashboard.
-
Deploy and import
Keeper installed on computers, phones and browsers, connected to Microsoft 365 for sign-in, existing passwords imported, and the browsers' own password saving switched off so there is one place for every login.
-
Build the vaults and train the team
Shared logins moved into team vaults with named access, and staff shown how to find, fill and share a password in a short session.
-
Run it
Joiners added, leavers removed the day they go, vault access changed as roles change, and the dashboard of weak, reused and breached passwords reviewed with you.
Why trust Odyssey with this
-
ISO
Certified to ISO 27001 for information security
-
In-house
All work completed by Odyssey employees, never subcontracted
-
3
Calls answered within three rings, and a director is always reachable
- Supporting North East businesses since 1987
Questions people ask
Which password manager do you use?
Keeper. We provide it for every user, set it up, import what you have and support it, so your team has one place for every login on computers, phones and in the browser.
What happens when someone leaves?
Their access is removed centrally the day they go, and the shared passwords they used stay with the business in the team vault, so nothing has to be changed and re-sent to everyone else.
Can staff share logins safely?
Yes. Shared vaults let a team use the same login without ever sending the password, with named access that can be changed when roles change, and a record of who has access to what.
Will it make signing in harder for staff?
No, it usually makes it easier. Strong, unique passwords are generated and filled in automatically, so staff have less to remember and type, and one login to Keeper, protected by multi-factor authentication, opens everything.
Can we see and control access centrally?
Yes. Keeper is managed from one dashboard that shows users, vaults and who has access to what, with a security report of weak, reused and breached passwords across the business.
Does it help with Cyber Essentials and our insurer?
User access control is one of the five Cyber Essentials controls, and insurers ask how passwords are managed. Unique passwords on every account, multi-factor authentication on the vault and central removal of leavers' access are the answers they look for.
What about the passwords saved in our browsers?
They are imported into Keeper and the browsers' own password saving is switched off by policy, so there is one place for every login and no copy left behind on a shared machine.
Does Keeper replace multi-factor authentication?
No. It complements it. Keeper can store the authentication codes for the services that use them, but multi-factor authentication itself is switched on in each service, which we do under Microsoft 365 management and Cyber Essentials remediation.
Challenges this helps with
- Protecting staff from phishing and fraudFewer clicks, and fewer ways in
- Getting Cyber Essentials certificationThe controls in place, the evidence ready
- Answering a customer's or insurer's security questionnaireControls in place, evidence ready
- Joiners, movers and leavers at volumeAccess that follows people in and out
Related services
Ask about password management
Send us your question and we will come back to you. We call back within the hour in office hours.
Rather talk? Call 01642 661888. Already a customer with a fault? Call the service desk on 01642 661800.
Please fill in every field marked *, then send again.
That email address does not look right. Please check it and send again.
We have had several messages from you in a short time. Please call us on 01642 661888 instead.
Online messages are paused for the moment. Please call us on 01642 661888.
Your message is too long for this form. Please shorten it, or call us.
Something went wrong on our side and your message was not sent. Please call us on 01642 661888.
We could not confirm that a person sent this message. Please try again, or call us on 01642 661888.
Talk to a human about password management
Call and we answer within three rings. Or tell us what you need and we will call you back at any time.