Best Password Managers for Nonprofits, and Which Discounts Are Real

A charity’s passwords are usually in three places: a spreadsheet, a notebook in the office, and the head of whoever set up the account. When that person leaves, the charity loses its social media accounts, its domain, or its donation platform login. A password manager fixes that for less than most charities spend on coffee. The harder question is which one, because most “nonprofit discount” claims online are guesses. We checked each vendor’s own pages on 8 November 2026.

The nonprofit offers, as published

Only one vendor publishes a nonprofit offer with terms you can budget on. Everyone else either says “contact us” or says nothing.

Does 1Password have a nonprofit discount?

Yes, but not the one most articles describe. 1Password’s old 1Password for Good post promised nonprofits “a perpetual discount”; an update on the same post says “Starting in April 2024, we’re shifting our 1Password for Good program.” Its current nonprofit page says “you may be eligible for a one-time credit, discounted accounts, or a similar type of support,” and that after you create an account “We’ll be in touch for any qualifying information we need.” No percentage is published. Treat any figure on a coupon site as unconfirmed.

Does Bitwarden have a nonprofit discount?

Not on any Bitwarden page we could read. Third-party sites claim 50%; Bitwarden’s pricing and plans pages do not mention nonprofits. What Bitwarden does publish is better for a very small charity: a free organization that lets you “store and securely share data with one other user,” in up to two collections. Two people, sharing logins, at no cost, with no application.

Dashlane through TechSoup

TechSoup’s Dashlane listing gives “access to a 50 percent discount on a Dashlane Omnix Password Management for two or more users.” The TechSoup admin fee is $35, or $18 for TechSoup Plus members, and “You’ll pay Dashlane directly.” The fee and the purchase are nonrefundable. Dashlane’s pricing page lists Omnix at “$8 per user per month (billed annually),” so the discounted price is $4.

What they cost at list price

Prices from each vendor’s business pricing page, in US dollars, per user per month on annual billing unless stated. LastPass’s pricing page showed us template placeholders instead of prices, so it is not in the table.

Sources: Bitwarden pricing and plans, 1Password business pricing, Keeper business pricing, Dashlane pricing and Proton Pass business pricing. “Ask” means the vendor’s pricing page did not settle it for that plan.

What that means for your size

A year’s cost for 2, 10 and 25 people, our arithmetic from the list prices above, before tax and before any discount you negotiate. Count everyone who needs a login: staff, regular volunteers who post on your accounts, and the treasurer.

Three patterns stand out. For two people, Bitwarden’s free organization is hard to argue with. For about ten, 1Password’s Teams Starter Pack is a flat $299.40 a year and includes things the cheaper plans do not, such as guest access and account recovery. Above ten, the cheapest serious options, Bitwarden Teams, Keeper Business and Dashlane with the TechSoup discount, all land at about $48 a user a year.

Our picks

Smallest charities, two people: Bitwarden Free organization. Free, with no application. Its limit is the point: two users, two collections. When a third person needs access, move to Teams at $4 a user.

Best fit for most small charities: 1Password Teams Starter Pack. A flat $24.95 a month for 10 members, with shared vaults, five guest accounts and the ability to “Recover your and others’ accounts if locked out,” which matters when the person who leaves is the one who forgot their master password. Travel Mode, which hides vaults when crossing borders, is included on every 1Password plan. Ask 1Password’s sales team about its nonprofit credit before you pay.

Growing charities, 10 to 50 people: Bitwarden Teams or Keeper Business. Both are $4 a user. Bitwarden’s business plans have no seat minimum. Keeper Business adds delegated administration and a free family plan for every user, which is a small staff benefit that also keeps personal passwords out of the work vault.

If you want a published discount: Dashlane via TechSoup. At $4 a user after 50%, with SAML single sign-on confirmed in the listing, it is the only offer with terms in writing.

If you need SSO and admin recovery at scale: Bitwarden Enterprise or 1Password Business. Single sign-on with Microsoft 365 or Google Workspace means one place to turn off a leaver’s access. Bitwarden puts SSO, account recovery and sponsored family plans on Enterprise at $6; 1Password Business adds 20 guest seats and free family accounts at $8.99.

Privacy-first: Proton Pass. Proton’s business tiers start at $1.99 a user with a three-user minimum, and Proton offers nonprofits a discount on its whole suite through sales. It lets you “share a single item or a whole vault” and “grant temporary or permanent access,” which suits event volunteers.

What about LastPass?

LastPass runs an Impact Program form for “non-profit, charities, schools, and government organisations” but states no discount. Its record is the bigger question. In its own incident notice, first posted 25 August 2022 and updated through 22 December 2022, LastPass said an attacker was able to “copy a backup of customer vault data.” Website addresses in that backup were not encrypted; passwords were “secured with 256-bit AES encryption,” and “The master password is never known to LastPass.” LastPass advised users who had not followed its default settings to change their stored passwords. If you use LastPass, that advice is the minimum. If you are choosing now, the others above are at least as good on features and price.

Volunteers and board members

Most charities have people who need one or two logins and nothing else: the volunteer who posts on Instagram, the board member who reviews the bank feed. Three ways to handle them:

• Guest accounts. 1Password includes 5 guests on Teams Starter and 20 on Business, each limited to the vaults you share with them.
• Single-item sharing. Proton Pass and others can share one item, temporarily, which suits a gala volunteer running the ticketing account for a week.
• Do not share at all. Banks and payment platforms should give each person their own login with their own permissions. A shared bank login cannot show who approved a payment, which defeats your internal controls. Our nonprofit banks guide covers choosing one.

What to put in it, and what to agree

A password manager only helps if the organization, not individuals, owns the accounts in it. Put these in shared vaults first:

• The domain registrar and website host. Losing these takes your website and your email with them.
• Social media accounts, especially any registered to a former employee’s personal email. Our social media tools guide covers the scheduling tools that sit on top.
• The donation platform, CRM admin and email marketing logins.
• Government and regulator portals: IRS online account, state charity registration, payroll tax.
• Software licence and TechSoup accounts, including the login that holds your determination letter verification.

Then write the rule into your policies: organizational accounts live in the password manager, two named people are administrators, and leavers lose access on their last day. Name the recovery route in your emergency succession plan, so the board can get in if the executive director is suddenly unavailable. Do not put passwords in chat; Slack itself is not a vault, as our Slack guide notes.

Passwords and MFA: what the government guidance says

CISA’s small business guidance says “A company-wide password manager makes it easier for employees to follow best practices,” and to “always use phishing-resistant MFA along with strong passwords.” Turn on multi-factor authentication for the password manager itself and for email, banking and the donation platform before anything else.

NIST’s current password standard, SP 800-63B-4, also overturns two habits many charities still enforce. Systems “SHALL NOT require subscribers to change passwords periodically,” only when there is evidence of compromise, and “SHALL NOT impose other composition rules” such as forced symbols. NIST says verifiers “SHALL allow the use of password managers and autofill.” The minimum length is 15 characters for a password used on its own and 8 when used with MFA. A password manager makes long, unique passwords effortless, which is the point.

Cyber liability cover is covered in our nonprofit insurance guide. For donor and client data more widely, see nonprofit data security.

Where these figures come from

We read the business pricing and nonprofit pages of 1Password, Bitwarden, Keeper, Dashlane, LastPass and Proton, TechSoup’s Dashlane listing, LastPass’s 2022 incident notice, CISA’s password guidance and NIST SP 800-63B-4 on 8 November 2026. Every vendor that showed a price showed US dollars. Annual costs are our arithmetic at list price and exclude tax. None of these companies has a commercial relationship with this site and we take no referral fees. For discounts on other software, see nonprofit software discounts.