1Password vs Bitwarden vs Keeper: the 2,000-seat bill after July's price rise

The July repricing set the baseline

1Password raised its business prices on 6 July 2026. Tracking data published by PricingSaaS Pulse records the Business plan moving from $7.99 to $8.99 a user a month on annual billing, and the Teams Starter Pack moving from $19.95 to $24.95 a month for ten members. Both figures are visible on 1Password's current pricing page, which quotes Business at $8.99 a user a month billed yearly, or $107.88 a user a year, and the Teams Starter Pack at $2.49 a user a month for ten to twenty members.

A 12.5% rise is small in percentage terms and large in a renewal conversation, because password management is one of the few per-seat products where the population is the whole company. At 2,000 seats, $8.99 a month is $215,760 a year before any negotiation, and the July step alone added $24,000 to that line.

Bitwarden sells two rungs and a third product

Bitwarden's pricing page lists Teams at $4.00 a user a month and Enterprise at $6.00, both billed annually, with Secrets Manager at $6.00 on Teams and $12.00 on Enterprise. The same page ties machine and AI-agent access to machine accounts: up to 20 are included on Teams and up to 50 on Enterprise, with $1 a month for each additional account.

That machine-account line is the part a password-manager comparison usually misses. A 2,000-person company running automated deployments can exhaust 20 machine accounts in a week, and the extra accounts are billed monthly whether or not the seat count moves. The password manager is increasingly the front end for service credentials, which is why Bitwarden prices a separate secrets product and why 1Password bundles developer tooling into its Business tier.

The bill at 2,000 seats

The grid compares published list prices for a 2,000-seat estate. Keeper's Enterprise plan is quote-only, so its column carries the route rather than a number; the features listed are the ones Keeper publishes for that tier.

What the seat price leaves out

All three vendors gate administration rather than vault access. 1Password's Business tier adds identity-provider integrations for Okta, Entra ID, OneLogin and Duo, Watchtower alerts and role-based vault sharing; the Teams Starter Pack, at $2.49, has role-based permissions but not the identity integrations, and it is capped at 20 users, so it cannot cover an estate of any size.

Keeper's Enterprise tier is where the company puts SCIM provisioning, Active Directory and LDAP sync, single sign-on, advanced MFA, role-based access control and developer APIs, and its pricing page quotes that tier rather than listing it. Keeper also sells secrets management, session recording and advanced reporting as add-ons, so the seat price is the entry point rather than the total.

The feature that most often decides the renewal is not on the pricing grid at all. It is whether the password manager can share credentials with contractors and guests without buying them a seat. 1Password publishes guest limits of 5 on the Teams Starter Pack and 20 on Business, which is a small number for a company that works with agencies, and it is the sort of limit that appears only after the contract is signed.

Admin overhead is the second bill

The cheaper seat usually carries more administrative work. Bitwarden at $4 ships a separate Directory Connector application for directory synchronisation and SCIM for provisioning from an identity provider; 1Password at $8.99 includes provisioning through the identity providers it lists. Neither is free: one costs licence money, the other costs an administrator who owns the sync job and the exceptions.

Count the objects, not the people. A 2,000-seat estate typically has several hundred shared vaults, a few dozen service accounts and a group of guests, and every one of those is a thing an administrator has to review at least annually. A product that charges $4 a seat but requires a dedicated part-time administrator can cost more than one at $8.99 that does not, which is why the per-seat spreadsheet is only the first page of the case.

Contract mechanics matter as much as features. 1Password sells through its own site and through AWS Marketplace, which lets a buyer draw the spend against a cloud commitment. Bitwarden and Keeper sell direct. For a procurement team trying to retire a cloud commitment, the marketplace route can be worth more than a dollar a seat.

The decision rule

Choose Bitwarden when the estate is cost-sensitive, the identity provider is standards-based, and the team will use the secrets manager rather than a separate product. Choose 1Password when identity-provider provisioning, guest collaboration and a mature admin console matter more than the per-seat price, and budget $8.99 rather than the $7.99 that appears in last year's plan. Choose Keeper when SCIM, privileged session controls and a single platform for passwords and privileged access are the requirement, and expect a quote rather than a list price.

Whatever the shortlist, price the secrets line at the same time as the password line. The 2,000-seat spread between the cheapest and most expensive password plan is $119,760 a year; the secrets-manager spread between Bitwarden's $6 and $12 tiers is another $144,000 at the same headcount if every user needs it. Even inside one vendor the two Bitwarden tiers are $48,000 apart a year at this size, before a single machine account is added. The renewal that compares only the vault price is the one that ends up with two contracts.