Password Manager Policy Template

Purpose

This policy mandates the use of a company-approved password manager for all employees, contractors, and third parties who access company systems.

Requirements

• Tool selection: Use the company-approved password manager (1Password, Bitwarden, or similar).
• Master password: Minimum 16 characters, never shared, not stored digitally.
• MFA on vault: Multi-factor authentication required on the password manager vault itself.
• No other storage: Passwords must not be stored in browsers, spreadsheets, sticky notes, or email.
• Sharing: Use the password manager's secure sharing feature for shared accounts.

Implementation

All new employees receive password manager setup during onboarding. Existing employees must migrate to the approved tool within 30 days of this policy's effective date.