Passpack in 2026: still here, still weird, still for teams

The password-manager market hands out eulogies easily, and Passpack has been receiving them for a decade. The product is old enough to predate the iPhone App Store, it survived the era when LastPass ate the consumer market, and it is still operating in 2026 — quietly, oddly, and pointing in a direction almost none of the big names chose. The interesting question is not whether Passpack is popular. It is what it decided to be instead.

What Passpack became

The one-line answer: a business password manager with a security model that was ahead of its time. The homepage in late 2026 leads with team credential sharing, HIPAA-adjacent positioning for healthcare and finance, an MSP partner program, and a zero-knowledge claim. The consumer pitch that defined the product in its early years has been retired to the background — this is now a tool for small organizations that want shared vaults without buying an enterprise platform.

The current plan sheet is small and legible. Teams at $1.66 per user per month, paid annually, for groups up to 20. Business at $4.50 per user per month, adding single sign-on, multi-administrator support, and API integration. Enterprise custom, with a dedicated account manager. Every plan starts with a 28-day trial. Against Bitwarden's business tiers that is competitive rather than cheap, and against 1Password's it is a bargain — the pricing is not the reason to pick Passpack, but it is not a reason to rule it out either.

The weird parts, which are the good parts

Two design decisions separate Passpack from the field, and both are old enough to drink.

The first is the packing key. A Passpack account historically ran on two secrets: the password that authenticates you to the service, and a separate packing key that encrypts your data in the browser before anything is transmitted. The server verifies the first and stores ciphertext from the second. Losing one does not surrender the other. If that architecture sounds familiar, it is because 1Password later shipped a version of the same idea as the Secret Key and marketed it as a breakthrough — Passpack had been running the pattern for years, with less fanfare and more clip art.

The second is the anti-phishing welcome image — a picture you choose at setup that the real service shows you before you type your secret, and a fake one cannot. Banks used to do this. Almost everyone abandoned it. Passpack kept it, and while it will not stop a sophisticated attack, it reliably catches the lazy kind, which is most of them.

The version number completes the picture: version 7 has been the major version since around 2011, through an era in which competitors churned entire product lines. Call it stagnation or call it stability — the honest reading is that Passpack found a design its audience did not need changed, and the company spent the following years building the team-sharing machinery on top of it rather than redesigning the foundation.

What it is like to use

The interface is dated and unapologetic. Where Dashlane feels like a consumer product and KeePassXC feels like a power tool, Passpack feels like a well-kept intranet page from an office you visited once. Everything is where the v7 design put it, the team features are the polished rooms, and the whole thing loads faster than its aesthetic suggests.

The team layer is the actual product. Shared vaults with per-person permissions, one-click credential handoff that never exposes the underlying password, and organization-level controls that a small firm can actually administer without a training course. The sharing model predates the current fashion for "secure links," and it holds up.

On 2FA specifically, Passpack sits in an uncomfortable middle. As a vault holding your logins, it does the zero-knowledge job properly. But a password manager that becomes your team's single shared secret store raises the same concentration question every combined manager does — and Passpack does not offer the built-in TOTP storage that Bitwarden or 1Password use to complete the loop. Teams that keep passwords in Passpack and second factors somewhere else have accidentally landed on the arrangement security people recommend anyway: factors separated, so one compromised vault does not hand over both halves of a login.

Who should still use it

Three groups, honestly served. Small teams — a law firm, a clinic, an agency — who need shared credentials, audit-friendly behavior, and a price that does not require a procurement cycle. MSPs, for whom the partner program is built. And the long tail of individual users who learned the packing-key model years ago, have no complaints, and see no reason to migrate a working vault.

Who should not: anyone who wants passkeys, modern apps, breach monitoring, or the polish of the subscription majors. Passpack is not competing in that race and has not pretended to for years. If your needs fit its shape, the price is fair and the model is sound. If they do not, the free-manager roundup maps the alternatives, and LastPass's history explains why "old and still here" deserves more credit than the market gives it.

Frequently asked questions

Is Passpack still active in 2026?

Yes. The service operates, the site sells current plans — Teams at $1.66 per user per month, Business at $4.50, Enterprise custom — and the company runs an MSP partner program and industry pages for healthcare, legal, and finance. It is a small, focused business rather than a growth story, which describes a working product more than an abandoned one.

What is the Passpack packing key?

A second secret, separate from your login password, that encrypts your data in your browser before upload. The password proves who you are to the server; the packing key is what actually protects the vault contents, and the server never sees it in usable form. The design predates 1Password's Secret Key, which popularized the same two-secret idea.

How much does Passpack cost?

Teams is $1.66 per user per month billed annually, for teams up to 20 people. Business is $4.50 per user per month, adding SSO, multiple administrators, and API access. Enterprise is custom-quoted. All plans come with a 28-day trial. The pricing is competitive with Bitwarden's business tiers and well under 1Password's.

Can I use Passpack for personal passwords?

You can — nothing in the product refuses a single-user account — but it would be buying a van to commute alone. The pricing is per user per month with team features attached, and the interface organizes itself around shared credentials. A personal user gets more from Bitwarden's free tier or KeePassXC at no cost, with the same zero-knowledge encryption and none of the per-seat billing. Passpack earns its price when the second and third users show up.

Should I switch to Passpack?

Only if you are a small team buying shared-credential management, or an existing user with no complaints. For personal use, the modern field — Bitwarden, Proton Pass, KeePassXC — offers more features at equal or lower cost. For teams evaluating vaults, Passpack earns a trial on the strength of its sharing model and its long track record, and the 28-day window is enough to know.

If your team keeps passwords in Passpack, the second factor still wants a home of its own. The guest generator takes a secret and returns codes with nothing stored, and the features page covers the encrypted vault built for exactly that job.