Why Passhield
Storing passwords is half the job. The other half is knowing who knows what.
Password managers store passwords safely. On top of that, Passhield answers the questions companies actually ask: who can reach what, who actually saw it, what must change when someone leaves, and whose phone is the code on?
Comparison
How it differs from common password managers
Keeping passwords safe is the job of every good password manager. The difference shows in the daily work of a company in Türkiye.
| Topic | Passhield | Common international password managers |
|---|---|---|
| End-to-end encryption | Yes; the server cannot see passwords | Yes |
| Where the data is | Servers in Türkiye | Mostly the US or the EU |
| Price and invoice | Per person per month, in Turkish lira | Per person, in dollars or euros |
| Interface and support | Written in Turkish, support in Turkish | Mostly English |
| Who actually saw a password | Saw and only used are recorded separately | Access rights and an event log |
| Offboarding | Passwords to change, platform steps and a report on one list | Access is removed; you work out what to change |
| E-seal, e-signature, KEP | Expiry date, who holds the token, collection at offboarding | As a general note or item |
| Services in Türkiye | 46 verified templates for marketplaces, government and accounting | General templates |
| Shared SMS codes | Code inbox; SMS forwarder coming soon | Usually none; the code goes to one phone |
The table summarises the general picture of common international products; it can differ by product and plan.
Our product principles
An honest security statement
The product does not pretend to do what it cannot. We state plainly the limits of "fill only" and the metadata the server sees.
Secure by default
A new vault is shared with nobody; a new member can reach nothing; a new channel is open only to its creator.
Zero setup for admins
Works without a directory, single sign-on or a server; setting up takes little time.
Warnings on bank and government accounts
On accounts that should belong to one person, the product warns and recommends a personal user.
Every number rests on a record
Every figure an admin sees comes from the audit or access record; what is not recorded is not shown.
Turkish first
Texts are written in Turkish, not translated; verified templates for services common in Türkiye are ready.
The difference
Not just permissions: exposure.
A permission table tells you who could reach what. Passhield also records who actually saw a password and who only filled it with the extension. On offboarding day, that is the difference between "change every password" and "change these 12 passwords".
Access mapThe difference
Verification codes are the team's business too.
Most shared accounts ask for two-step verification, and the code goes to one phone. Passhield makes codes part of the vault: TOTP in the item, SMS codes in the code inbox; both with permissions and a record.
Code inboxIn numbers
- plain-text passwords seen by the server
- 0plain-text passwords seen by the server
- permission levels: use, reveal, edit, manage
- 4permission levels: use, reveal, edit, manage
- after copying, the password leaves the clipboard
- 30 safter copying, the password leaves the clipboard
- of everything to change when someone leaves
- 1 listof everything to change when someone leaves
The difference
What has to change at offboarding, on one list.
In most companies, passwords are either never changed at offboarding or it remains unclear which ones should be. Passhield knows what the person leaving could reach and what they actually saw; the passwords to change, the items to hand over and the vault keys to renew come as one list.
Tasks close on their own as passwords change. The process ends with a report showing who did what and when.
OffboardingMade for Türkiye
Written in Turkish, built for business in Türkiye.
The interface and documents were written in Turkish, not translated. Verified sign-in templates are ready for marketplace panels, shipping and payment services, and government and accounting portals. In the cloud service, data is kept in Türkiye.
For personal credentials at banks and government systems, the product warns and recommends a separate user for each person. The KVKK notice is on the site; write to us for the data processing agreement.
Security and KVKKGetting started
Setting up takes little time.
- 1
Create the organisation
Set your master password and print your recovery kit; there is no server to install.
- 2
Move the passwords
Import your spreadsheet or another password manager's export; the file is encrypted in your browser.
- 3
Invite the team
Share vaults with groups; everyone who installs the extension signs in for the first time within minutes.
Who it is for
By company and by team.
Common questions
We already have a password manager; why Passhield?
Keeping passwords safe is the job of every good password manager. On top of that, Passhield records who actually saw a password, lists the passwords to change at offboarding and lets the team share verification codes with permissions. You can move by importing your current manager's export.
Can Passhield staff see our passwords?
No. Passwords, notes and item titles are encrypted on your device; they reach the server encrypted and are never decrypted there. The security page lists what the server sees and does not see.
We have no technical team; can we set it up?
Yes. In the cloud service there is no server to install and no directory to connect. You create the organisation, import your passwords and invite the team by e-mail.
What if an employee forgets their master password?
With the recovery kit you print when opening the organisation, an admin recovers that person's account; access to the company vaults is not lost. Because we cannot see the passwords, the recovery kit stays with you.
Can we install it on our own server?
Today Passhield runs as a cloud service and the data is kept in Türkiye. An install package for your own server is in preparation; if you are interested, write to us.
See the difference in your own team.
Create your organisation and start recording from day one.