1Password — for client handovers

Shared vaults per engagement with audit trails. Replaces emailing credentials, ever. Required on every engagement I run.

Why this matters

Emailing credentials is the single most common vector for client-engagement compromise. 1Password Business shared vaults give every credential an audit trail, role-based access, and immediate revocation when the engagement ends.

How I use it

One shared vault per engagement, named $client-$year. Hosting credentials, plugin licenses, admin accounts. Audit log reviewed at handover. Access revoked the day after final invoice payment.

Cost

$7.99/user/month for Business tier. Worth it for any engagement north of $5,000.