For years, I managed a small design team. We shared passwords the old way: Slack messages, sticky notes on monitors, and a shared Google Doc that somehow always ended up out of date. It worked, barely. Until the day I got locked out of our client’s project management tool because someone had changed the password for the third time that month. I spent four hours resetting credentials and apologizing to the client. That was the moment I realized our system was broken.
The worst part wasn’t the lost time. It was the invisible cost. People in my team kept accidentally logging out of accounts they needed daily. They’d ping me for the new password, I’d check the doc, and it was always wrong. I started keeping a private notebook with the real passwords. That notebook became a bottleneck. Every request slowed down real work. I knew we needed a proper password manager, but most options felt too heavy for a team of five. They wanted yearly contracts and per-seat pricing that didn’t scale. Then a friend showed me a simpler approach using keyli, and it changed how I thought about sharing credentials.
That tool is just a passkey manager. But what surprised me was how it shifted the conversation in my team. We stopped treating passwords as something to guard from each other. Instead, we started treating access as a shared resource. Everyone gets their own passkey. Nobody sees the stored password unless they need it. It removed the friction of sharing while keeping control where it belongs.
How we actually set it up
We started small. I picked three shared accounts that caused the most daily frustration: our social media scheduler, the client’s project board, and an analytics dashboard. I set up a vault for each. Then I gave each team member a passkey for the vaults they needed. It took maybe twenty minutes total.
The first week, people were skeptical. One designer asked if this was just another login system to remember. I explained that the passkey lives on their device, so they don’t need to type anything. They just click and they’re in. That clicked. Within two weeks, nobody asked me for a password anymore. The Slack channel about forgotten credentials went silent. The sticky notes on the monitor started to peel off naturally.
I still keep a backup of critical passwords in a physical safe. That’s just common sense. But the daily friction? Gone. Here’s what changed for us:
- Each person uses their own device’s biometrics, so no shared passwords floating around
- Revoking access when someone leaves the team is one click, not a scramble to change every account
- Audit logs show who accessed what, so I can spot a retired employee still using an account
- We stopped losing work because someone was locked out during a deadline
- New hires are productive on day two instead of week two
The unexpected side effect
What I didn’t expect was how this changed our team culture around security. Before, people felt guilty for forgetting passwords or for sharing them too freely. Now security feels invisible. It’s just there, working. No guilt required.
Last month, our client’s IT department asked how we managed shared access. I showed them the setup. They were surprised we didn’t use a traditional password manager. But honestly, for a team our size, the passkey approach felt more natural. It matches how people actually work. We don’t think about keys, we just unlock doors.
Is it perfect? No. I still have a paper list of master passwords in a fireproof envelope. But that list hasn’t been touched in six months. The daily password chaos became a quiet background thing. I wish I had made the change sooner. If your team fights over shared credentials the way mine did, maybe consider a different angle. It doesn’t have to be complicated.