Most password manager projects fail because people keep saving passwords wherever they already do. A good rollout makes the secure option the easiest option.

Three rules

• - Standardise on one tool, one process, one support route.
• - Start with leadership so the behaviour is modelled early.
• - Make it practical with browser integration, mobile setup, and shared vaults for team logins.

What to include

• - Vault structure for departments and shared services.
• - Leaver process that removes access immediately.
• - Recovery process that does not rely on one person.