The problem
Virtual assistants hold the keys to their clients' businesses: email, accounts software, social media, supplier portals. Logins end up in spreadsheets and chat messages. Each month brings about 15 requests to send or update a password, and when an associate leaves, every login they saw needs changing, about 4 hours twice a year.
What the AI does
Bitwarden is a password manager. Its Teams plan lists secure credential sharing and event logs. You create a collection for each client, add their logins to it, and give each associate access only to the clients they work for. When an associate leaves, you remove their access in one place and change the passwords that matter, with the event log showing what they opened.
A worked example
A virtual assistant business in Bath has the owner and 2 associates supporting 12 small business clients. They move all client logins out of a shared spreadsheet into Bitwarden Teams, one collection per client.
Before
About 15 password requests a month at 5 minutes each (75 minutes), plus about 40 minutes a month averaged from offboarding
After
Logins found in the vault in seconds; offboarding is removing access and changing key passwords: about 20 minutes a month
What it's worth
About $64£48€57A$92C$90 a month in time saved: 95 minutes (115 down to 20) at an assumed $40£30€36A$58C$56 an hour, plus a much smaller risk of a client's accounts being exposed. Bitwarden Teams is $4 (about $4£3€4A$6C$6) a user a month billed annually, so 3 users is about $12£9€11A$17C$17.
How to set it up
- Start Bitwarden's free trial on the Teams plan and turn on two-step login for every user.
- Create one collection per client and move their logins in, then delete the spreadsheet and the chat messages.
- Give each associate access only to the collections for clients they work with.
- Ask clients to share new logins into the vault, or send them by a one-time secure method, never by email.
- When anyone leaves, remove their access the same day and change the passwords for the client accounts they used.
What goes wrong
- A password manager with a weak master password is a single point of failure. Require long passphrases and two-step login.
- Where clients' systems support it, ask for your own user account instead of sharing theirs; then access can be removed without changing their password.
- Teams is billed annually per user; adding associates mid-year adds cost.
- Your contract should say how client logins are held and deleted when you stop working together.