A password manager instead of a shared spreadsheet

A shared password sheet feels like order: everything in one place, a new person looks and signs in. In practice the file is copied to a desktop, forwarded "just in case" and forgotten when the person leaves. The site, mail and ads password in one row means a leak of one mailbox opens the rest.

How a vault differs from a file

• A password is not visible to people who were not given the record. A file cannot do that.
• Each service has its own password. Reuse of "one for everything" is at least visible in a vault.
• Access is taken from a person, rather than by hunting chats for everyone the file was sent to.
• A second factor sits on the vault itself. Otherwise you moved the spreadsheet into a prettier shell.

Adoption breaks on habit: people keep sending a password in private chat because it is faster. Two things are required. Shared records exist before someone needs access at night. And there is a rule: a password in a messenger does not count as handed over until it is in the vault and has been changed after the forward.

Lexora includes this in an access review: where passwords sit now, which accounts are shared and what to move into a vault first. A tool without that list becomes a second spreadsheet.