# 1Password vs Bitwarden vs Keeper vs Dashlane for Business

Source : https://cybercaribou.com/en/comparisons/business-password-managers · Cyber Caribou

> 1Password, Bitwarden, Keeper or Dashlane? Canadian data hosting, SSO, SCIM, pricing and compliance compared side by side for Canadian small businesses.

At plenty of small businesses, passwords still live in a shared spreadsheet, a notebook at the front desk, or each employee's personal browser. When an office manager leaves, nobody is quite sure which accounts she could still get into.

A business password manager fixes that: an encrypted vault for each employee, shared folders for each team, and an admin console to remove access in a few clicks. All four tools compared here handle those basics well. Where they differ is on the questions that matter to Canadian organizations: where your data is hosted, which plan actually unlocks single sign-on (SSO), and what the bill looks like once you add those features.

We compared the business plans aimed at organizations of 10 to 100 employees on Canadian hosting, language, SSO, automated provisioning (SCIM), integration with Microsoft 365 and Google Workspace, security attestations and price. Every value was checked against the vendors' official pages in October 2026. Prices change often, so confirm them before you buy. This comparison is not sponsored.

## Canadian hosting: only two of the four

This is often the first filter. **1Password** and **Keeper** both offer a Canadian region. With 1Password, choosing 1Password.ca sets both your billing currency (Canadian dollars) and where your data is hosted, and your data is never moved to another region automatically. Keeper runs a Canadian data centre among its six regions, and you pick it when you create the account.

**Bitwarden** hosts its cloud customers in the United States or the European Union. Its Enterprise plan does allow self-hosting, so an IT team can run the server wherever it likes. **Dashlane** stores organizational data in the EU by default; US residency is available, but only through the sales team and only before your team is created.

Keep in mind that all four encrypt vaults on the user's device. Hosting outside Canada isn't a deal-breaker on its own, but it needs to be assessed and documented, especially in your privacy impact assessment or when a client contract sets residency requirements.

## SSO and provisioning: read the plan name carefully

SSO lets staff unlock their vault with their Microsoft 365 or Google Workspace account. SCIM creates and disables accounts automatically from your directory. Together, they close the classic gap during [employee offboarding](https://cybercaribou.com/en/blog/employee-offboarding-access-checklist).

The catch is that these features aren't always in the cheapest plan. At Keeper, SSO, SCIM and AD/LDAP sync are Enterprise features (US$6, sold through a quote); the US$4 Business plan doesn't include them. At Bitwarden, SCIM and directory sync come with Teams, but SSO and security policies require Enterprise. At 1Password, you need Business; the Teams Starter Pack doesn't include identity provider integrations. Dashlane includes SSO and SCIM in Omnix Password Management, but its SCIM doesn't support Google Workspace.

## Where each tool stands out

**1Password** keeps things simple: published prices in Canadian dollars, apps for macOS, Windows, Linux, iOS and Android, a free Families membership for every Business member, and a broad set of ISO certifications. The company is headquartered in Toronto.

**Bitwarden** stands out for its open-source code, annual source code audits, low published prices and the option to self-host with Enterprise. The trade-off is that self-hosting assumes someone on your team can maintain and update a server.

**Keeper** goes beyond the vault, with privileged access management, secrets management and a self-managed edition built for isolated networks such as a factory floor. Its advanced reporting and compliance reports, however, are sold separately.

**Dashlane** adds a detection layer: its Credential Protection package flags at-risk credentials and phishing attempts in the browser, and its events can be sent to Microsoft Sentinel or Splunk.

## Comparing prices on equal footing

Entry prices are misleading. For a 25-person business that wants SSO with Microsoft Entra ID, the real comparison is 1Password Business (CA$10.99), Bitwarden Enterprise (US$6), Dashlane Omnix Password Management (US$8) and Keeper Enterprise (US$6, sold through a quote). Factor in the exchange rate on US-dollar plans, sales taxes and, at Keeper, any add-ons.

## How to choose

1. **Start with your hosting requirements.** If a contract or client requires data in Canada, your shortlist is 1Password or Keeper (or a self-hosted Bitwarden).
2. **Look at your directory.** If Microsoft Entra ID or Google Workspace is well maintained, aim for a plan with SSO and SCIM; if not, a simpler plan is fine to start.
3. **Protect the vault itself** with [phishing-resistant multi-factor authentication](https://cybercaribou.com/en/blog/multi-factor-authentication-choosing-mfa), especially for administrators.
4. **Run a two-week pilot** with a small group, including your least tech-savvy colleague.
5. **Plan the rollout**: migrating old spreadsheets, shared folders, emergency access accounts. Our guide to [deploying a business password manager](https://cybercaribou.com/en/blog/deploy-business-password-manager) walks through each step.

Our team can help you configure the tool you choose and close the access gaps you've been living with as part of a [remediation and hardening](https://cybercaribou.com/en/services/remediation-hardening) engagement.

## FAQ

**Does Quebec's Law 25 prohibit a password manager hosted in the United States?**
No. Law 25 doesn't ban hosting outside Quebec, but it requires a privacy impact assessment before personal information is communicated outside the province (section 17). End-to-end encryption of the vault is a point worth documenting in that assessment. Confirm your analysis with legal counsel.

**Can we switch hosting regions after we've signed up?**
Usually not. 1Password states that your data stays in the region you choose and is never moved automatically. With Keeper, picking the wrong region at sign-up means starting the trial over. With Dashlane, US residency must be requested before the team is created. Settle the region question before you invite staff.

**Does a password manager replace multi-factor authentication?**
No, they work together. The password manager creates and remembers unique passwords; MFA protects the sign-in to the vault and to your services. Require a strong method to unlock the vault itself, ideally a security key or passkey for administrators.

**Does a small business really need SSO?**
Not always. Under 20 people, a well-configured plan without SSO is often enough. SSO pays off once you have a well-managed Microsoft Entra ID or Google Workspace directory: one identity to disable when someone leaves, and automated provisioning prevents forgotten accounts.

## Sources

- [1Password: Business pricing and plans](https://1password.com/pricing/business)
- [1Password: Choose your region](https://support.1password.com/regions/)
- [1Password: Security assessments and certifications](https://support.1password.com/security-assessments/)
- [1Password: Automated provisioning](https://support.1password.com/provisioning/)
- [1Password: Languages available on 1Password.com](https://support.1password.com/change-profile-1password-com/)
- [1Password: Free Families membership with 1Password Business](https://support.1password.com/link-family/)
- [Bitwarden: Business pricing](https://bitwarden.com/pricing/business/)
- [Bitwarden: Server regions](https://bitwarden.com/help/server-geographies/)
- [Bitwarden: About SCIM](https://bitwarden.com/help/about-scim/)
- [Bitwarden: About SSO](https://bitwarden.com/help/about-sso/)
- [Bitwarden: Directory Connector](https://bitwarden.com/help/directory-sync/)
- [Bitwarden: Self-host an organization](https://bitwarden.com/help/self-host-an-organization/)
- [Bitwarden: Compliance](https://bitwarden.com/compliance/)
- [Bitwarden: Supported languages](https://bitwarden.com/help/localization/)
- [Keeper: Business and Enterprise plans](https://www.keepersecurity.com/pricing/business-and-enterprise.html)
- [Keeper: Security, certifications and AWS regions](https://www.keepersecurity.com/security.html)
- [Keeper: Start your trial (data centre selection)](https://docs.keeper.io/enterprise-guide/start-free-trial)
- [Keeper: Microsoft Entra ID provisioning](https://docs.keeper.io/enterprise-guide/user-and-team-provisioning/azure-ad-provisioning-scim)
- [Keeper: Google Workspace provisioning](https://docs.keeper.io/enterprise-guide/user-and-team-provisioning/google-g-suite-scim)
- [Keeper: Self-Managed Keeper](https://docs.keeper.io/keeperpam/self-managed-keeper/self-managed-keeper-overview)
- [Keeper: Web Vault and language settings](https://docs.keeper.io/user-guides/web-vault)
- [Dashlane: Plans and pricing](https://www.dashlane.com/pricing)
- [Dashlane: Integrations (SSO, SCIM, SIEM)](https://www.dashlane.com/integrations)
- [Dashlane: US data residency](https://support.dashlane.com/hc/articles/37497083212434)
- [Dashlane: Supported languages](https://support.dashlane.com/hc/en-us/articles/4424359405586-Supported-languages)
- [Dashlane: Compliance and certifications](https://support.dashlane.com/hc/en-us/articles/32877605633042-9-Compliance-certifications)
- [Act respecting the protection of personal information in the private sector (CQLR c. P-39.1)](https://www.legisquebec.gouv.qc.ca/en/document/cs/P-39.1)