Paul Lewis
IT administrator
Manufacturing plant · Grand Rapids, MI
- 120 people
- 2 people in IT
- 6 departments
The challenge
Every month, a few people join or leave, and the list of accounts to grant and revoke existed only in the admin's head.
Solutions · IT teams
Fewer password tickets.
More control for IT.
Grant access through departments, not by hand. Keep admin accounts and their 2FA codes in one place, restore access for employees who forgot their password, and check every permission change in the log.
Recommended plan: Business · $3.29 per user per month, billed yearly.
IT · Company vaultFolders
- Infrastructure32
- Admin accounts15
- Licenses and SaaS41
- Office devices19
- Cloud consoleRoot account · IT only2FA
- Domain registrar[email protected]2FA
- Office routeradmin · 192.168.0.1••••••••
- Domain controllerService account••••••••
IT department · 2 people · folder management
Admin accounts with 2FA codes.
Illustration · sample dataSecurity built in from the ground up.
Explore securityAES-256-GCMData encryption
RSAPublic-key cryptography
Argon2idKey from your master password
Zero-knowledgeYour data stays yours
01 / The challenge
IT guards access
it can't actually see.
Every new hire and every departure means a list of accounts to grant or revoke. Add tickets about forgotten passwords and admin accounts whose passwords "someone in IT" knows.
Granting access by hand.
A new person in a department means a dozen accounts to share. A departure means just as many to revoke, often in a rush.
Admin accounts with no owner.
Passwords to the cloud console, domain registrar, or router float around in notes. The 2FA code is on the phone of someone who changed roles long ago.
Forgotten password tickets.
Every ticket pulls an admin away from real work. And without a record of changes, it's hard to tell who changed access and when.
02 / How Inlockly helps
Access that manages itself
along with your company structure.
Onboarding and offboarding
The department grants access. Leaving revokes it.
Assign folders to departments and set permissions once. New people get access when they join a department, and once removed from the company, their devices delete company data at the next sync.
- New people join only after an admin approves them.
- Nobody can grant others more permissions than they have themselves.
- Permission boundaries are enforced by the server, not just the app.
Departments and permissionsCompany / Departments
AKMKJL
Marketing3 department members
Department-wide folder access
One permission change covers the whole department.
Feature preview · sample data
Protection and recovery
Strong sign-in. Fewer tickets for IT.
Accounts are protected by two-step verification: an authenticator app, a YubiKey, or backup codes. When an employee forgets their master password, an admin can restore their access to company data.
- Biometrics on mobile devices.
- Access recovery never includes the employee's private vault.
- A recovery key on every plan.
Account and vault protectionUnlock your vault
Face ID, Touch ID, or fingerprint.
In the supported mobile app.
Vault unlocked
- Personal email[email protected]
- BankCustomer 4821 •••
- Online storeanna.s
- Home Wi‑FiHome_5G
Second sign-in factor
Authenticator appConfirm with a TOTP code
ActiveEmailA one-time code sent to your email address
YubiKeyAn additional security method
Backup codesIn case you lose your second factor
MFA protects signing in to your account. Biometrics make unlocking your vault on your phone easier.
Feature preview · sample data
Log and history
Every change with an author and a date.
The company log records over 60 event types - from permission changes with an exact diff to creating a link to an item. Item history keeps up to 100 versions.
- 180 days of company data history on the Business plan.
- Filter by person and event category.
- The log never stores password contents - it records facts, not data.
Change historyProject emailCompany vault / Client accounts
180 days of company data history
Feature preview · sample data
03 / A real-world scenario
One admin.
One hundred twenty people.
Before
- Access granted by hand, account by account.
- Admin passwords in notes, 2FA codes on a single phone.
- Several forgotten password tickets a week.
- No record of who changed permissions and when.
With Inlockly
- Six departments with folders - access comes from the department.
- Admin accounts with 2FA codes in an IT-only folder.
- Access to company data restored from the admin dashboard.
- A log of permission changes, filterable by person.
The person and company are fictional. The scenario shows a typical rollout and Inlockly features that are available today.
04 / Rollout
A rollout that won't take a quarter.
Map your structure.
Create departments and folders. Import passwords from browsers, CSV files, or another password manager.
Set permissions.
Assign folders to departments, and grant admin permissions only to those who need them - each of the 13 separately.
Invite your employees.
Send invitations, approve new people, and assign them to departments. The apps run on Windows, macOS, Linux, iOS, Android, and in browsers.
Want to talk through your rollout? Talk to us →
Business plans
A plan that fits your team.
For this scenario, we recommend the Business plan. Team covers 5 to 10 people; Business has no upper limit and adds departments.
Team
Organized access for small teams.
5–10 paid seats
$2.092.49/ user / mo
$24.90 billed yearly per user · 5 to 10 seatsBilled monthly · 5 to 10 seats
- A private Personal plan for members
- Unlimited shared folders
- Team management and activity logs
- 90 days of company data history
Recommended
Business
More control as your company grows.
No seat limit
$3.293.99/ user / mo
$39.90 billed yearly per user · unlimited seatsBilled monthly · unlimited seats
- Everything in Team
- Departments and department permissions
- A Family plan for every member
- 180 days of company data history
05 / Good to know
Have questions?
Start here.
Does Inlockly support SSO or provisioning (SCIM)?
No. You invite users from the admin dashboard and organize access with departments. Accounts are protected by two-step verification.
Does Inlockly have a CLI or an API for admins?
Not at the moment. Inlockly works through desktop and mobile apps and browser extensions.
What happens to company data on a former employee's device?
Once you remove someone from the company, their devices delete company data at the next sync. Their private vault stays with them. It's worth changing the passwords to accounts they used - the log shows which folders they had access to.
Can I share documentation with our security team?
Yes. The Security Whitepaper (online and as a PDF) describes the architecture step by step: AES-256-GCM encryption, Argon2id, the zero-knowledge model, what the server can see, and the threat model.
Can we run Inlockly on our own servers?
Our Enterprise offering includes that option. We agree on the scope and terms individually.