Security SaaS · Small teams
LitePassword
A password manager that doesn’t overreach.
Zero-knowledge encrypted vaults for teams of one to twelve. The master password derives the key on the device; the server only ever holds ciphertext. Flat pricing, three clear roles, no enterprise surface area.
- Marketing site
- SEO · AEO · GEO
- App development
- Backend & hosting
-
Client-side
Encryption
-
Three
Roles
-
1–12
Team size
-
4
Services delivered
01 / The problem
What made this hard
Password managers are the hardest category to build trust in and the easiest to overbuild. The engineering constraint was real zero-knowledge — a server that is useless to an attacker — and the product constraint was resisting every enterprise feature that would make it feel like the tools this audience already rejected.
02 / What we did
Four things,
on every project.
-
Marketing site that explains the cryptography
The security model is stated plainly on the page — key derivation on the device, ciphertext on the server, recovery keys — because in this category vagueness reads as a red flag. The restraint in scope is positioned as the feature it is.
-
SEO, AEO and GEO
Targeted at small-team and alternative-to queries rather than the head term, where incumbents are unassailable. Comparison and security-model pages are written to be quoted accurately by answer engines, which matters more here than in any other category.
-
Product build
Private and shared vaults, three roles (admin, manager, view-only), a password generator, type-aware secrets for logins, cards and notes, reveal-on-click masking, email team invitations and multiple workspaces under one login.
-
Backend and hosting
Client-side AES-256 with PBKDF2 key derivation, recovery key flow, a ciphertext-only storage model, invitation and membership handling, flat-rate billing, and the hosting and monitoring stack.
03 / Shipped
In the box
- Marketing site with security model
- Private and shared vaults
- Three-role access control
- Client-side AES-256 encryption
- Recovery keys
- Password generator
- Type-aware secrets
- Email team invitations
- Multiple workspaces per login
Stack & infrastructure
- Static marketing site
- Web application
- WebCrypto (AES-256 + PBKDF2)
- Ciphertext-only storage
- Subscription billing
- Managed hosting + CDN
Named at the level that matters to a founder. The client owns every account, repository and domain from day one.