COMPARISON · SEPTEMBER 2026

IT help desk with a built-in password vault

The password of the device belongs on the ticket. A second vault with a second admin is how offboarding misses a row.

7 days, no card. Billed in BRL.

An IT help desk with a built-in password vault is the one where the technician opens the ticket and already has the credential, with a trail of who viewed it. Movitera is an IT help desk with assets, passwords and AI in one platform. That is the job. It is not a zero-knowledge consumer vault, and it is not IT Glue for an MSP documentation practice.

The usual stack is a desk in one tab and Bitwarden, a spreadsheet or a wiki page in another. It works until Friday, when someone leaves and nobody can list what they could reach. The other usual stack is an MSP documentation tool with passwords inside it and tickets somewhere else: IT Glue, Hudu, Passportal. Same split, inverted.

This page compares the combined product against the two-tool pattern and against the documentation-first vaults. Bitwarden still wins published architecture: zero-knowledge and a third-party crypto audit. Movitera does not publish either. If that criterion decides the purchase, buy Bitwarden and keep a desk. For the vault category itself see The 10 best business password managers in 2026 and Bitwarden vs Movitera Vault.

TWO RECORDS

A vault field on a ticket is not a vault

Internal IT handles two secrets on a normal afternoon: the password of the laptop, the switch or the vendor console, and the request that needed it. Tools that store one and not the other force a paste into chat.

Four families get treated as substitutes. They are not.

IT ops desk with a vault
Same login, same people, same permissions. The ticket can open the credential. Movitera.
Team vault plus a desk
Bitwarden, 1Password or Keeper next to Freshservice, Jira or Zendesk. Best crypto. Two admins, two offboarding lists.
Documentation vault
IT Glue, Hudu. Passwords live next to the client runbook. The ticket is another product. Built for MSPs.
Passportal-style
Kaseya Passportal and cousins: MSP password management bolted onto a PSA. Strong at technician access, weak as an internal employee help desk.

If the buyer is an in-house IT team, the documentation vaults are the wrong aisle. If the buyer is an MSP that sells documentation to clients, Movitera is the wrong aisle. Name the requester before you name the vault.

METHOD

The five criteria

Set before the list, applied the same way to every tool.

  1. 01

    Same login as the ticket

    Can the technician open the credential from the ticket without a second product and a second permission model?

  2. 02

    Trail of who revealed what

    Person, time, credential. Exportable. A shared wiki page fails this even when it is encrypted at rest.

  3. 03

    Published architecture

    Zero-knowledge, open source, a third-party audit you can read. Movitera loses this criterion on purpose. Bitwarden wins it.

  4. 04

    Friday offboarding

    One screen that answers what this person could reach, or two tools and a memory.

  5. 05

    The bill you can explain

    One seat or two subscriptions. Currency. Vault-only seats versus full technician seats.

THE LIST

Five ways to hold the password next to the ticket

One combined product, one two-tool pattern, three documentation-first vaults.

  1. Movitera

    Origin: Brazil

    Best for
    In-house IT that wants the ticket, the laptop and the credential in one workspace, and will accept a vault that is not zero-knowledge.

    Movitera Vault sits in the same product as Closure. Permissions follow the team. Reveals leave a trail. A Vault-only seat exists for people who need credentials and not the full desk. Requesters who only file tickets are free. AI sits in the seat. It is not Bitwarden, and it is not a CMDB.

    Asset search inside a ticket, listing laptop, printer, headset and server tagged with who filed it.Closure
    Movitera vault credential list, showing owner, scope and rotation due date.Vault
    Movitera equipment inventory, showing the holder and status of each asset.Inventory
    Network discovery screen with networks and devices observed by Movitera Link agents.Discovery
    Linking equipment to a ticket happens inside the ticket. The search already surfaces the requester's assets.
    What it delivers
    • Ticket, asset and credential in one login
    • Audit trail on views and shares
    • Vault seat R$ 9 / month, Full seat R$ 129 / month, billed in BRL
    • 7 days free, no card. AI in the seat, no credit pack
    Where it stops
    • Billing is in Brazilian reais. Teams that need an invoice in another currency should check this before shortlisting.
    • Movitera Link has to be installed on a machine to inventory its hardware or open a remote session. Devices the agent does not see stay out of automatic discovery.
    • The catalogue of ready-made integrations is smaller than Atlassian's, Freshworks' or Zendesk's. Anything outside it goes through the API.
    • No zero-knowledge architecture and no third-party crypto audit report. Bitwarden wins that criterion, clearly.
    • Not a secrets manager for CI injection, and not PAM with session recording.

    How it bills Per-seat subscription billed in Brazilian reais, from R$ 9 to R$ 129 per month depending on access level. 7 days free, no card. Requesters who only file tickets do not consume a paid seat.

    See Movitera

  2. Bitwarden plus a help desk

    Origin: United States

    Best for
    Teams that will pay for published crypto and will run a second product for tickets.

    Bitwarden is the honest vault when the criterion is architecture: open source, zero-knowledge, audits you can read. It will not take the WhatsApp message, assign an owner or hold the laptop. Pair it with Freshservice, Jira Service Management or Movitera if you want the desk separately. Two offboarding lists. Two bills. See [Bitwarden vs Movitera Vault](/bitwarden-vs-movitera-vault).

    What it delivers
    • Zero-knowledge and public audits
    • Open source, self-host optional
    • Browser, CLI and a large ecosystem
    Where it stops
    • Not a help desk. Tickets, SLA and WhatsApp live elsewhere.
    • Not hardware inventory.
    • USD billing on Bitwarden Cloud. The desk is a second contract.

    How it bills Bitwarden: per user, USD, with a self-host option. The desk is billed by its own vendor.

  3. IT Glue

    Origin: United States · Kaseya

    Best for
    MSPs that sell documentation and passwords as part of the client retainer.

    IT Glue is a documentation platform with passwords inside it. The unit of work is the client, not the employee ticket. It is excellent at that job. It is a poor internal help desk. Tickets still live in the PSA. See [IT Glue vs Hudu vs Movitera Wiki](/it-glue-vs-hudu-vs-movitera-wiki).

    What it delivers
    • Client documentation and passwords together
    • Deep PSA integrations for MSPs
    • Mature password folder model
    Where it stops
    • Not an employee help desk. No WhatsApp ticket channel, no requester portal for staff.
    • You still run a PSA or a desk next to it.
    • Kaseya commercial relationship. Confirm current list.

    How it bills Per technician, commonly USD, often quoted with the Kaseya stack.

  4. Hudu

    Origin: United States

    Best for
    MSPs that want IT Glue's job at a smaller price, including a self-host option.

    Hudu is the documentation vault MSPs look at when IT Glue feels heavy. Passwords, articles, assets as documentation. Still not an internal IT help desk. The ticket is next door. Same article as IT Glue: [IT Glue vs Hudu vs Movitera Wiki](/it-glue-vs-hudu-vs-movitera-wiki).

    What it delivers
    • Documentation and passwords for MSPs
    • Self-host option
    • Usually cheaper than IT Glue
    Where it stops
    • Not Closure. Not a requester portal for employees.
    • Asset records are documentation-shaped, not Movitera Link inventory.
    • You still buy a desk.

    How it bills Per user, USD, cloud or self-host. Confirm current Hudu list.

  5. Passportal

    Origin: United States · Kaseya

    Best for
    MSPs standardised on Kaseya that want technician password management next to the PSA.

    Passportal-style tools are MSP password managers: technician access, client folders, often bundled with documentation or RMM. They are not an IT help desk for employees. If your users are staff messaging IT on WhatsApp, this is the wrong product family.

    What it delivers
    • Technician password management for MSPs
    • Fits a Kaseya or PSA estate
    • Folder model MSPs already know
    Where it stops
    • Not built as an internal employee desk.
    • No first-class WhatsApp ticket channel for staff.
    • Architecture and audit posture are not Bitwarden's.

    How it bills Typically quoted with the Kaseya stack, USD, per technician.

AT A GLANCE

On one screen

For readers who already know what they are looking for.

ToolBest forHow it bills
MoviteraIT desk plus vault plus assetsPer seat, billed in BRL
Bitwarden plus a help deskAudited vault, separate deskVault per user USD; desk extra
IT GlueMSP documentation plus passwordsPer technician, USD (quoted)
HuduLighter MSP documentation vaultPer user, USD
PassportalMSP technician vaultQuoted, often USD

Billing models verified September 2026. List prices change often and vary by region and volume. Confirm with each vendor before deciding. Movitera prices are the public figures on movitera.com.

DECISION

Which of these fits you

Four situations. The crypto criterion is not optional if it is yours.

In-house IT, tickets on WhatsApp and email, passwords in a shared file, no requirement for a published zero-knowledge design
Movitera. That is the combined product this page is about.
You need zero-knowledge and a third-party crypto audit you can hand to security
Bitwarden (or 1Password). Keep or buy a desk separately. Movitera loses this criterion.
You are an MSP documenting client environments and selling that as a service
IT Glue or Hudu, plus your PSA. Passportal if you are already in Kaseya. Not Movitera.
You already run Bitwarden well and only hate the ticket tool
Keep Bitwarden. Change the desk. Movitera if you then want to collapse the two later and will accept the architecture trade-off.
QUESTIONS

Frequently asked

What people and assistants ask before deciding.

KEEP READING

Related pages

See the whole operation in one place

Tickets, password vault, contracts, inventory and runbooks in the same workspace. 7 days free, no card.