Skip to content
ENExplore Calculators

Password Manager Coverage Calculator

Measure real password manager coverage across licences, active users and the share of credentials actually vaulted.

About Password Manager Coverage Calculator

Three different numbers get called adoption. Deployment is how many people have a licence, activation is how many use it, and coverage is the share of credentials it holds — the only one that maps to risk. A tool at 79 % deployment can still leave more than half of all credentials outside the vault. Unvaulted credentials are the ones that get reused, written down or shared in chat, so coverage tells you how much of the reuse problem the rollout has genuinely retired.

Formula

Password Manager Coverage

credential coverage = vaulted credentials ÷ (employees × credentials per user); activation = active users ÷ licences deployed.

credentials per user
Distinct work logins a typical user holds — commonly 30 to 60
vaulted
Credentials actually stored in the manager

Worked example

With the default values below, Password Manager Coverage Calculator returns Credential Coverage of 44.4%. Change any input above and every figure here is recalculated in your browser.

Inputs used

Employees in scopeaccepts 1–1,000,000 people
2,400 people
Licences deployedaccepts 0–1,000,000 licences
1,900 licences
Users active in the last 30 daysaccepts 0–1,000,000 users
1,500 users
Work credentials per useraccepts 1–1,000 credentials
45 credentials
Credentials stored in the vaultaccepts 0–100,000,000 credentials
48,000 credentials

Results

Credential Coverage
44.4%
Licence Deployment
79.2%
Activation of Deployed Licences
78.9%
Credentials Still Unmanaged
60,000 credentials
Coverage Grade
D — Weak

Step by step

  1. 1Values used
  2. 2Password Manager Coverage
  3. 3Credential Coverage= 44.4
  4. 4Licence Deployment= 79.2
  5. 5Activation of Deployed Licences= 78.9
  6. 6Credentials Still Unmanaged= 60,000 credentials
  7. 7Coverage Grade= D — Weak

Assumptions and limits

  • The result is derived only from the 5 inputs listed above. Anything not among them is not part of the calculation.
  • In particular, this calculator does not take inflation, tax, fees or charges or compounding frequency into account.
  • Figures are rounded for display to 1 decimal place, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.

How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.

Frequently Asked Questions

How is Password Manager Coverage calculated?

credential coverage = vaulted credentials ÷ (employees × credentials per user); activation = active users ÷ licences deployed. Three different numbers get called adoption. Deployment is how many people have a licence, activation is how many use it, and coverage is the share of credentials it holds — the only one that maps to risk. A tool at 79 % deployment can still leave more than half of all credentials outside the vault.

Why does Password Manager Coverage matter?

Unvaulted credentials are the ones that get reused, written down or shared in chat, so coverage tells you how much of the reuse problem the rollout has genuinely retired.

What values do I need to enter?

This calculator takes 5 inputs: Employees in scope, Licences deployed, Users active in the last 30 days, Work credentials per user, Credentials stored in the vault. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.

Why is coverage always lower than deployment?

Because a licensed user typically vaults the logins they use daily and leaves the long tail — legacy systems, shared service accounts, vendor portals — wherever they already were. Closing that tail needs a discovery pass, not more licences.

What coverage should we aim for?

Above 90 % of enumerated credentials, with shared and privileged accounts at 100 % and held in a privileged-access vault rather than a personal one. Below about 60 % the reuse rate barely moves.

Related Calculators

Password Manager Coverage Calculator | Calcrivo