MSP documentation FAQ

Usually yes, especially on contract shape. Hudu lists $27 per user per month billed annually with no user minimums and no contract required. IT Glue lists $29 per user per month on its Basic plan, but it also has a 5 user minimum, a 36-month term, and a one-time onboarding fee.

Yes. Hudu offers on-premise deployment options for organizations that want more control over hosting. That is one of the clearest differences between Hudu and IT Glue.

Hudu is usually the easier starting point for a small MSP. The pricing is simpler, the commitment is lighter, and the platform is easier to trial without a big procurement process. IT Glue can still fit, but the contract shape is heavier.

The hard part is usually data cleanup, not the transfer button. Both products support import and export workflows, and IT Glue also offers a cross-account migration service. Test a real client set before you commit.

Keeper is usually better for MSPs that prioritize managed company isolation, offline access, account transfer, and a broader security platform. N-able Passportal is usually better for N-able-aligned MSPs that want AD or Entra ID sync, password rotation, and client-level audit reports.

Both can support shared secret workflows, but shared 2FA should be treated as an exception, not the default. Use named admin accounts wherever possible. If shared TOTP is unavoidable, document who can access it, when it must rotate, and how the client accepts the risk.

Keeper has broader documented offline access across web, desktop, iOS, and Android, controlled by administrator policy. Passportal added Offline and Backup Mode for its mobile app in 2025. MSPs should test their own emergency scenarios before relying on either claim.

Write an outage plan before the outage. Define which credentials are available offline, which devices can store them, who can approve break-glass access, how access is logged afterward, and which clients require direct fallback accounts.

Yes. The agreement should define vault ownership, technician access, shared 2FA exceptions, rotation cadence, client access, emergency access, and audit evidence. Otherwise the MSP inherits assumptions the client never paid for.