Which logins belong in a shared vault?

Put company-owned logins with the people who need them. Give billing and design separate vaults if they have different audiences. Keep personal logins in your own vault. If the service supports individual accounts, invite the teammate there so you can remove their access later.

Check permission to view, edit or manage the vault before inviting anyone. A person with viewing access can still retain a copy, so removing their vault access alone does not make an old password unusable.

What should a small team check before paying or moving?

The US annual Teams Starter Pack lists US$24.95 a month, billed yearly, with ten member places included. Business is billed per member and has additional vault controls. Check the total for your actual team size and the permissions you need.

1Password 8 desktop can export unencrypted 1PUX or CSV. CSV includes a narrower set of fields. Check the target importer and any export restrictions before moving. Keep a permitted export protected and delete the temporary copy after confirming the move.

How would you take a departing contractor off a shared login?

Use a paper list of two fictional vaults, Design and Billing. Write job names only.

Before departure
Give the contractor access to Design only. Check that Billing never appears on their access list.
After departure
Remove Design access on paper. If they could have copied a shared password, assign the owner of that service to replace it and update the vault.
Check the result
Write what the teammate who remains should see. A real sign-in and password change remain untested.