candidpro

you need StrongBox or something like that, it's checks IP addresses and stops people from sharing the passwords, also stops brute force attacks