SpiderOak Groups uses a master key for the user account, just like our consumer product. However this is randomly generated and never exposed to the user. This is used in conjunction with our third-party hosted key escrow service to secure keys for each user while allowing password management by you or your IT administrator.