How do you manage team passwords?

We using in one ops team a central keepass for external web services. This brings a lot of effort when an employee leaves the company. Basically we need to change all passwords. How do you handle this?