SmugMug vs Penpot

The two recent entries both target teams rather than solo shooters. Collaborator Logins ends the shared-password arrangement: each team member gets their own credentials and MFA, with permissions that allow uploading and work in the Organizer, Library, Stats, and Contacts while blocking site design changes, private galleries, deletion, and the owner's payment method — and an Activity Log records who did what. Alongside it, the Library gained nestable multi-assign Labels and direct folder uploads. Everything before those two sits nearly a year back and is commerce work: buying from search results, customer leads, pre-release galleries, coupon banners, and a consolidated checkout.

The older half of this window is about converting gallery visitors into buyers; the newer half is about the business behind the gallery. Permissions, an audit log, and a personal organization layer that collaborators share are the things a one-person account does not need and a studio cannot operate without. The dashboard SmugMug called a first step in 2025 reads as the start of that shift. Publishing is sparse enough that the arc is legible only across quarters.

Expect collaborator permissions to get finer — per-gallery or per-client scoping rather than one fixed role — since the current split is a single fixed bundle and the Activity Log implies someone is meant to review it. What the entries do not show is whether Labels will ever surface to clients rather than staying internal.