Password manager and secure access platform for individuals, families, and businesses
1Password is a password manager for individuals, families, and businesses that stores logins, passkeys, and other credentials in encrypted vaults.
AI Panel Score
6 AI reviews
Reviewed
AI Editor ApprovedApproved and published by our AI Editor-in-Chief after full panel analysis.1Password is a password manager that stores logins, passkeys, payment cards, and secure notes in end-to-end encrypted vaults and autofills them across browsers and devices. It serves individuals, families, and organizations from small teams to enterprises, and has grown into broader access management covering application sign-ins, secrets, and AI agents. There is no permanently free plan; every tier includes a 14-day free trial, with Individual plans starting at $3.99 per month billed annually, Families at $5.99 for up to five members, and Business at $8.99 per user. Security rests on Two-Key Derivation, which pairs your account password with a locally generated Secret Key, alongside AES-256 encryption and Watchtower alerts for weak or breached credentials. Business plans add SSO unlock, automated user provisioning, and SIEM event streaming. It is a strong fit for households and companies that want audited, cross-platform credential security. Alternatives include Bitwarden, Dashlane, Keeper, and LastPass.
Users install 1Password's apps on macOS, Windows, Linux, iOS, Android, and watchOS, add a browser extension for Chrome, Safari, Edge, Firefox, or Brave, and unlock their vault with an account password, biometrics, or a passkey. From there the day-to-day workflow is largely automatic: the extension offers to save credentials as you sign in to sites, autofills logins, addresses, and payment details on return visits, and generates strong unique passwords for new accounts. New trusted devices are added by scanning a QR code, and items can be shared securely with anyone, including people who don't use 1Password, with temporary sharing links, expiration dates, and share history.
The security model is built on Two-Key Derivation: vault data is encrypted with AES 256-bit keys derived from both the account password and a Secret Key generated on the user's device, so neither a phished password nor a compromised server is enough to read anything. Data in transit is protected with the Secure Remote Password protocol, and the service holds SOC 2 Type II certification validated by independent third-party audits. Watchtower continuously checks saved items for breached, weak, expiring, or reused passwords and shows where two-factor authentication or passkeys are available. Beyond personal password storage, 1Password has expanded into what it calls extended access management, covering application access, machine secrets, and AI agents across an organization.
Individual plans start at $3.99 per month billed annually (a limited-time $2.99 first-year promotion runs for new customers), Families covers up to five members at $5.99 per month, the Teams Starter Pack includes ten members for $24.95 per month, and Business costs $8.99 per user per month with Enterprise pricing quoted by sales. There is no permanently free tier, but every plan includes a 14-day free trial and Business users each receive a free Families plan for personal use. It suits everyone from a single user securing personal logins to enterprises standardizing credential policies, and competes with Bitwarden, Dashlane, Keeper, and LastPass.
For administrators and developers, Business plans integrate with identity providers including Okta, Microsoft Entra ID, OneLogin, and Duo, support SSO unlock and automated provisioning through Azure AD, Google Workspace, Okta, OneLogin, Rippling, and JumpCloud, and stream events to SIEM tools such as Splunk, Elastic, Sumo Logic, and Panther. Developer tooling covers a CLI, SDKs, SSH key signing, Git commit signing, and IDE and CI/CD integrations, documented at developer.1password.com. A dedicated MSP edition adds a client-management console and consumption-based billing for managed service providers.
Shares passwords with family members or coworkers by granting them access to individual encrypted vaults.
Automatically fills saved passwords to sign in to websites and apps, and fills payment card and address details in online forms.
Command-line tool that gives developers access to secrets during development, protected by fingerprint authentication.
Generates and stores SSH keys in 1Password and authorizes their use with a fingerprint scan.
Manages infrastructure secrets throughout the software development lifecycle.
Monitors device health and blocks access until required security tasks are completed.
Lets employees sign in to 1Password using their existing SSO username and password on business plans.
Saves passkeys and signs you in without a password on websites and apps that support passkey authentication.
Suggests strong, unique credentials whenever you create or update an online account.
Stores one-time authentication codes alongside logins and fills them at sign-in, removing the need for a separate authenticator app.
Monitors password health and flags weak, reused, or breached credentials with security alerts.
Stores bank account details, payment cards, addresses, and sensitive notes such as travel itineraries in encrypted vaults.
Personal password management for one person; $3.99/mo billed annually ($47.88/yr) at list — $2.99/mo first-year promo for new customers. 14-day free trial.
Password management for up to 5 family members; $5.99/mo billed annually ($71.88/yr) at list — $4.49/mo first-year promo for new customers. 14-day free trial.
Flat-rate plan covering up to 10 team members; $24.95/mo billed annually ($299.40/yr), 14-day free trial.
Enterprise-grade security for larger organizations; $8.99 per user/mo billed annually, 14-day free trial.
Custom pricing for large enterprises — contact sales; includes dedicated support and tailored onboarding.
1Password costs more than Bitwarden and is still the easiest security purchase to defend.
“1Password pairs a Secret Key architecture with two decades in market, $620 million raised, and 100,000-plus business customers. It costs more than Bitwarden, but the pedigree makes it the lowest-risk call in the category.”
LastPass gave this category its nightmare scenario in 2022 — customer vaults stolen, headlines for months. Every password manager purchase since is really one question: which vendor keeps us out of that story.
1Password is the boring answer with real substance behind it. In market since 2005, $620 million raised at a $6.8 billion valuation, over 100,000 paying business customers. The architecture earns the trust: a Secret Key generated on your device means a phished password alone can't open a vault, and Watchtower flags breached or reused credentials before your auditor does.
The yellow flag is cost. Bitwarden does the core job for a fraction of the $8.99-per-seat Business price, and there's no free tier here — only a 14-day trial. Standardize anyway; the premium buys the one vendor answer that survives an audit.
Over 100,000 paying businesses hold the clear premium position against Bitwarden, Dashlane, and Keeper.
SOC 2 Type II, the Secret Key model, and no LastPass-style breach history make this adoption easy to defend.
Autofill, Watchtower alerts, and a 14-day trial produce visible security wins inside the first month.
Extended access management, developer secrets, and SSO unlock reach past password storage into broader access control.
In market since 2005 with $620 million raised at a $6.8 billion valuation led by ICONIQ Growth.
Companies standardizing credential management on a proven vendor.
Budget-first teams that just need basic password storage.
1Password's Secret Key model turns the breach LastPass suffered into its clearest strategic argument.
“Two-Key Derivation means a phished password or a breached server alone can't decrypt 1Password vaults, and the Kolide acquisition extends the platform into device trust. Pricing runs above Bitwarden and the access-management ambitions overlap with existing IAM stacks.”
When LastPass lost encrypted vault backups in 2022, the failure mode every CISO fears became a case study. 1Password's Two-Key Derivation is the design that answers it: vault keys derive from the account password plus a device-generated Secret Key, so a stolen server copy or a phished password alone decrypts nothing.
The 2024 Kolide acquisition folded device trust into Extended Access Management, and the $8.99 Business tier adds SSO unlock through Okta or Entra ID. Developer surface is real — the 1Password CLI, SSH signing, and CI/CD integrations keep secrets out of dotfiles. A $620 million raise at a $6.8 billion valuation in 2022 settles vendor durability.
The catch is overlap: device posture and app-access governance are jobs an IAM suite like Okta may already own, and Bitwarden undercuts it with a free tier. For a three-year consolidation of passwords, passkeys, and machine secrets, this is the platform to beat.
A $6.8 billion valuation and a brand durable since 2005 lead the password-management category.
SSO unlock, SIEM event streaming, and admin recovery match how security teams actually operate.
Okta, Entra ID, Splunk streaming, and a documented CLI cover both IT and developer stacks.
Extended Access Management gives the platform room to grow, though it deepens single-vendor dependence.
Two-Key Derivation and SOC 2 Type II auditing run deeper than the category's norm.
Security leaders who want the whole credential layer consolidated under one vendor.
Small teams who only need a free basic password vault.
1Password's $8.99 Business seat includes a free $71.88 Families plan — a rebate hiding in the price.
“1Password Business costs $8.99 a seat with SSO included and a free Families plan for every user. There's no free tier, but pricing is public and the vendor carries a $6.8 billion valuation.”
1Password's $8.99 Business seat hands part of the money back. Every user gets a free Families plan — $71.88 a year at list. Few vendors put a rebate in the seat price.
Fifty seats on Business: $8.99 × 50 × 12 = $5,394 a year, SSO included — Okta, Entra ID, OneLogin, Duo. No SSO tax. Bitwarden Enterprise runs $6 a seat, $3,600 for the same team. The $1,794 gap buys Watchtower reporting plus the Families perk. Under ten people, the Teams Starter Pack is the sleeper: $24.95 flat for 10 members, $2.50 a seat.
The catch: no free tier, ever — Bitwarden gives one away. Vendor risk reads low. Founded 2005, bootstrapped for 14 years, then a $620 million Series C at a $6.8 billion valuation in January 2022. Procurement clears this in one pass — four of five tiers are public.
Self-serve checkout, SOC 2 Type II, and public pricing keep procurement short.
14-day trial on every plan and month-to-month billing on personal tiers.
Four of five tiers publish exact prices; only Enterprise is sales-gated.
Watchtower reports make credential health measurable, though breach-risk ROI stays estimated.
$5,394 a year covers 50 seats with SSO and Watchtower bundled, no add-ons.
Businesses who want published per-seat pricing with SSO included.
Solo users who want a permanently free password manager.
Autofill that behaves and a real CLI make 1Password worth paying for over free Bitwarden.
“Watchtower monitoring, TOTP autofill, and a scriptable CLI make 1Password comfortable to live in across browsers and terminals. There's no free tier though — Individual costs $2.99 a month billed annually after the 14-day trial.”
A password manager lives or dies in the browser extension, and this one behaves. Save prompts appear on sign-up, logins fill on return, and TOTP codes ride along so a separate authenticator app isn't needed. Watchtower quietly flags reused and breached passwords — a nag that actually earns its interruptions.
The terminal side is what separates it from the field. 1Password CLI pipes secrets into scripts behind a fingerprint prompt, the SSH agent signs Git commits, and vault references replace plaintext .env files. Two-Key Derivation pairs your password with a device-generated Secret Key, so a phished password alone decrypts nothing.
There's no free tier, however — Individual runs $2.99 a month billed annually on the pricing page today, against Bitwarden's free-forever plan, and that Secret Key hardening the crypto is one more string to dig up every time you set up a new machine. Fourteen days of trial, then you pay.
Autofill, TOTP fill, and save prompts hold up as the everyday surface across five major browsers.
developer.1password.com covers the CLI, SDKs, and CI/CD integrations with working examples rather than marketing copy.
The Secret Key adds a real setup step on every new device, and there's no free tier to fall back on.
SSH key signing, Git commit signing, secrets automation, and vault references reward going deep.
Browser extensions, native apps on six platforms, and CLI plus SSH-agent hooks meet practitioners where they already work.
Practitioners who want passwords, passkeys, and terminal secrets handled by one tool.
Budget users who expect a permanently free password manager.
1Password's autofill just shows up, and that's worth more than the whole feature list.
“1Password nails the small daily moments — autofill that shows up, TOTP codes built in, real mobile apps. Just know there's no free plan, only a 14-day trial.”
A password manager gets judged forty times a day, half a second at a time: the autofill either appears or it doesn't. 1Password's shows up — browser extension, desktop, phone, even the watch — and the iOS and Android apps are the full product, not read-only viewers.
Watchtower flags weak and breached logins without nagging, TOTP codes fill next to the password they belong to — one less authenticator app — and the Secret Key means a phished password alone can't open your vault. Individual runs $3.99 a month billed annually — $2.99 the first year for new customers; Families covers five people for $5.99.
The catch: no free plan, just a 14-day trial, and Bitwarden hands out free forever. The 1Password 8 rewrite went Electron back in 2021, and longtime Mac users still grumble about the lost native snap. It's the rare subscription that earns its renewal by being forgettable.
Autofill covers logins, payment cards, and TOTP codes in one motion across browsers and native apps on six platforms.
Saving and filling is automatic from day one, and depth like the 1Password CLI and SSH signing waits until you want it.
iOS, Android, and watchOS apps offer full vault editing and autofill, not a read-only companion.
QR-code device pairing and a 14-day trial make setup easy, though the Secret Key is one more thing to not lose.
Two-Key Derivation and SOC 2 Type II certification mean the vault fails safe even if the server is breached.
People who want passwords handled quietly across every device.
People who want a free password manager instead of a paid subscription.
Two decades in a category where LastPass leaked vaults, and the Secret Key still holds.
“Two decades without a vault breach and a $6.8 billion valuation make 1Password the safe pick in a category LastPass embarrassed. The flags are commercial — no free tier, and the 1Password 8 era made it subscription-only.”
This category gets audited by disaster. LastPass took the 2022 exam — attackers copied encrypted vault backups. 1Password's answer is the Secret Key, a device-generated factor baked into the encryption, so a stolen server copy alone decrypts nothing. Two decades since 2005. No vault breach on record.
Viability reads solid from public signals. Bootstrapped for fourteen years, then $620 million in 2022 at a $6.8 billion valuation, ICONIQ leading. The 'every human and AI agent' homepage is aspirational; the shipping underneath — Watchtower, passkeys, a real CLI — isn't.
The yellow flags are commercial. No free tier — Bitwarden gives you one — and Individual runs $47.88 a year at list. The 1Password 8 transition killed local vaults; it's subscription or nothing. Exit's fair, though: lapse and the vault goes read-only per their docs, exports included. You're renting, but from a stable landlord.
The Secret Key encryption model plus developer tooling like the 1Password CLI separate it from Bitwarden and Dashlane.
Lapsed accounts go read-only with exports available per their docs, though passkeys and vault structure don't migrate cleanly.
A $620 million round at a $6.8 billion valuation in 2022 and steady shipping cadence make this a safe 3-year bet.
The 'every human and AI agent' homepage is aspirational, but the pricing and security claims check out against public pages.
Founded 2005 with no vault breach on record, it matches the survivor pattern LastPass broke in 2022.
Security-conscious users who want a polished password manager with a clean breach record.
Budget users who expect a permanently free tier like Bitwarden's.
Common questions answered by our AI research team
1Password Individual costs $2.99/month billed annually ($3.99 month-to-month). Families is $4.49/month for up to five members, Teams Starter Pack is $24.95/month for 10 users, and Business is $8.99/user/month.
Yes. 1Password stores two-factor authentication codes alongside your logins and fills them automatically, so you don't need a separate authenticator app. It also supports passkeys for passwordless sign-in.
Yes. Every 1Password plan includes end-to-end AES 256-bit encryption, so vault data is only decrypted on your devices. Watchtower monitors your passwords and flags weak, reused, or breached credentials.
Yes. The Business plan at $8.99/user/month includes SSO integration, and employees can unlock 1Password by signing in with their SSO username and password. It also includes vault sharing and developer tools.
Yes. Multi-device support is included from the Individual plan up, with autofill for passwords, payment cards, and addresses across browsers and apps. All plans start with a 14-day free trial.
Company
1PasswordFounded
2005Pricing
From $4/moFree Trial
Available
1Password is a Toronto-based security company that makes a password manager and extended access management platform for individuals and businesses.
