1Password
By 1Password (AgileBits)
1Password is a password manager and secrets vault that stores login credentials, payment information, and other sensitive data in an encrypted vault, generating and autofilling strong unique passwords across browsers, desktop, and mobile…
Definition
1Password is a password manager and secrets vault that stores login credentials, payment information, and other sensitive data in an encrypted vault, generating and autofilling strong unique passwords across browsers, desktop, and mobile devices for individuals and businesses. Its vault data is encrypted before it ever leaves a user's device, so even during transit or while stored on 1Password's own servers, the underlying passwords and notes remain unreadable without the combination of secrets that only the account holder possesses.
Overview
1Password encrypts vault contents locally before they are synced to its servers, using a combination of a user's master password and a locally stored secret key, so that even 1Password itself cannot read stored data without both components. This zero-knowledge architecture means data breaches of the sync infrastructure alone should not expose usable vault contents, since the encryption key material never leaves the user's control in a form the company can access. The secret key is a long, randomly generated value stored only on a user's own devices, and because it is combined with the master password before any encryption key is derived, an attacker who obtained only the master password, without also obtaining a device holding the secret key, still could not decrypt vault contents. Beyond basic password storage, 1Password generates strong random passwords for new accounts, autofills login forms and payment details across supported browsers and apps, and can store other sensitive items such as secure notes, software licenses, and identity documents. Its business-oriented tiers add administrative features: shared vaults for teams, activity logs, integration with single sign-on providers, and tools for enforcing password policies across an organization. A developer-focused product, 1Password Secrets Automation, extends the platform toward managing API keys and credentials used in CI/CD pipelines and infrastructure, overlapping partially with dedicated secrets management tools. Business plans add a layer of administrative control on top of the same encrypted-vault model, letting an administrator provision shared vaults for a team, review activity logs, and enforce policies such as minimum password strength, without the administrator themselves being able to read an individual employee's personal, non-shared vault items. 1Password competes in the consumer and business password manager space with Bitwarden, Dashlane, and LastPass, and in the developer secrets space in a smaller way with tools like HashiCorp Vault, though it is not a full substitute for enterprise-grade dynamic secrets management. Compared to Bitwarden, an open-source alternative with a free tier, 1Password is closed-source and subscription-only but is often noted for a more polished user interface and stronger business administration tooling. Compared to LastPass, which experienced notable security incidents, some users weigh vendor security track record heavily in their choice. 1Password Secrets Automation targets a narrower version of the same secrets problem that HashiCorp Vault addresses for infrastructure, letting a CI pipeline pull a credential from the same underlying vault system rather than requiring a completely separate secrets management deployment for that purpose. 1Password suits individuals and organizations wanting a straightforward, well-supported password manager with strong autofill and cross-platform support, and businesses needing centralized credential management with SSO integration and audit logging. It is not designed to replace enterprise secrets management infrastructure for applications and automated systems, where a tool built specifically for that purpose, such as Vault, is more appropriate. Everyday use centers on the browser extension recognizing a login form and offering to fill it, or offering to save a newly created password, so that the friction of picking and remembering a strong, unique password per site is removed from the user's normal workflow. For an application or automated system that needs many short-lived, dynamically issued credentials at scale, a purpose-built infrastructure secrets tool remains a better fit than 1Password's developer offering, which is built around the same personal- and team-vault model as its consumer product rather than around dynamic secret issuance.
Key Features
- Zero-knowledge encryption using a master password plus a local secret key
- Password generation and autofill across browsers, desktop, and mobile
- Secure storage for notes, licenses, identity documents, and payment cards
- Shared vaults and administrative controls for business and team plans
- Single sign-on integration for enterprise identity management
- Activity logs and audit reporting for business accounts
- 1Password Secrets Automation for developer and CI/CD credential use
- Cross-platform sync across major operating systems and browsers