# 1password

Source: https://startwithidentity.com/vendors/password-management/1password/
Last updated: 2026-08-01
License: content by Start with Identity. Cite the source URL.

---

## Overview

1Password, built by AgileBits since 2005 and based in Toronto, is one of the most widely used password managers for individuals, families, and businesses. It stores passwords, passkeys, secure notes, and other secrets in an end-to-end encrypted vault, and has expanded from a consumer product into a business platform covering enterprise password management, developer secrets, and device trust. It remains privately held and venture-backed, with a valuation reported around 6.8 billion USD in 2022.

Its scope keeps widening beyond passwords: after Passage for passkeys, 1Password [acquired Apono](https://startwithidentity.com/blog/2026-06-15-1password-acquires-apono-just-in-time-access/) on 15 June 2026, reportedly for 250 to 300 million dollars, adding [just-in-time](https://startwithidentity.com/glossary/jit-access/) privileged access across AWS, Azure, Google Cloud, and Kubernetes under the 1Password Unified Access banner. That competes directly with [PAM](https://startwithidentity.com/guides/fundamentals/what-is-pam/) vendors, though session recording and on-premises break-glass are not yet part of the story.

## What it is good at

The user experience is the benchmark in this category: fast, polished apps across every platform with a design that makes good security habits easy. The Secret Key model, which combines a Secret Key with the account password to derive encryption keys, is a distinctive protection against server-side compromise. 1Password has moved early and well on passkeys, both storing them and offering passwordless unlock. For businesses it adds Unlock with SSO, SCIM-based provisioning through its bridge, activity reporting, and Watchtower for weak or breached credentials. Its developer tooling is a standout, with a CLI, secrets references for CI/CD, SSH agent, and 1Password Secrets Automation, and its 2024 acquisition of Kolide added device-trust checks at sign-in.

## Where it falls short

There is no self-hosting option; 1Password is SaaS only, which rules it out for organizations that require on-premises control. There is no permanently free personal tier, only trials, so cost-sensitive individuals often compare it against free alternatives. Its business governance and provisioning, while solid, are lighter than a full IGA or PAM platform, and SCIM provisioning depends on running the SCIM bridge.

## Pricing

Transparent published pricing across individual, families, and business tiers, billed per user for teams. There is no free tier beyond a trial, and pricing sits at the premium end of the consumer market, reflecting the polish and feature depth. Business plans add SSO, provisioning, and reporting.

## Best for, and who should look elsewhere

Choose 1Password when experience and reliability matter most, whether for a family, a startup, or an enterprise that wants password management plus passkeys and developer secrets in one trusted platform. Look elsewhere if you need self-hosting (consider [Bitwarden](https://startwithidentity.com/vendors/password-management/bitwarden/) or [Passbolt](https://startwithidentity.com/vendors/password-management/passbolt/)), a free personal tier, or full privileged access management.

## Bottom line

The most polished password manager on the market, now a credible business platform spanning passwords, passkeys, developer secrets, and device trust. Its main trade-offs are SaaS-only deployment and premium pricing.