1Password Review

1Password has spent nearly two decades building a reputation as the password manager you recommend to people who do not want to think about password managers. It started as a Mac utility from Canadian maker AgileBits and now protects logins, passkeys, SSH keys and secrets for more than 150,000 businesses.

The real question is not whether it works, but whether the polish justifies paying more than nearly every rival, including several with free tiers.

This review looks at what you actually get for the money: the security model, the day-to-day autofill experience, the admin and developer tooling, and where 1Password quietly falls short. We weigh it against Bitwarden, Dashlane, Keeper, Proton Pass and NordPass so you can see when the premium is justified and when a cheaper tool covers the same ground. Security teams and IT admins are the audience it was built for.

1Password is a password manager and secrets platform made by AgileBits, a company founded in 2005 and headquartered in Toronto. At its core it stores logins, credit cards, secure notes, software licenses and identity documents in end-to-end encrypted vaults that sync across Mac, Windows, Linux, iOS, Android and every major browser.

What sets it apart is the two-secret model: your data is locked by both an account password and a 128-bit Secret Key stored on your devices, so even 1Password cannot decrypt your vault.

Beyond storing passwords, it generates and saves passkeys, acts as a built-in TOTP authenticator, and includes Watchtower, a dashboard that flags weak, reused and breached passwords using Have I Been Pwned data. Travel Mode can temporarily remove vaults from a device before you cross a border.

For teams there are shared vaults, granular permissions, SSO sign-in with Okta or Entra ID, SCIM provisioning, and an activity log that streams events to Splunk or Elastic. For developers, the CLI, SSH agent, Git commit signing and Service Accounts turn it into a secrets manager. It sits at the premium, security-first end of the market.

Setup starts by creating an account, setting your account password, and saving the Emergency Kit PDF that holds your Secret Key. That Secret Key is both the catch and the strength: lose it with no other signed-in device and there is no password reset and no recovery.

For teams, an admin can recover a locked-out member, but individual users carry real responsibility for that file.

Day to day you live in the browser extension. It detects login fields, offers to fill and save, and prompts to generate strong passwords on signup forms. The desktop app is where you organize vaults, run Watchtower, and manage sharing.

Autofill on mobile hooks into the iOS and Android system password menus. Sharing is genuinely well done: you can send an encrypted link that expires or requires a specific recipient.

The interface is the cleanest in the category, and opening the vault with Touch ID, Windows Hello or a passkey removes most daily friction. Rough edges: the CLI and secrets automation have a learning curve, and there is no free tier to fall back on if you stop paying.

1Password has no free plan, only a 14-day trial on every tier, and annual billing gets the best rate. Personal use starts at Individual for $2.99/month for one person, or Families at $4.49/month for up to five members with unlimited shared vaults.

Paying monthly rather than annually pushes those to $3.99 and $5.99. The cheapest way for a small team to get admin controls is the Teams Starter Pack, a flat $24.95/month for 10 members, roughly $2.50 a seat.

Past 10 people you move to Business at $8.99/user/month, which adds SSO integration with Okta, Entra ID and Duo, custom policies, usage reporting, 20 guest invites, and a free Families account for every employee. Enterprise is custom-quoted and adds SCIM provisioning, SIEM event streaming and a dedicated success manager.

Extended Access Management, the device-trust product, is priced separately. What you will really pay: most growing teams land on Business at about $9 a seat, so a 25-person company runs around $225/month, well above Bitwarden or Proton Pass for comparable core features.

1Password is a strong fit for security-conscious businesses and IT teams that want SSO, provisioning and audit logging without standing up separate infrastructure.

It suits companies already in the Okta or Entra ecosystem, developer teams that need a real secrets manager alongside a password vault, and non-technical users who will actually use a tool because it stays out of the way. If polish and support drive adoption on your team, 1Password earns its premium.

Who should skip it: solo users and tiny teams on a tight budget, and anyone who wants a capable free plan.

A single person who just needs strong passwords across devices gets nearly everything 1Password offers from Bitwarden's free tier or Proton Pass for a fraction of the cost. Open-source purists will prefer Bitwarden's auditable, self-hostable code, and privacy-first individuals already paying for Proton services get Proton Pass bundled in.