Business

Personal

Secure access
for every human
and AI agent

Visibility and control for humans and AI agents, built on the most trusted zero-knowledge vault for identities, credentials, and secrets.

Talk to sales View plans

1Password Master Vault (Airlock Active — 256-bit AES)

Zero-Knowledge Encrypted

Acme Enterprise

Primary Vault • Admin

VAULT CATEGORIES

All Logins
42
Passkeys & Biometrics
8
Entropy Generator
New
AI Agent Tokens
Unified

Logins & Unified Credentials

Protected with 256-bit AES client-side encryption and 1Password Secret Key.

GitHub Enterprise Org

admin@acme-cloud.internal

••••••••••••••••

849 203 18

AWS Production Root

infra-lead@acme-cloud.internal

•••••••••••••••• Passkey Active

Stripe Billing Secret API Key

Live Payments Vault • Restricted

rk_live_••••••••••••

Figma Team Organization

designers@acme-cloud.internal

••••••••••••••••

512 884 18

Passkeys & Modern Biometrics

FIDO2 / WebAuthn cryptographic hardware-bound passkeys. Phishing-proof.

FIDO2 Standard

Experience Passwordless Authentication

Passkeys replace vulnerable shared secrets with dual-key public cryptography stored directly in your secure 1Password vault.

Ready for biometric handshake

Real-Time Cryptographic Password Generator

Generate high-entropy strings locally inside your browser sandbox.

128-bit Shannon Entropy

mR9#vK2!xQ8$pL7^

Character Length 16 characters

Symbols (!@#$%) Numbers (0-9) Uppercase (A-Z) Avoid Lookalikes (l, 1, O, 0)

Unified Access for AI Agents & Machine Identities

Autonomous agents need credentials too. Govern AI tool-calling tokens without leakage.

AI Access Guard

Claude-3.7 & Gemini Autonomous Worker

Service Account: svc-ai-worker-prod

Granular RBAC Active

GitHub Actions CI/CD Secrets Vault

Pipeline: deploy-k8s-prod.yml

Ephemeral OIDC

Vault Locked Behind Airlock

Your encryption keys have been purged from memory. Only your master password or Touch ID can reconstruct the private AES key.

Zero-Knowledge Architecture

Security designed so only you hold the keys.

Unlike ordinary cloud vaults, 1Password never sees, stores, or transmits your unencrypted credentials. Your Master Password and 128-bit Secret Key remain strictly local on your device.

Dual-Key Encryption

Your data is protected by 256-bit AES encryption using your Master Password combined with a randomly generated 128-bit Secret Key. Mathematical impossibility for brute force.

Read our cryptographic whitepaper →

Watchtower Dark Web Radar

Continuous surveillance cross-referencing billions of compromised records from global data breaches. Receive real-time alerts before attackers exploit exposed credentials.

Explore Watchtower radar →

Passwordless Passkeys

Sign in using Touch ID, Face ID, or Windows Hello. Passkeys cannot be phished, intercepted on public Wi-Fi, or leaked in server database dumps.

Learn how passkeys work →

Interactive Security Health Assessment

How fortified is your credential posture?

Answer four quick questions to simulate your organization’s vulnerability rating and see how 1Password Watchtower neutralizes exposure.

Credential Hygiene Checklist

Select any habits that apply to your current personal or team workflow:

I reuse passwords across multiple personal or work services

Credential stuffing attackers exploit one breached service to break into all others.

I have not enabled 2FA or passkeys on every single account

Static single-factor logins leave critical accounts vulnerable to automated phishing.

Credentials or API keys are occasionally shared via Slack, Teams, or email

Plaintext messages in chat history create persistent attack surfaces and unmonitored secrets.

I have passwords with fewer than 16 characters or dictionary words

Modern cloud GPUs can crack 8-character passwords in under 4 minutes.

98%

Airlock Fortified

Excellent! Your credential posture minimizes lateral breach risks. 1Password locks in continuous zero-knowledge protection.

Enterprise Ecosystem

Connects seamlessly with your security stack.

Automate user provisioning, directory syncing, and developer secrets with certified integrations across every modern enterprise platform.

GitHub Actions & CLI

→

Microsoft Entra ID / SCIM

→

Okta Universal Directory

→

Google Workspace SSO

→

Rippling HR Provisioning

→

Terraform & Kubernetes Operator

→

Clear, Transparent Pricing

Built for individual clarity. Scaled for enterprise control.

Try any plan completely free for 14 days. No credit card required. Cancel anytime.

1Password Business

Comprehensive access control, automated SCIM provisioning, and full compliance reporting for teams of any scale.

$7.99 / user / month, billed annually

✓ Free 1Password Families membership included for every team member
✓ Automated SCIM provisioning & Okta / Microsoft Entra SSO sync
✓ Watchtower enterprise domain breach reporting & audit logs
✓ Granular Role-Based Access Controls (RBAC) & Custom Vault permissions
✓ 20 shared guest accounts for external contractors

Start 14-day free business trial

Individuals & Families

1Password Individual

Effortless security across all your personal devices. Autofill passwords, passkeys, credit cards, and sensitive documents.

$2.99 / month, billed annually

✓ Unlimited passwords, items, passkeys, and credit cards
✓ Native apps for iOS, Android, macOS, Windows, Linux & Chrome
✓ 1 GB encrypted document storage per account
✓ Travel Mode to remove sensitive vaults across international borders
✓ Watchtower alerts for compromised sites and vulnerable logins

Try 1Password free for 14 days

Enterprise Validation

Loved by security teams and end users alike.

Security that gets used is security that works. See what technology leaders say about 1Password.

“1Password gives our all-remote workforce the exact right balance between frictionless authentication and ironclad security. The zero-knowledge architecture is the only design our CISO would approve.”

David S.

VP of Security Engineering, GitLab

“The developer CLI and secrets management eliminated API keys from git commits overnight. Our engineers actually enjoy using it, which is the rarest compliment in cybersecurity.”

Elena R.

Director of Infrastructure, Snowflake

“Switching to 1Password Passkeys reduced our helpdesk password reset tickets by 68% in the first quarter. The ROI was virtually immediate for our enterprise IT staff.”

Marcus T.

Head of IT Operations, Canva

Frequently Asked Questions

Everything you need to know about 1Password.

Have questions about our zero-knowledge model or enterprise deployment? We have answers.

Zero-knowledge means that your data is encrypted and decrypted exclusively on your local device using keys that only you possess. 1Password’s servers only hold encrypted cipher blocks. Even if our servers were seized by government subpoena or breached by an adversary, no one can read your passwords without your Master Password and 128-bit Secret Key.

The Secret Key is a unique 128-bit code generated locally when you create your account. It works together with your Master Password to protect your data with dual-key cryptography. Unlike a simple 2FA token, the Secret Key directly participates in the encryption of your master vault key, making brute-force dictionary attacks computationally impossible.

Passkeys are built on the FIDO2 / WebAuthn standard and replace passwords with cryptographic key pairs. Your public key is registered with the website, while your private key is safely encrypted inside your 1Password vault. When you sign in, 1Password performs a biometric signature that cannot be phished or replicated.

As autonomous AI agents and automated workflows proliferate, hardcoded API keys represent an acute breach risk. 1Password Unified Access allows security teams to issue ephemeral, scoped service account tokens to AI models and CI/CD pipelines, complete with audit logging and instant revocation.

Ready to secure your humans and AI agents?

Join over 150,000 forward-thinking organizations. Deploy enterprise-grade zero-knowledge protection in less than 15 minutes.

Start 14-day free trial Contact enterprise sales

Secure access for every human and AI agent