1Password

Helps teams discover and govern access across people, AI agents, and machines while securing credentials and making access activity auditable.

Protect and organize passwords and sensitive information, simplify sign-ins across devices, and securely share items with family or others.

Lets people delegate account-based tasks to supported AI agents while approving access and keeping passwords hidden from the agents.

1Password Unified Access

1Password Unified Access is an identity security platform that helps security and IT teams discover, secure, and audit access across humans, AI agents, and machines from one system. It brings together Enterprise Password Manager, SaaS Manager, Credential Broker, Device Trust, and Privileged Access, with Enterprise Password Manager MSP Edition capabilities for multi-client administration. The platform surfaces unmanaged AI tools and exposed credentials, governs access with task-scoped and just-in-time permissions, delivers credentials at runtime, and provides audit attribution across identity types. It also supports SaaS governance, device posture checks, credential storage, and MSP client management. Organizations can start with an individual product and expand, and the platform is designed to work with existing identity and security tools.

• Discover Unmanaged Tools And Usage
  Surface unmanaged AI tools, agents, and SaaS applications, and give teams visibility into AI usage and costs across teams, users, and models.
• Protect And Govern Credentials
  Keep credentials in encrypted, policy-governed vaults while controlling who can access them and supporting secure sharing across teams and identity types.
• Keep Decryption Keys With Users
  Protect vault data with end-to-end encryption and keep decryption keys out of 1Password’s hands, including for MSP-managed client accounts.
• Grant Just-In-Time Task-Scoped Access
  Give people and agents only the permissions needed for a task, when they are needed, and remove access when the work or session ends.
• Constrain Agent Actions At Runtime
  Give agents task-specific access and check their actions against stated intent in real time, so access can be restricted or revoked if behavior deviates.
• Deliver Approved Credentials At Runtime
  Verify workloads and provide only the credentials authorized for their job, reducing long-lived secrets and limiting access to the task.
• Verify Device Health Before Access
  Check device health and compliance before granting access to protected applications and resources, using prebuilt or custom requirements.
• Enforce Access By Device Posture
  Apply device health and compliance policies to protected applications, with options to block access, warn users, or monitor device posture.
• Automate Employee Lifecycle Workflows
  Coordinate access and related tasks as employees join, change roles, or leave, helping teams reduce manual steps and keep processes consistent.
• Manage Multiple Clients From One Console
  Centralize client account administration, security configuration, onboarding, instance access, and usage monitoring in a dedicated MSP console.
• Find And Vault Exposed Secrets
  Identify credentials and secrets in developer environments and local files, then help teams move plaintext secrets into managed vaults before they reach shared systems or production.
• Identify Risky Credentials
  Surface weak, reused, or breached passwords and missing two-factor authentication so teams can identify credential risks and take action.
• Protect Secrets With Separate Keys
  Require both the integration key and the key held in the confidential computing enclave to decrypt a credential.
• See Devices And Risks Across Your Fleet
  View devices accessing company resources and surface endpoint risks, including credential exposure and agentic AI services.
• Help Users Restore Device Compliance
  Guide users through fixing device compliance issues without waiting for IT, and restore access when the device meets policy requirements.
• Review And Govern App Access
  Give reviewers context for access decisions, support employee requests through defined approval workflows, and record governance actions.
• Track AI Costs And Recover Licenses
  Monitor AI consumption against budgets and identify underused licenses, inactive accounts, and redundant applications to help reduce unnecessary spending.
• Limit And Verify Technician Access
  Apply least-privilege permissions and enhanced multi-factor identity verification to technician administration of client accounts.
• Consolidate Billing And Track Usage
  Simplify invoicing with a consolidated periodic invoice, exportable billing details, and visibility into current and estimated client seat usage.
• Trace Access And Administration Activity
  Give security teams and auditors records of which identities or workloads requested access, what was approved, how credentials were used, and what actions technicians performed.
• Connect Existing Identity And Security Tools
  Use existing identity and security environments and connected business systems to support access controls, app discovery, workflows, and monitoring.
• Retrieve And Autofill Credentials Securely
  Help users fill saved credentials and retrieve developer secrets at runtime instead of placing them in source code or version control.
• Support Compliance Reviews
  Use reporting, enforcement logs, anomaly detection, and session summaries to review access activity and support compliance evidence.
• Automate Provisioning And Enable SSO
  Connect supported identity providers to automate user provisioning and deprovisioning and let employees unlock 1Password through SSO.
• Share Credentials With Controlled Access
  Share credentials and vaults while controlling who can view or edit information and, for shared links, who can access them and when they expire.
• Apply Security Policies And Custom Rules
  Configure security policies and custom rules, monitor sign-in attempts, and generate reports for organizational credential management.
• Suspend Compromised Accounts Automatically
  Automatically suspend compromised accounts to help limit the risk associated with a compromised identity.
• Surface Contract And Renewal Insights
  Review contract terms alongside usage and spend information to identify potential waste and prepare for renewals.
• Show Users What Checks Evaluate
  Give users visibility into the data being checked and the reasons for those checks through the built-in Privacy Center.
• Query Your Fleet In Plain Language
  Explore device fleet information using plain-language queries from the team’s existing AI tools.
• Access Dedicated Onboarding And Support
  Receive support for deployment and use, including 24/7 help, dedicated Enterprise onboarding, and MSP-focused training and enablement resources.

1Password Password Manager

1Password Password Manager helps individuals and families save and manage passwords, passkeys, financial information, and other sensitive data in encrypted vaults. It generates strong passwords, saves and autofills credentials and other information in supported browsers and apps, and keeps saved information available across devices. Users can share items through shared vaults or expiring links, while Watchtower flags compromised passwords and other security issues. The Families plan adds shared vaults for family members and administrator access controls.

• Save And Fill Information Automatically
  Avoid manually entering login details and other saved information. 1Password can save credentials and fill them when needed in supported browsers and compatible apps.
• Protect Data With Encrypted Vaults
  Keep saved information encrypted in vaults protected by an account password and a unique Secret Key. 1Password cannot see the readable contents of stored data.
• Access Information Across Your Devices
  Reach saved information across supported desktop, mobile, and browser apps, with automatic syncing keeping it available on your devices.
• Generate Strong Unique Passwords
  Create strong, unique passwords for online accounts instead of having to come up with each password yourself.
• Save And Use Passkeys Across Devices
  Use passkeys with compatible websites and apps, and keep them organized with vaults and tags. Saved passkeys can be viewed, managed, and shared across supported devices.
• Share Saved Items Securely
  Share information with family members or other trusted people through vaults, or create expiring links for short-term sharing with anyone, including people who do not use 1Password.
• Identify Compromised Passwords And Risks
  See alerts about compromised passwords and other security issues tied to saved items, so you can take action on affected accounts.
• Avoid Filling Credentials On Mismatched Sites
  By checking the website URL associated with a saved login, 1Password will not offer to autofill credentials on a site whose URL does not match.
• Manage Shared Family Vaults
  Invite family members, share unlimited vaults, and use administrator controls to manage who can access shared information.
• Hide Selected Vaults While Traveling
  Hide selected vaults when crossing borders, as described on 1Password’s password manager comparison page.
• Recover Access To Your Account
  Use the Emergency Kit to help get back into an account after forgetting the account password or Secret Key. Family administrators can help other family members recover their accounts.

1Password for Agents

A platform that connects supported personal AI agents to 1Password so they can complete tasks requiring account sign-ins without seeing or receiving users’ passwords. People review and approve or deny login requests, and 1Password fills the password or one-time code directly into the sign-in page. Agent connections are optional, and connecting an agent does not give it access to the whole vault.

• Approve Each Agent Login
  People decide whether an agent can use a requested login and can select the saved account when more than one login matches.
• Fill Credentials Without Revealing Them
  Agents can proceed through supported sign-in flows while passwords and one-time codes remain out of their view.
• Keep The Rest Of Your Vault Protected
  Granting an agent access to a requested login does not expose other saved passwords in the vault.
• Connect Supported Personal Agents
  Choose from supported agent integrations, with availability and setup details varying by integration.
• Save New Account Information
  Keep new account information from an approved sign-in request in the 1Password vault.