About 1Password
1Password sells software that secures human, machine, and agent credentials used in a business. 1Password Unified Access Platform contains Enterprise Password Manager, Device Trust, SaaS Manager, Credential Broker and Privileged Access. Enterprise Password Manager vaults credentials and secrets. Credential Broker delivers those credentials and secrets to workloads at runtime. Privileged Access governs what identities are permitted to do in the systems those credentials connect to, when they can do it, and for how long.[3][4][5]
Credential Broker verifies AI agents and machine workloads at runtime, then delivers only the credentials each is authorized to receive. SaaS Manager is used to discover, secure access, and optimize spend on AI tokens and SaaS apps. Privileged Access enforces zero standing privilege through just-in-time, and just-enough access.[4][5]
Privileged Access policy decisions draw from Entra, Okta, PagerDuty, asset context, and sensitivity. A lightweight connector provisions just-in-time, just-enough access to Cloud Infra, K8s, databases, SSH, RDP, and more. Agents connect to Privileged Access via MCP. Privileged Access provisions access directly in the target system's native policy layer: AWS IAM, K8s RBAC, or a scoped database account. Dynamic Guardrails factor in who's requesting, what they need, and the risk of that action. Privileged Access logs every request, approval, and access event automatically. Every request, decision, and revocation is captured with context and surfaced through the audit log and SIEM integration.[5]
1Password Device Trust was previously named Kolide. The Device Trust agent allows Mac, Windows and Linux devices to communicate with the Device Trust service. The Apps feature of Device Trust helps administrators discover and protect work-related web applications used by employees across their organization. With 1Password Extended Device Compliance, the 1Password browser extension works with Kolide to make sure a device is healthy before the user can access company web applications. AI Insights helps an organization understand how AI tools are being used, without collecting the contents of AI conversations. Device Trust inventories MCP server configurations for supported AI tools. The Kolide mobile app is intended for use with iPhones, iPads, and Android-based mobile devices.[6][7][8][9][10]
1Password Enterprise Password Manager - MSP Edition is available to all MSPs, enabling them to protect the sensitive information of their clients and improve cybersecurity hygiene. The MSP solution includes multi-tenancy client management accessible from a dedicated MSP console. MSPs can add new clients or link existing 1Password client accounts and access those instances directly from the MSP console. MSP pricing is consumption-based per user, and MSPs select a region based on data compliance needs. Managed client invoices are consolidated into one invoice per billing period via consumption-based billing. Technicians are required to periodically verify their identity through enhanced multi-factor authentication (MFA) when performing client account administrative actions. The MSP solution integrates with the existing services and applications of clients, like single sign-on (SSO) providers and security information and event management (SIEM) platforms.[11]
Watchtower flags weak passwords and other security problems to team members. Administrators get a unified dashboard to monitor password health, potential data breaches, user access, and more. 1Password offers integrations with Okta, Entra ID, OneLogin, Duo, and more. 1Password lets organizations place new hires in custom groups with access to shared vaults, and revoke access when people leave. 1Password provides granular controls to protect credentials, add vault permissions, and audit access events and actions. 1Password uses a two-key derivation model that combines an account password and Secret Key.[4][5][12][13][14]
1Password on the record