Software:1Password

From HandWiki
1Password
1Password official wordmark, with a representation of a tumbler-style lock cylinder
Initial unlock dialog requiring user's account password
Developer(s)1Password Inc.
Initial releaseJune 18, 2006 (2006-06-18)[1]
Stable release(s) [±]
Windows8.10.22 / December 12, 2023; 2 years ago (2023-12-12)[2]
Software:macOS8.10.22 / December 12, 2023; 2 years ago (2023-12-12)[3]
Software:Linux8.10.22 / December 12, 2023; 2 years ago (2023-12-12)[4]
Android8.10.22 / December 12, 2023; 2 years ago (2023-12-12)[5]
Software:iOS8.10.22 / December 12, 2023; 2 years ago (2023-12-12)[6]
Web app1654 / December 14, 2023; 2 years ago (2023-12-14)[7]
Software:Browser extension2.18.1 / December 12, 2023; 2 years ago (2023-12-12)[8]
CLI2.24.0 / December 14, 2023; 2 years ago (2023-12-14)[9]
SCIM Bridge2.8.4 / September 20, 2023; 2 years ago (2023-09-20)[10]
PlatformAndroid, ChromeOS,[11] iOS, Linux, macOS, Windows, WatchOS, and web browsers Chrome, Safari, Edge, Firefox and Brave[12]
TypePassword manager
LicenseSoftware as a service
Website1password.com
As ofOctober 2021

1Password is a password manager developed by the Canadian software company AgileBits Inc. It supports multiple platforms such as iOS, Android, Windows, Linux, and macOS.[13] It provides a place for users to store various passwords, software licenses, and other sensitive information in a virtual vault that is locked with a PBKDF2-guarded master password.[14][15] By default, the user’s encrypted vault is hosted on 1Password’s servers for a monthly fee.[16]

Password file synchronisation

1Password can be configured through 1Password.com, a paid subscription-based server sync service maintained by the developers. Local Wi-Fi and iCloud sync were only available on iOS and macOS in previous versions.[17][18][19]

In 2017, the Travel Mode feature was introduced for subscribers of 1Password.com, which enables the omission of password entries not tagged as safe for travel from the local storage on a particular device, reducing the impact of being obliged by officials to unlock access at the country border crossings.[20][21]

Browser extensions

1Password integrates with desktop web browsers including Safari, Chrome, Firefox, Edge, and Opera.[22] The extension can remember logins for websites, fill in website logins automatically, and generate random passwords for new websites.[23]

To use browser extensions, the user must have administrative rights on the computer where the browser is installed. This has been a problem with users on a PC assigned by a workplace without admin rights. To address this problem, 1Password offers plans for a monthly subscription fee aimed at businesses that allow web access to their usernames and passwords which can be copied and pasted into login screens.[24] Plans for family and individual use are also available.[25]

1Password also offers a standalone extension called 1Password X, available for Firefox, Chrome, and Opera.[26] 1Password X is designed to work without a companion desktop app, but a 1Password.com subscription is required.[27]

On the mobile side, 1Password offers integration with browsers and apps on iOS and Android devices using various methods. More convenient methods of filling and saving login information are provided in iOS 12[28] and Android Oreo (and later),[29] respectively.

History

In a 2017 Consumer Reports article, Dan Guido, the CEO of Trail of Bits, listed 1Password as a popular password manager (alongside Dashlane, KeePass, and LastPass), with the choice among them mostly up to personal preferences.[16]

Unlike previous versions, 1Password 7 became a subscription service, though perpetual licenses were still available from within the app ($64.99 in 2018[30]).[16][31] The option to store password vaults locally was removed in 1Password 8, which drew criticism.[32]

On November 14, 2019, 1Password announced a partnership with venture capital firm Accel, which invested $200 million in a Series A funding round and obtained a minority stake in the company.[33] It was the first outside funding in 1Password's history, and the largest single investment Accel had made to date.[34]

In 2021, 1Password acquired SecretHub, a Dutch cybersecurity company.[35] It also raised $100 million in financing with a valuation of $2 billion.[36]

In January 2022, 1Password raised a $620 million Series C round, the biggest funding round in Canadian history, led by Iconiq Growth, increasing the company's valuation to $6.8 billion. Notable individual investors that took part in this round were Ryan Reynolds, Robert Downey Jr., and Justin Timberlake.[37]

In November 2022, 1Password announced its acquisition of Texas-based Passkey tool provider Passage for an undisclosed sum.[38]

In September 2023, 1Password surpassed $250 million in annual recurring revenue where more than two-thirds of its revenue is generated from more than 100,000 business customers.[39]

In November 2025, CEO David Faugno told CNBC that 1Password had surpassed $400 million in annual recurring revenue, and that the company was weighing a possible IPO in 2026 or 2027.[40]

Reception

In 2016, Der Standard highlighted 1Password to its readers as an effective tool for managing and organizing passwords.[41]

Security Criticism

2017 Cloudbleed

In 2017, the Cloudflare infrastructure bug known as Cloudbleed raised concerns about potential data leakage affecting many major online services.[42] 1Password stated that its users were not at risk, emphasizing that its data remained protected through end-to-end encryption and did not rely solely on TLS.[43]

2017 Security vulnerabilities in Android App

A 2017 analysis by the Fraunhofer-Institut für Sichere Informationstechnologie (SIT) identified several security flaws in multiple Android password managers, including 1Password.[44] The issues, which include Password Leakage[45], Https downgrade to http URL[46], Titles and URLs Not Encrypted in Database[47], Read Private Data[48] and Information Leaked[49], were reported to the developers and subsequently fixed.[50]

2023 Okta Customer Service Breach

In October 2023, it was disclosed that 1Password was affected by a security incident involving Okta’s customer support system. According to 1Password, the suspicious activity was quickly contained, and no user, employee, or other sensitive data was compromised.[51]

2024 Evaluation of Password Checkup Tools

A 2024 study by Hutchinson et al. examined the “password checkup” features of 14 password managers, including 1Password, using weak, breached, and randomly generated passwords. The authors found that the evaluated products reported weak and compromised passwords inconsistently and sometimes incompletely. No manager successfully flagged all known breached passwords. The study concludes that such inconsistencies may give users a false sense of security.[52]

2025 DOM-based Extension Clickjacking

Security researcher Marek Tóth presented a vulnerability in browser extensions of several password managers (including 1Password) at DEF CON 33 on August 9, 2025. In their default configurations, these extensions were shown to be exposed to a DOM-based extension clickjacking technique, allowing attackers to exfiltrate user data with just a single click.[53] The affected password manager vendors were notified in April 2025. According to Tóth, 1Password version 8.11.8.40 remains vulnerable.[54]

See also

References

  1. "1Password 1.0.0 Release". https://app-updates.agilebits.com/product_history/OPM2#2352. 
  2. "1Password for Windows Release Notes". https://releases.1password.com/windows/. 
  3. "1Password for Mac Release Notes". https://releases.1password.com/mac/. 
  4. "1Password for Linux Release Notes". https://releases.1password.com/linux/. 
  5. "1Password for Android Release Notes". https://releases.1password.com/android/. 
  6. "1Password for iOS Release Notes". https://releases.1password.com/ios/. 
  7. "1Password.com Release Notes". https://app-updates.agilebits.com/product_history/B5. 
  8. "1Password in the browser Release Notes". https://releases.1password.com/b5x/. 
  9. "1Password CLI Release Notes". https://app-updates.agilebits.com/product_history/CLI2. 
  10. "1Password SCIM Bridge Release Notes". https://app-updates.agilebits.com/product_history/SCIM. 
  11. Brangers, Gabriel (2019-02-21). "1Password Optimized For Chrome OS: One Password Manager To Rule Them All" (in en-us). Chrome Unboxed - the Latest Chrome Os News. https://chromeunboxed.com/1password-optimized-for-chrome-os-one-password-manager-to-rule-them-all/. 
  12. "Get started with 1Password in your browser". 2021-05-17. https://support.1password.com/getting-started-browser/. 
  13. "Top 10 Best Password Managers [NEW 2023 Rankings"] (in en-US). https://www.softwaretestinghelp.com/best-password-managers/. 
  14. Haslam, Oliver (28 August 2018). "Are password managers safe?". https://blog.1password.com/are-password-managers-safe/. Retrieved 2 January 2019. 
  15. Goldberg, Jeffrey (16 March 2013). "1Password hashcat strong master passwords". https://blog.1password.com/1password-hashcat-strong-master-passwords/. Retrieved 2 January 2019. 
  16. 16.0 16.1 16.2 Chaikivsky, Andrew (2017-02-07). "Everything You Need to Know About Password Managers". https://www.consumerreports.org/digital-security/everything-you-need-to-know-about-password-managers/. 
  17. Fleishman, Glenn (2018-06-11). "1Password 7 for Mac review: Password manager with small improvements that add up" (in en). https://www.macworld.com/article/3280090/security/1password-7-for-mac-review.html. 
  18. Myers, Robert McGinley (8 August 2017). "The Best Password App and Manager (and why you need one)". The Sweet Setup. https://thesweetsetup.com/apps/best-password-manager-and-why-you-need-one/. Retrieved 1 November 2018. 
  19. Tedeschi, Bob (2010-11-03). "Apps to Manage Your Cluster of Passwords" (in en-US). The New York Times. ISSN 0362-4331. https://www.nytimes.com/2010/11/04/technology/personaltech/04smart.html. 
  20. Kastrenakes, Jacob (2017-05-23). "1Password adds a 'travel mode' to keep your passwords safe at the border". https://www.theverge.com/2017/5/23/15681990/1password-travel-mode-feature-added-security. 
  21. "1Password will vor Spionage durch Grenzbehörden schützen" (in de-AT). https://www.derstandard.at/story/2000058209271/1password-will-vor-spionage-durch-grenzbehoerden-schuetzen. 
  22. Rubenking, Neil J. (14 June 2018). "AgileBits 1Password - Review 2018". https://uk.pcmag.com/password-managers/40423/agilebits-1password. 
  23. "Use the 1Password extension to save and fill passwords on your Mac or Windows PC". https://support.1password.com/1password-extension/. Retrieved 1 November 2018. 
  24. "The most secure password manager for teams". https://1password.com/teams/. 
  25. "Password manager to keep your family safe". https://1password.com/families/. 
  26. Wagenseil, Paul (2019-02-15). "Best Password Managers 2019" (in en). https://www.tomsguide.com/us/best-password-managers,review-3785.html. 
  27. Teare, Dave (13 November 2017). "1Password X: A look at the future of 1Password in the browser". https://blog.1password.com/1password-x-a-look-at-the-future-of-1password-in-the-browser/. 
  28. Cao, Peter (2018-08-21). "Hands-on with 1Password and iOS 12's Password AutoFill feature" (in en-US). https://9to5mac.com/2018/08/21/hands-on-password-autofill-ios-12-1password/. 
  29. El Khoury, Rita (2017-03-25). "AgileBits shows us how Android O's autofill API works with a 1Password demo" (in en-US). https://www.androidpolice.com/2017/03/25/agilebits-shows-us-android-os-autofill-api-works-1password-demo/. 
  30. Riley, Sean (2018-11-16). "1Password Review: For the Apple Faithful" (in en). https://www.tomsguide.com/us/1password,review-3765.html. 
  31. Riley, Sean (2018-11-16). "1Password Review: For the Apple Faithful" (in en). https://www.tomsguide.com/us/1password,review-3765.html. 
  32. "1Password upsets long-time fans with big version 8 update for Mac". 12 August 2021. https://www.cultofmac.com/749946/1password-upsets-fans/. 
  33. "1Password partners with Accel for continued growth | 1Password" (in en). 2019-11-14. https://blog.1password.com/accel-partnership/. 
  34. "Fourteen years after launching, 1Password takes a $200M Series A" (in en-US). 14 November 2019. https://techcrunch.com/2019/11/14/fourteen-years-after-launching-1password-takes-first-funding-a-200m-series-a/. 
  35. "1Password acquires Dutch startup to hone secret-keeping" (in en). https://fortune.com/2021/04/13/1password-dutch-startup-secrethub/. 
  36. Silcoff, Sean (27 July 2021). "Shopify, Slack executives join $100-million financing of Toronto's 1Password as valuation hits $2-billion". The Globe and Mail. https://www.theglobeandmail.com/business/article-shopify-executives-join-100-million-financing-of-torontos-1password-as/. 
  37. Page, Carly (19 January 2022). "Remote work and cloud adoption lands 1Password with $620M Series C, now valued at $6.8B". https://techcrunch.com/2022/01/19/1password-series-c-funding/. 
  38. "1Password Announces its Acquisition of Texas-based Passkey tool provider, Passage" (in en). https://insiderapps.com/news/1password-announces-its-acquisition-texas-based-passkey-tool-provider-passage. 
  39. "1Password Surpasses $250 Million in ARR, Propelled by Rapid B2B Growth" (in en). 2023-09-19. https://www.businesswire.com/news/home/20230919527858/en/1Password-Surpasses-250-Million-in-ARR-Propelled-by-Rapid-B2B-Growth. 
  40. "Matthew McConaughey, Ryan Reynolds-backed password manager tops $400 million in ARR on AI tail winds" (in en). 2025-11-06. https://www.cnbc.com/2025/11/06/ryan-reynolds-backed-1password-tops-400-million-in-arr.html. 
  41. "Schluss mit "123456": 1. Februar ist "Change your password"-Tag" (in de-AT). https://www.derstandard.at/story/2000030144886/schluss-mit-123456-1-februar-ist-change-your-password-tag. 
  42. "Cloudbleed: Schwere Lücke plaudert sensible Daten von Millionen Internet-Nutzern aus" (in de-AT). https://www.derstandard.at/story/2000053185446/cloudbleed-schwere-luecke-plaudert-sensible-daten-von-millionen-internet-nutzern. 
  43. "Three layers of encryption keeps you safe when SSL/TLS fails | 1Password" (in en). 2017-02-23. https://1password.com/blog/three-layers-of-encryption-keeps-you-safe-when-ssl-tls-fails. 
  44. "Passwort-Manager unter Android mit gravierenden Defiziten" (in de-AT). https://www.derstandard.at/story/2000053366873/passwort-manager-unter-android-mit-gravierenden-defiziten. 
  45. "SIK-2016-038" (in de). https://team-sik.org/sik-2016-038/. 
  46. "SIK-2016-039" (in de). https://team-sik.org/sik-2016-039/. 
  47. "SIK-2016-040" (in de). https://team-sik.org/sik-2016-040/. 
  48. "SIK-2016-041" (in de). https://team-sik.org/sik-2016-041/. 
  49. "SIK-2016-042" (in de). https://team-sik.org/sik-2016-042/. 
  50. "Password-Manager Apps" (in de). https://team-sik.org/trent_portfolio/password-manager-apps/. 
  51. "1Password Becomes Latest Victim of Okta Customer Service Breach" (in en). https://www.darkreading.com/endpoint-security/1password-latest-victim-okta-customer-service-breach. 
  52. Hutchinson, Adryana; Munyendo, Collins W.; Aviv, Adam J; Mayer, Peter (2024-05-11). "An Analysis of Password Managers' Password Checkup Tools". Extended Abstracts of the CHI Conference on Human Factors in Computing Systems. CHI EA '24. New York, NY, USA: Association for Computing Machinery. pp. 1–7. doi:10.1145/3613905.3650741. ISBN 979-8-4007-0331-7. 
  53. "Multiple top password managers vulnerable to password stealing clickjacking attacks - here's what we know" (in en). 2025-08-22. https://www.techradar.com/pro/security/multiple-top-password-managers-vulnerable-to-password-stealing-clickjacking-attacks-heres-what-we-know. 
  54. Tóth, Marek (2025-08-09). "DOM-based Extension Clickjacking: Your Password Manager Data at Risk" (in en). https://marektoth.com/blog/dom-based-extension-clickjacking/. 
  • No URL found. Please specify a URL here or add one to Wikidata.