Security is not just a feature. It’s our foundation.
Every design decision in 1Password begins with the safety and privacy of your data in mind.
The information you store in 1Password is encrypted, and only you hold the keys to decrypt it. 1Password is designed to protect you from breaches and other threats, and we work with other security experts to make sure our code is rock solid. We can’t see your 1Password data, so we can’t use it, share it, or sell it.
Only you have access to your 1Password data.
Your 1Password data is end-to-end encrypted to keep it safe at rest and in transit. Our security recipe starts with AES 256-bit encryption, and we use multiple techniques to make sure only you have access to your information.
Your Account Password protects your data on your devices.
Only you know your Account Password: it’s never stored alongside your data or sent over the network. It protects your data if someone has access to your device.
Learn more
Your Secret Key protects your data off your devices.
Your Secret Key is created locally on your device. It’s combined with your Account Password to authenticate you with our server and encrypt your 1Password data.
Learn more
Secure Remote Password protects your data in transit.
Your 1Password account uses SRP to authenticate your credentials without sending them over the Internet. It also encrypts all traffic sent to our server.
Learn more1Password is private by design.
Your data is yours, and we don’t want to know anything about it. We don’t use it, we don’t share it, and we don’t sell it.
We only collect the information necessary to provide our services and help you with troubleshooting. Personally identifiable information is never shared with third parties.
Learn more about 1Password and your privacy
1Password protects you from breaches and other threats.
1Password security begins with encryption, and we’ve taken additional steps to limit your exposure to threats outside of 1Password.
Alerts you to security breaches
Watchtower alerts you about password breaches and other security problems with your 1Password items.
Protects you from phishing
You can fool a human, but you can’t fool 1Password. It only fills your account details on the sites where you saved them.
Only works in verified browsers
1Password only fills your details after it verifies that your browser has been signed by an identified developer.
Removes secrets from your clipboard
To prevent people or clipboard tools from learning your secrets, 1Password regularly removes item details from the clipboard.
Intelligent autofill
1Password securely fills credentials directly into websites, so you don’t have to type or paste your password.
Always requires your input
To protect your data from shoulder surfers and browser-based attacks, 1Password only displays or fills data when you tell it to.
1Password complies with the most stringent industry standards for data confidentiality, integrity, and availability.
Read our GDPR Statement
Secrets Automation
Secure, orchestrate, and manage your company's infrastructure secrets with 1Password Secrets Automation.
Find out more
We describe our security design in our white paper.
We’ve documented our entire security design for experts to review. Here are just a few of the processes we cover:
- Tamper-proof, authenticated encryption
- Brute-force protection with PBKDF2
- Secure vault sharing
- Account recovery
We use open standards that are scrutinized by the experts.
1Password wasn’t built in a vacuum. It was developed on top of open standards that anyone with the right skills can investigate, implement, and improve. We collaborate with other security experts to make sure 1Password is rock solid.
"The security controls observed in the 1Password application were found to be substantial and unusually impressive."
Learn more about our security audits
1Password Families
A family password manager solution that will bring peace of mind for you and your family.
Learn more