1Password Review

Developed by Toronto-based AgileBits, 1Password is a password managing software that helps users keep track of their passwords, login to websites with just one click, and store other secure information like license numbers and credit card details.

The software protects user data through multiple layers of security, including AES-256-bit encryption, PBKDF2 key derivation, WebCrypto, and a unique 128-bit Secret Key.

1Password is available for all devices, browsers, and operating systems, being trusted by more than 40,000 businesses worldwide and used by a total of over 15 million users.

Using a Password Manager

Password managers are used to reduce the number of individual passwords and login information that one must remember when accessing different online accounts.

The most common features of all password managers are the master password, complex password generation, automatic form filling, and encryption.

A master password is, simply put, a password that is used to unlock access to other passwords. Master passwords are like the key to a safe: with it, one can unlock the “vault” where all the other passwords and sensitive information is stored. This is why most password managers and security experts will recommend users create a lengthy master password that includes both lower and uppercase letters, numbers, and even special characters.

Users can safely store all of their password and website login information in the password manager of their choice and access it later, so long as they do not forget the master password.

Managers also store URL information, helping users avoid potential phishing schemes where they are fooled into divulging sensitive account information on fraudulent look-alike sites.

Many password managers can randomly generate complex password suggestions to help users diversify their password vault. These randomly generated passwords can be used to update online accounts with weaker passwords, particularly older ones that may be easy to guess.

Forms can be automatically filled by some password managers, allowing for fast access to websites with login information that the software is already acquainted with.

Encryption is another defining feature of most password managers. Each manager employs different types of security mainframes, but they all encrypt user passwords one way or another, to avoid it from being disclosed. Common encryption and security tools include end-to-end encryption, AES-256 encryption, two-factor authentication, and key derivation functions.

Password managers are generally designed as subscription-based services. Some managers, however, are completely free, feature both free and paid versions, or can be purchased with a single payment.

Password managing software may be installed locally as an application and accessed as hardware device keys, or online through its websites. Likewise, when using encryption to protect password information, the data may be stored locally on the user’s device, or remotely in an online file-hosting service.

1Password—Getting Started

The first step to setting up 1Password is signing up for it on the software’s website. When signing up, consumers have to choose whether they are opting for an individual, family, or team plan, and will be asked to create their “Master Password”, which will also serve as their login key for their account on the website.

Consumers are then free to download 1Password application on any of the devices they wish to use it on, be it from the App Store for Mac and iOS devices, from Google Play for Android devices, or from the Microsoft Store for Windows devices.

Changes made on one device are immediately replicated on others. After installing the app(s) of their choice, consumers can start automatically saving and filling passwords on all of the websites they visit They can also go back to any passwords they have previously used, and make them stronger via 1Password’s complex password generator.

1Password Services and Features

1Password is designed to safeguard users’ data by encrypting it inside secure vaults. Vault content is encrypted with AES-256 technology, which the federal government employs to protect classified information, using keys derived from the Master Password and Secret Key, which are known only to the user.

Data is encrypted with these keys before ever being written to storage or sent over the network. Syncing occurs over TLS after the data has been encrypted, so AgileBits cannot read your data.

1Password’s Secret Key is an innovative approach that is designed to protect the user by providing a second layer of security. The Secret Key consists of a randomly generated set of 34 letters and numbers separated by dashes that is created when signing up to a device with 1Password for the first time. With that number of characters, there are slightly more than 2128 possible Secret Key combinations.

Secret Keys are stored locally, and are never sent to 1Password, which means that keys can only be accessed directly through each device. Additionally, they are also stored in the Emergency Kit, a PDF document with a user’s account details.

1Password’s Emergency Kit includes users’ sign-in address, email address, Secret Key, and QR setup code, as well as a field for them to record their Master Password.

Together with the user’s Master Password, this creates something AgileBits calls Two-Secret Key Derivation, or 2SKD. Because Secret Keys do not have to be memorized, they can be much stronger and, as such, impossible to guess.

Master Passwords have about 40 bits of entropy, depending on strength, whereas Secret Keys have an entropy of 128 bits. Master Password protects data on user devices while the Secret Key protects it off their devices. With 2SKD, you’re protected even if one of your secrets is compromised, or if AgileBits is hacked.

1Password.com is the online component that not only syncs your data but provides a secure place online to view and interact with your 1Password vaults.

1Password.com is also the first and only password manager to use WebCrypto, a cryptography function which is over 10x faster than traditional crypto libraries.

It provides direct access to the system’s secure random number generator in order to provide the same secure experience as in the apps.

Business Product

1Password also provides a business account option for companies who want to acquire password management software for their employees. Business accounts start at $19.99 to protect up to 10 team members, or $7.99 per user per month on annual billing for larger groups. 1Password's business product integrates with Slack, Azure AD, OneLogin and more to help establish seamless synergy across platforms used by your business. The company's software is also SOC2 Type 2 and GDPR and CCA compliant. This is in addition to all of the features already included in 1Password's commercial option for single users.

1Password Plans Offered

All of 1Password’s accounts come with the following features:

• Access on unlimited computers and devices

• A digital wallet to securely store credit cards, receipts, and more

• The 1Password Watchtower, which can send security alerts around-the-clock

• Free one-on-one support from AgileBits’ staff

• Advanced AES-256 encryption

• A personal security suite that can find weak or duplicate passwords and improve them

• A travel mode which protects your data from unwarranted searches when you travel by removing each vault from your devices

Inclusions:

• Web access and offline access
• Apps for Mac, iOS, Windows, Android, Linux, and Chrome OS
• Unlimited passwords and items
• 24/7 email support
• 1 GB document storage
• App upgrades
• Automatic syncing
• 365-day item history
• Two-factor authentication

1Password Individual and Families

Personal accounts are available for $2.99 per month. 1Password also offers an affordable family plan that covers five users for $4.99 per month.  Ideal for family units, and for those who want to share passwords and manage what their relatives can or cannot see, or do. Price: $4.99/mo.

Inclusions:

• Web and offline access

• Apps for Mac, iOS, Windows, Android, Linux, and Chrome OS

• Unlimited passwords and items

• 24/7 email support

• 1 GB document storage

• App upgrades

• Automatic syncing

• 365-day item history

• Two-factor authentication

• Up to five family members included (add more members for $1 each)

• Sharing passwords, credit cards, secure notes, and more

• Permission control through an admin console

• Account recovery for locked out family members

Password Protection Options for Business Users

Like the company's personal and family plans, 1Password team and business accounts are very reasonably priced.

Screenshot 03/25/2024

 

Inclusions:

• Web and offline access

• Apps for Mac, iOS, Windows, Android, Linux, and Chrome OS

• Unlimited shared vaults and item storage

• 24/7 email support

• 1 GB document storage

• App upgrades

• Automatic syncing

• Unlimited item history

• Two-factor authentication

• Basic access control (set read-only access for vaults)

• 5 guest accounts for limited sharing

• Business-wide multi-factor authentication

1Password Business

1Password Business is an excellent choice for for small- to medium-size businesses seeking both flexibility and control. It features the widest repertoire of tools for managing permissions and passwords, tracking changes, organizing teams, and more. The Business plan also include VIP support, which means users can get help whenever and as soon as they need it. 1Password also offers customized Enterprise plans for larger businesses.

Inclusions:

• Web and offline access

• Apps for Mac, iOS, Windows, Android, Linux, and Chrome OS

• Unlimited shared vaults and item storage

• 5 GB document storage

• App upgrades

• Automatic syncing

• Unlimited item history

• Two-factor authentication

• Basic access control (set read-only access for vaults)

• Business-wide multi-factor authentication

• 20 guest accounts for limited sharing

• Free family account for all team members

• Priority email support and access to VIP inbox

• Fine-grained permissions for every vault

• Custom roles and groups

• Usage reports

• Provisioning with Active Directory and Okta

Types of Password Manager
Web-Based Service	✔
Token-Based Hardware Device
Locally-Installed Software	X
Platforms
Windows	✔
iOS	✔
Android	✔
Mac	✔
Linux
Features
Mobile App	✔
Auto Fill and Auto Login	✔
Secure Sharing	✔
Two-Factor Authentication	✔
Password Generation	✔
Personal Data Protection	✔
Browser Integration	✔
File Attachments	✔
AES 256 Encryption	✔
Backup/Restore	✔
Security Audit	✔
Security Alerts	✔
Import/Export	✔
Plan Details
Free Desktop Version	✔
Free Trial	14 days
Money Back Guarantee	None
Cost Per Subscription	1Password: $2.99/mo, billed annually 1Password Families: $$4.99/mo, billed annually
Support
Security Monitoring	X (we don’t do this for you. See watchtower)
FAQs	✗
Video Tutorials	✔
Knowledge Center	✔
Live Chat	✗
Phone	✗
Email	✔

Password Manager 1Password

1Password is an affordable, secure, and convenient tool that can help users keep track of their passwords and log in securely to multiple websites.

The software is full of tools that both individual and groups can benefit from. Individual users will appreciate the affordable price and straightforward interface of the standard plan, whereas teams and businesses can take full advantage of the wide variety of sharing options, controls, and integrated functions available in the group plans.

Additional tools such as the travel mode and digital wallet round out the suite of features to create a truly comprehensive product. 1Password is one of the most secure password managers available today. Thanks to its Two-Secret Key Derivation system, hacking or accessing one’s account without permission is close to impossible.

The level of encryption that 1Password employs to protect users is praiseworthy, given its combination of end-to-end encryption, AES-256 encryption, and WebCrypto browser cryptography.

Moreover, the 1Password Watchtower feature ensures that users are made aware of any breaches into the websites and online services they use. 1Password is one of the overall strongest pieces of software in the password manager market, with stellar marks across all fields.