Password file synchronisation
1Password can be configured through 1Password.com,a paid subscription-based server sync service maintained by the developers. Local Wi-Fi and iCloud sync were only available on iOS and macOS in previous versions. [23] [24] [25]
In 2017,the Travel Mode feature was introduced for subscribers of 1Password.com,which enables the omission of password entries not tagged as safe for travel from the local storage on a particular device,reducing the impact of being obliged by officials to unlock access at the country border crossings. [26] [27]
Browser extensions
1Password integrates with desktop web browsers including Safari,Chrome,Firefox,Edge,and Opera. [28] The extension can remember logins for websites,fill in website logins automatically,and generate random passwords for new websites. [29]
To use browser extensions,the user must have administrative rights on the computer where the browser is installed. This has been a problem with users on a PC assigned by a workplace without admin rights. To address this problem,1Password offers plans for a monthly subscription fee aimed at businesses that allow web access to their usernames and passwords which can be copied and pasted into login screens. [30] Plans for family and individual use are also available. [31]
1Password also offers a standalone extension called 1Password X,available for Firefox,Chrome,and Opera. [32] 1Password X is designed to work without a companion desktop app,but a 1Password.com subscription is required. [33]
On the mobile side,1Password offers integration with browsers and apps on iOS and Android devices using various methods. More convenient methods of filling and saving login information are provided in iOS 12 [34] and Android Oreo (and later), [35] respectively.
History
In 2016,Der Standard highlighted 1Password to its readers as an effective tool for managing and organizing passwords. [36] In a 2017 Consumer Reports article,Dan Guido,the CEO of Trail of Bits,listed 1Password as a popular password manager (alongside Dashlane,KeePass,and LastPass),with the choice among them mostly up to personal preferences. [22]
Unlike previous versions,1Password 7 became a subscription service,though perpetual licenses were still available from within the app ($64.99 in 2018 [37] ). [22] [38] The option to store password vaults locally was removed in 1Password 8,which drew criticism. [39]
On November 14,2019,1Password announced a partnership with venture capital firm Accel,which invested $200 million in a Series A funding round and obtained a minority stake in the company. [40] It was the first outside funding in 1Password's history,and the largest single investment Accel had made to date. [41]
In 2021,1Password acquired SecretHub,a Dutch cybersecurity company. [42] It also raised $100 million in financing with a valuation of $2 billion. [43]
In January 2022,1Password raised a $620 million Series C round,the biggest funding round in Canadian history,led by Iconiq Growth,increasing the company's valuation to $6.8 billion. Notable individual investors that took part in this round were Ryan Reynolds,Robert Downey Jr.,and Justin Timberlake. [44]
In November 2022,1Password announced its acquisition of Texas-based Passkey tool provider Passage for an undisclosed sum. [45]
In September 2023,1Password surpassed $250 million in annual recurring revenue where more than two-thirds of its revenue is generated from more than 100,000 business customers. [46]
In November 2025,CEO David Faugno told CNBC that 1Password had surpassed $400 million in annual recurring revenue,and that the company was weighing a possible IPO in 2026 or 2027. [47]
Security Criticism
2017 Cloudbleed
In 2017,the Cloudflare infrastructure bug known as Cloudbleed raised concerns about potential data leakage affecting many major online services. [48] 1Password stated that its users were not at risk,emphasizing that its data remained protected through end-to-end encryption and did not rely solely on TLS. [49]
2017 Security vulnerabilities in Android App
A 2017 analysis by the Fraunhofer-Institut für Sichere Informationstechnologie (SIT) identified several security flaws in multiple Android password managers,including 1Password. [50] The issues,which include Password Leakage [51] ,Https downgrade to http URL [52] ,Titles and URLs Not Encrypted in Database [53] ,Read Private Data [54] and Information Leaked [55] ,were reported to the developers and subsequently fixed. [56]
2023 Okta Customer Service Breach
In October 2023,it was disclosed that 1Password was affected by a security incident involving Okta’s customer support system. According to 1Password,the suspicious activity was quickly contained,and no user,employee,or other sensitive data was compromised. [57]
A 2024 study by Hutchinson et al. examined the “password checkup”features of 14 password managers,including 1Password,using weak,breached,and randomly generated passwords. The authors found that the evaluated products reported weak and compromised passwords inconsistently and sometimes incompletely. No manager successfully flagged all known breached passwords. The study concludes that such inconsistencies may give users a false sense of security. [58]
2025 DOM-based Extension Clickjacking
Security researcher Marek Tóth presented a vulnerability in browser extensions of several password managers (including 1Password) at DEF CON 33 on August 9,2025. In their default configurations,these extensions were shown to be exposed to a DOM-based extension clickjacking technique,allowing attackers to exfiltrate user data with just a single click. [59] The affected password manager vendors were notified in April 2025. According to Tóth,1Password version 8.11.8.40 remains vulnerable. [60]
This page is based on this
Wikipedia article Text is available under the
CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.
