1Password Review (2026): Features, Security Design, Pricing and Drawbacks

Executive Summary

1Password has transitioned over the years from a standalone, locally-hosted vault app to a fully cloud-synced subscription service. It is widely considered one of the leading password managers for personal and enterprise use. In this review, we break down what 1Password actually delivers in 2026, focusing purely on its documented features, security architecture, and pricing.

We did not run our own hands-on test of 1Password. This review is built from the vendor's published documentation and public information, and we say where something could not be verified. 1Password is distinguished heavily by its "Secret Key" architecture, a second layer of encryption that runs locally on your device, separating it from competitors that rely solely on a master password.

Security Architecture: The Secret Key

The core of 1Password's security model is its dual-factor encryption scheme. While almost every password manager uses AES-256 bit encryption and PBKDF2 (or Argon2) to derive a key from your Master Password, 1Password adds a unique 34-character Secret Key.

How the Secret Key Works

When you first create a 1Password account, your device generates this Secret Key locally. It is never sent to 1Password's servers in plaintext.

To decrypt your vault, the software requires both your Master Password (which you memorize) and the Secret Key (which is stored locally on authenticated devices or printed on your Emergency Kit). This means that even if a malicious actor were to completely breach 1Password's servers and steal the encrypted vaults, they could not brute-force the vaults using just a database of compromised passwords. They would also need the locally-generated Secret Key for every specific user.

This architecture is a massive defensive moat and is the primary reason many security professionals recommend 1Password. It heavily mitigates the risk of a centralized server breach affecting end-users.

Core Features Overview

Beyond standard password storage and form-filling, 1Password includes several notable features that define its current tier offering.

• Passkey Support

  1Password supports saving passkeys in your vault and using them to sign in to supported websites without typing a password. Passkey support depends on the website, your browser and your operating system version, so check 1Password's passkey documentation for the platforms you use.

• Watchtower

  Watchtower is 1Password’s built-in auditing tool. It cross-references your saved logins with HaveIBeenPwned to alert you if a site you use has been compromised. It also flags reused, weak, or expiring passwords, and warns you if you are using HTTP instead of HTTPS on saved URLs.

• Travel Mode

  A unique feature for international travelers. By toggling Travel Mode on your 1Password web dashboard, the apps on your devices will automatically remove vaults that aren't marked as "safe for travel." This prevents border security from forcing you to unlock and expose sensitive work or personal vaults.

Pricing (October 2026)

1Password does not offer a free tier. They offer a 14-day free trial, after which a paid subscription is required.

*Prices are the figures shown in 1Password listings as of October 2026; the vendor's pricing page is rendered client-side, so we could not read it directly. Promotions change, so confirm the current price on 1Password.com before you buy.

Getting Started: What Setup Involves

Setting up 1Password is more deliberate than turning on a browser's built-in password saver, mainly because of the Secret Key. A typical first-time setup follows these steps, based on 1Password's published onboarding flow:

1. Create the account and master password. Choose a long, unique master password you can remember, because it is never stored by 1Password in a form it can read.
2. Save the Emergency Kit. 1Password generates a document containing your account details and Secret Key. Store a printed copy somewhere safe, because you will need it to sign in on a new device.
3. Install the apps and browser extension. Desktop apps, mobile apps and browser extensions all connect to the same vault.
4. Import existing logins. Most people move data from a browser or another manager using an export file, then delete that export afterwards because it is unencrypted.
5. Run Watchtower. Review reused, weak or exposed passwords and fix the most important accounts first, such as email and banking.

The trade-off is a few more minutes at the start in exchange for a stronger security model. If you would rather not manage an Emergency Kit at all, a simpler manager may suit you better.

Team and Business Capabilities

While the Individual and Families plans are popular, 1Password also sells plans for teams and businesses. The same encryption design that protects single users is paired with administrative controls aimed at organizations.

1Password's Teams and Business plans offer shared vaults with permission controls, so administrators can decide who can view, edit or manage the credentials in a given vault. Exact plan prices and which features sit in which tier change over time and are listed on the vendor's pricing page, so we do not quote team prices here. Check that page for current figures before you decide.

According to 1Password's business documentation, higher tiers add identity-provider integrations, automated provisioning and enforceable security policies. Confirm which of these your chosen tier includes, because features vary by plan. 1Password has also stated that its business plans include a family account for each employee, which is worth verifying with the vendor if it matters to you.

Who 1Password Fits, and Who Should Look Elsewhere

If you are weighing 1Password against LastPass specifically, our 1Password vs LastPass comparison covers pricing and security design side by side.

Drawbacks and Limitations

While 1Password is an industry leader, there are a few objective drawbacks to consider before committing to the ecosystem:

• No Free Tier: Unlike Bitwarden or standard iCloud Keychain, 1Password has no permanent free version. Once the trial ends, you must pay.
• Secret Key Burden: If you lose your Master Password AND your Emergency Kit containing the Secret Key, your data is gone. 1Password cannot recover it for you. This strict security model requires the user to be responsible with their Emergency Kit.
• Electron App Architecture: With version 8, 1Password moved its desktop applications (macOS and Windows) to the Electron framework. While this unifies the codebase, some users prefer the lower memory footprint of a fully native application (like the older 1Password 7 on Mac).

How This Review Was Built and What We Could Not Verify

This page draws on 1Password's published documentation, public pricing listings and its documented security design. We did not run our own long-term hands-on test, so we make no claims about everyday speed, autofill reliability or customer support quality beyond what the vendor documents.

• We could not read the vendor's pricing page directly, so prices are marked as listings from October 2026.
• We do not quote team or business prices, because they change and we could not confirm current figures.
• Feature availability differs by plan and platform. Confirm any feature you depend on in 1Password's documentation before you subscribe.

Frequently Asked Questions