1Password

What it does

1Password is a password and secrets manager. It stores logins, passkeys, cards, secure notes and software keys in encrypted vaults, and fills them in on your desktop, phone and browser. You remember one strong passphrase and the app handles the rest, so every account can have a long, unique password.

For businesses it adds the admin layer: shared vaults, provisioning and deprovisioning, custom policies, sign-in through your single sign-on provider and a Watchtower dashboard that flags weak or exposed passwords.

Why you would need it

The pain shows up the first time someone leaves. Passwords sit in a spreadsheet, a chat thread or a browser, and nobody is sure what that person could still reach. Or a new hire waits two days because the only person with the login is on holiday.

With shared vaults, access becomes a structure you manage. You add a person to a vault, and you remove them from it. Nothing has to be sent over email or Slack, and nobody has to remember who knew what.

Where it fits

It sits underneath every other tool in your stack. It holds the logins for your CRM, ad accounts, hosting and bank, and it can hold the API keys that your automations and scripts use. It feeds your browsers and your command line, and it replaces browser password storage, shared spreadsheets and the notes file with credentials in it.

It also reaches past passwords. The vendor offers a command-line tool, SDKs, service accounts and a Connect server for developers and operators who need secrets inside real workflows.

What stands out

• Sharing that reaches outside the company. You can share an item through an expiring link with someone who has no 1Password account, which is handy for agencies and freelancers.
• Watchtower gives admins one view of weak passwords, breaches and access.
• Passkey support, so you can sign in without a password where a site offers it.
• A developer side that treats secrets as a first-class thing: CLI, service accounts and SDKs.

My take

I would pick 1Password as soon as a company has more than a few people and more than a handful of shared accounts. The real value is not the autofill. It is knowing who can reach what, and being able to take that away in one place.

What I would watch is the cost of seats once the whole company is on it, and the fact that it is a hosted service. If you want a vault that never leaves your own server, this is not it. Getting a full vault out later is possible, but plan some time for it.

Verdict

Pick it when you share credentials across a team, or when your automations need a proper place to keep keys. Skip it when you are one person with a couple of logins and the built-in password manager of your phone is enough, or when you need a fully self-hosted vault.