1Password is a Canadian cybersecurity company specializing in credential protection and secure digital access. Based in Toronto, it made its name with a password manager that stores sensitive information in encrypted vaults. Its offering, presented on 1password.com, serves individuals and families as well as IT teams and large organizations.
Roots in the Apple ecosystem
The story begins in 2005 under the name AgileBits. At the time, the software aimed to simplify password management, particularly on Mac, sparing users the need to memorize numerous credentials or reuse the same secrets. The company gradually expanded its presence to major operating systems, browsers and mobile devices.
The shift to a subscription model accompanied the development of family and business offerings. Having grown for many years without significant institutional funding, the company later brought in equity investors to accelerate its development. This evolution marked its transition from a personal productivity tool to a platform more focused on organizations’ security needs.
Protecting secrets and governing their use
The password manager remains at the core of the offering: generating unique credentials, autofill, synchronization across devices and controlled sharing of sensitive data. Vaults can also hold documents, secure notes and payment information. For businesses, administrative features help organize access rights, support employee onboarding and offboarding, and enforce security policies.
Protection relies on an encryption architecture designed to prevent the software provider from reading the contents of the vaults. In its standard operation, 1Password notably combines the account password with a secret key held by the user. The service also flags certain compromised, weak or reused passwords to make them easier to replace.
The software provider also supports the adoption of passkeys, which reduce reliance on traditional passwords. It offers tools for developers to manage technical secrets, such as API keys. The acquisition of Kolide in 2024 strengthens another area: checking devices’ security posture before they access business resources.
What next?
With its approach called “Extended Access Management”, 1Password aims to cover access that falls outside traditional identity management systems. This particularly concerns applications adopted directly by teams and devices subject to insufficient oversight. Its challenge will be to connect these controls with an experience simple enough to sustain everyday use. Faced with password managers built into browsers and enterprise security platforms, its differentiation will depend on this combination of ease of use, protection of secrets and visibility for IT managers.