Security and Privacy

Your private information is yours, and we don't sell it or give it away. Wherever possible, we don't even collect it.

1Password uses a variety of security measures to encrypt your data, protect your Master Password, and safeguard your information.

Your Account Key is combined with your Master Password to harden the encryption of your data. Find out all you need to know about it here.

Learn how 1Password Teams can be used to securely share your electronic Protected Health Information.

Vault permissions are enforced in three ways. From strongest to weakest: cryptography, server policy, and client policy.

Read about our third-party reviews and the results of their assessments.

Get help when you lose your device. Find out how 1Password protects your information and what you should do.

A good Master Password is strong, unique, and hard for someone else to guess but memorable to you, but choosing one doesn't have to be hard. We'll show you how.

For the best compatibility, we recommend only using standard characters in your Master Password.

There are two ways Watchtower could have been designed: The easy way, and the privacy-preserving way. We chose the latter.

End user license agreement, copyright, and software licensing information.

1Password only looks at or touches your 1Password data, but you are right to be concerned about the access request. Here's the full story.

Here is a top level overview of what you can do to protect yourself from the XARA vulnerabilities made public in June 2015.

1Password is safe to use on your Apple Watch as long as you follow a few precautions.

1Password generates passwords not based on anything about the site. Find out how that compares to other systems.

Learn how 1Password protects your data when you use Fingerprint Unlock.

Learn how 1Password protects your data when you enable Spotlight to find 1Password items on your iOS device.

Learn how 1Password protects your data when you use Touch ID.

If someone knows one (or many) of the passwords in your vault that doesn't give them any advantage in accessing your encrypted secrets. 1Password is not vulnerable to "known plaintext attacks".

Learn how 1Password secures your information whether it's synced via a 1Password account, Dropbox, iCloud, or Wi-Fi.

It's relatively straightforward to calculate the strength of a password from the generator. Other passwords require a bit more voodoo.

The connection between 1Password mini and the browser extension is authenticated and secure. Read on for the full details.

Your 1Password data is encrypted on your device and remains encrypted when syncing, so you are not relying on the security of any other service to keep your data safe.

The short answer is 1Password uses the best available encryption from well-trusted and scrutinized cryptographic libraries.

Locking and unlocking 1Password does not mean that all the data is encrypted or decrypted at once. What we present is a simplified version of what happens under the hood.

There are two competing hypotheses for why banks give terrible password advice: the generous hypothesis and the not so generous hypothesis. We'll spell out the former.