Deploy 1Password for Mac and Windows

Deploy 1Password for Mac

Step 1: Plan your deployment

Determine which installer is best for your use case:

• If you need automatic app updates, download the 1Password.app installer.
• If you want your IT team to manage app updates, download the 1Password.pkg installer.

Step 2: Deploy 1Password

1Password must be installed in the /Applications folder to work properly. Don’t install the app in the user ~/Applications folder.

If your deployment tool requests a bundle identifier, enter com.1password.1password. If it also requests a group identifier, enter 2BUA8C4S2C.com.1password.

Step 3: Monitor for updates

Subscribe to the RSS feed to keep track of 1Password for Mac updates. To install updates, follow the guidelines for the installer you used:

• 1Password.app: Replace the installer at least every 6 months.
• 1Password.pkg: Replace the installer at least every month.

Deploy 1Password in a virtualized environment

If you deploy 1Password for Mac to a virtualized environment, you’ll need to make sure local data for the 1Password app is preserved between sessions. This will allow your users to unlock 1Password without entering their Secret Key or repeating the steps to set up a linked app or browser every time they’re provisioned to a new virtual machine.

Local data for 1Password is stored in this folder:

~/Library/Group\ Containers/2BUA8C4S2C.com.1password/Library/Application\ Support/1Password

To make sure your users can save and fill passwords in their browser, deploy 1Password in the browser for your team. The 1Password app also needs to be installed with the local data folder preserved between sessions.

Deploy 1Password for Windows

• Step 1: Choose an installer
• Step 2: Plan your deployment
  • Register 1Password for Windows as a managed installation
  • MSI-specific deployment options
  • Deploy 1Password in a virtualized environment
• Step 3: Deploy 1Password
• Step 4: Monitor for updates

Step 1: Choose an installer

Determine which installer is best for your use case:

If you need the legacy EXE installer, you can download it here. We'll be removing this installer in the near future, so we recommend using one of the current methods.

Step 2: Plan your deployment

Before you deploy 1Password, you can choose to register 1Password for Windows as a managed installation, configure MSI-specific deployment options, or learn how to 1Password deployment in virtual environments.

Register 1Password for Windows as a managed installation

You can also configure 1Password for Windows as a managed installation across your team member’s PCs. This allows you to manage 1Password settings through a mobile device management solution. It also removes other installations of the 1Password app that may exist on your team member’s PCs.

If you use the MSIX installer or App Installer option, deploy the following registry key to your team member’s PCs to configure this setting:

• Registry path: HKEY_LOCAL_MACHINE\SOFTWARE\Agilebits Inc.\1Password
• Registry key type: REG_SZ (String)
• Registry key name: ManagedInstall
• Registry value: X

If you use the MSI installer, set the MANAGED_INSTALL property to 1 when you deploy 1Password to your team to configure this setting.

MSI-specific deployment options

If you deploy the 1Password MSI, you can choose to configure some specific options:

• /norestart: Include this parameter to prevent team member’s PCs from restarting automatically to finish the installation of 1Password.
• MANAGED_UPDATE: Set this property to 1 to turn off the option for team members to update 1Password themselves.

Deploy 1Password in a virtualized environment

If you deploy 1Password for Windows to a virtualized environment, such as VMWare Horizon, you’ll need to make sure local data for the 1Password app is preserved between sessions. This will allow your users to unlock 1Password without entering their Secret Key or repeating the steps to set up a linked app or browser every time they’re provisioned to a new virtual machine.

Local data for 1Password is stored in this folder:

%LocalAppData%\1Password

To make sure your users can save and fill passwords in their browser, deploy 1Password in the browser for your team. The 1Password app also needs to be installed with the local data folder preserved between sessions.

Step 3: Deploy 1Password

Follow the steps in your deployment software to deploy the installer you downloaded in step 1. For example, to deploy 1Password with Intune, add it as a line-of-business app and assign it to your team. 

Step 4: Monitor for updates

Visit the 1Password Releases website or subscribe to the RSS feed to keep track of updates to 1Password for Windows. Follow these guidelines depending on how you handle automatic updates:

• If you allow your team members to update 1Password themselves, replace the installer at least every 6 months.
• If you choose to deploy 1Password updates manually, replace the installer at least every month.