Teams and Businesses

Deploy 1Password for Mac and Windows

Learn how to deploy 1Password for Mac and Windows on multiple computers for your organization.

If you’re an IT administrator, you can deploy 1Password for Mac or Windows to computers across your organization.

Deploy 1Password for Mac

Tip

Before you begin, uninstall previous versions of 1Password on any Macs where you want to deploy the app.

To deploy 1Password for Mac to your organization, download the 1Password PKG installer.

1Password must be installed in the /Applications folder to work properly. Don’t install the app in the user ~/Applications folder.

If your deployment tool requests a bundle identifier, enter com.1password.1password. If it also requests a group identifier, enter 2BUA8C4S2C.com.1password.

If you deploy 1Password for Mac with the PKG installer, updates won’t install automatically. To update 1Password after you deploy it to your team, download the latest version of the PKG installer and redeploy it. You can visit the 1Password Releases website or subscribe to the RSS feed to check for app updates.

Deploy 1Password in a virtualized environment

If you deploy 1Password for Mac to a virtualized environment, you’ll need to make sure local data for the 1Password app is preserved between sessions. This will allow your users to unlock 1Password without entering their Secret Key every time they’re provisioned to a new virtual machine.

Local data for 1Password is stored in this folder:

~/Library/Group\ Containers/2BUA8C4S2C.com.1password/Library/Application\ Support/1Password

If you use 1Password Unlock with SSO, your team will need to use an existing trusted device to approve the new device every time they’re provisioned with a new virtual machine.

Deploy 1Password for Windows

Tip

Before you begin, uninstall previous versions of 1Password on any computers where you want to deploy the app.

To plan your deployment, consider how you’d like to install the app:

Per-user

  • Automatic updates are turned on and installed without administrator privileges.
  • Application files are installed to %LocalAppData%.

Machine-wide

  • Automatic updates are turned off. Your IT team must deploy new versions of 1Password.
  • Application files are installed to %ProgramFiles%.
  • Some msiexec commands are supported.

Important

1Password won’t automatically update when installed with the MSI. You can visit the 1Password Releases website or subscribe to the RSS feed to check for app updates.

To install 1Password on a per-user basis, download the 1Password .exe installer.

To deploy 1Password machine-wide, download the 1Password MSI.


Deploy 1Password in a virtualized environment

If you deploy 1Password for Windows to a virtualized environment, such as VMWare Horizon, you’ll need to make sure local data for the 1Password app is preserved between sessions. This will allow your users to unlock 1Password without entering their Secret Key every time they’re provisioned to a new virtual machine.

Local data for 1Password is stored in this folder:

%LocalAppData%\1Password

If your users are having trouble saving and filling in their browser, make sure 1Password is installed in the base image of your virtual machine and avoid snapshots where possible.

If you use 1Password Unlock with SSO, your team will need to use an existing trusted device to approve the new device every time they’re provisioned to a new virtual machine.

Get help

To get help deploying 1Password, contact your Customer Success Manager or 1Password Support.

Next steps

Still need help?

If this article didn't answer your question, contact 1Password Support.

Published: