Teams and business

About mobile device management

Learn how to use mobile device management to manage how your team uses 1Password on their devices.

If you’re an administrator in 1Password Teams or 1Password Business, you can use mobile device management (MDM) to enforce stricter controls for employees who use 1Password on their devices. You can use these settings to configure 1Password using your MDM solution.

The preference domain for 1Password 8 for Mac is com.1password.1password. These settings must be applied using MDM and cannot be set manually using the defaults command.

General

These settings allow you to control basic options for the 1Password app.

SettingKeyType
Start at loginapp.startAtLoginBoolean
Submit automatically with Universal Autofillsecurity.autofill.autosubmitBoolean

Security

These settings affect how a team member unlocks 1Password and uses data in it.

SettingKeyType
Allow Touch IDsecurity.authenticatedUnlock.
appleTouchId
Boolean
Allow Apple Watch Unlocksecurity.authenticatedUnlock.
appleWatchUnlock
Boolean
Set the password requirement timeframe*security.authenticatedUnlock.
requireAccountPasswordAfter
String
Set auto-lock timeout†
(in minutes)
security.autolock.minutesInteger
Lock on sleep, screensaver, or switching userssecurity.autolock.onDeviceLockBoolean
Lock when main window is closedsecurity.autolock.onWindowCloseBoolean
Allow 1Password to prevent your device from sleepingsecurity.blockSleepEnabledBoolean
Remove copied information and one-time passwords after 90 secondssecurity.clipboard.clearAfterBoolean
Use Universal Clipboard to copy to other devicessecurity.deviceClipboardSharingBoolean
Always show passwords and full credit card numberssecurity.revealPasswordsBoolean
Always show Wi-Fi QR codessecurity.revealWifiQrCodesBoolean

* The allowed values are one-day, two-weeks, thirty-days, and never.

† You can choose a number from 1 to 1440 (1 day).

Privacy

These settings allow you to manage settings related to privacy and Watchtower.

SettingKeyType
Show app and website iconsprivacy.downloadRichIconsBoolean
Check for compromised websitesprivacy.checkCompromisedWebsitesBoolean
Check for vulnerable passwordsprivacy.checkHibpBoolean
Check for two-factor authenticationprivacy.checkMfaBoolean
Check for passkeysprivacy.checkPasskeysBoolean

Browsers

These settings allow you to control how 1Password connects with browsers.

SettingKeyType
Allow connecting to a custom browserbrowsers.other-trusted-apps.
enabled
Boolean

Updates

These settings allow you to manage 1Password updates.

SettingKeyType
Automatically check for updatesupdates.autoUpdateBoolean
Set release channel*updates.updateChannelString

* The allowed values are PRODUCTION, BETA, and NIGHTLY.

The preference domain for 1Password 8 for iOS is com.1password.1password.

Security

These settings affect how a team member unlocks 1Password and uses data in it.

SettingKeyType
Allow Touch IDsecurity.authenticatedUnlock.
appleTouchId
Boolean
Allow Face IDsecurity.authenticatedUnlock.
appleFaceId
Boolean
Allow unlock with device passcodesecurity.authenticatedUnlock.
appleDevicePinUnlock
Boolean
Set the password requirement timeframe*security.authenticatedUnlock.
requireAccountPasswordAfter
String
Set auto-lock timeout†
(in minutes)
security.autolock.minutesInteger
Allow 1Password to prevent your device from sleepingsecurity.blockSleepEnabledBoolean
Clear clipboard after timeoutsecurity.clipboard.clearAfterBoolean
Use Universal Clipboard to copy to other devicessecurity.deviceClipboardSharingBoolean
Allow revealing passwordssecurity.revealPasswordsBoolean
Always show Wi-Fi QR codessecurity.revealWifiQrCodesBoolean

* The allowed values are one-day, two-weeks, thirty-days, and never.

† You can choose a number from 0 to 480. If you choose 0, the app will lock immediately when no longer in focus.

Privacy

These settings allow you to manage preferences related to privacy and Watchtower.

SettingKeyType
Show app and website iconsprivacy.downloadRichIconsBoolean
Check for compromised websitesprivacy.checkCompromisedWebsitesBoolean
Check for vulnerable passwordsprivacy.checkHibpBoolean
Check for two-factor authenticationprivacy.checkMfaBoolean
Check for passkeysprivacy.checkPasskeysBoolean

Notifications

These settings allow you to manage the notifications that team members receive from 1Password.

Notification typeKeyType
One-Time Passwordsapp.notifyCopyTotpToClipboardBoolean

Learn more

Published: