If you’re an administrator in 1Password Teams or 1Password Business, you can use mobile device management (MDM) to enforce stricter controls for employees who use 1Password on their devices. You can use these settings to configure 1Password using your MDM solution.
The preference domain for 1Password 7 for Mac is com.agilebits.onepassword7.
Security
These settings affect how a team member unlocks 1Password and uses data in it.
| Setting | Key | Type |
|---|---|---|
| Allow Touch ID | OPPrefBiometryAllowed | Boolean |
| Allow Apple Watch Unlock | OPPrefAppleWatchAllowed | Boolean |
| Set 1Password account password timeout (in minutes) | OPPrefMasterPasswordTimeoutInMinutesKey | Integer |
| Conceal passwords | ConcealPasswords | Boolean |
| Lock on sleep | LockOnSleep | Boolean |
| Lock when screen saver is activated | LockOnScreenSaver | Boolean |
| Lock when main window is closed | LockOnMainAppExit | Boolean |
| Lock when fast user switching | LockOnUserSwitch | Boolean |
| Lock after computer is idle | LockOnIdle | Boolean |
| Set autolock timeout (in minutes)* | LockTimeout | Integer |
| Clear clipboard after timeout | settingClearPasteboardAfterTimeout | Boolean | Set clear clipboard timeout (in seconds)† | PasteboardClearTimeout | Integer |
| Allow Universal Clipboard | OPPrefAllowUniversalClipboard | Boolean |
| Approve sign-ins with Duo in the app‡ | OPMFALegacyDuoKey | Boolean |
* Requires LockOnIdle.
† Requires settingClearPasteboardAfterTimeout.
‡ Applies if Duo is turned on. This prevents using a security key
to authenticate with Duo.
Notifications
These settings allow you to manage the notifications that team members receive from 1Password.
| Setting | Key | Type |
|---|---|---|
| One-time passwords | OPPreferencesNotifyOfTOTPCopy | Boolean |
| Vault access | OPPreferencesNotifyVaultAddedRemoved | Boolean |
| Watchtower alerts | OPPreferencesNotifyCompromisedWebsites | Boolean |
Updates
These settings allow you to manage 1Password updates.
| Setting | Key | Type |
|---|---|---|
| Automatically check for updates | CheckForSoftwareUpdatesEnabled | Boolean |
| Don't show What's New messages after updates | OPPreferencesWhatsNewDialogDisabled | Boolean |
| Don't show notifications for major upgrades | OPPreferencesBulletinServiceDisabled | Boolean |
The preference domain for 1Password for iOS is com.agilebits.onepassword-ios.
Security
These settings affect how a team member unlocks 1Password and uses data in it.
| Setting | Key | Type |
|---|---|---|
| Allow Touch ID and Face ID | OPPrefBiometryAllowed | Boolean |
| Allow PIN unlock | OPPrefPINAllowed | Boolean |
| Set 1Password account password timeout (in minutes)* | OPPrefMasterPasswordTimeoutInMinutesKey | Integer |
| Allow Universal Clipboard | OPPrefAllowUniversalClipboard | Boolean |
* To set the 1Password account password timeout to “After restart”, set the value to 0.
If you modify any keys after deployment, the team member will only receive the updated values the next time they unlock the 1Password app.
Notifications
These settings allow you to manage the notifications that team members receive from 1Password.
| Notification type | Key | Type |
|---|---|---|
| One-time passwords | OPPreferencesNotifyOfTOTPCopy | Boolean |
| Vault access | OPPreferencesNotifyVaultAddedRemoved | Boolean |
| Watchtower alerts | OPPreferencesNotifyCompromisedWebsites | Boolean |
AutoFill
These settings allow you to manage the suggestions that appear above the keyboard.
| Setting type | Key | Type |
|---|---|---|
| Show Usernames and Websites | OPAutoFillExportMetadataKey | Boolean |
Updates
These settings allow you to manage 1Password updates.
| Setting | Key | Type |
|---|---|---|
| Don't show notifications for major upgrades | OPPreferencesBulletinServiceDisabled | Boolean |
Security
These settings affect how a team member unlocks 1Password.
| Setting | Key | Type |
|---|---|---|
| Allow Biometric Unlock | OPPrefBiometryAllowed | Boolean |
| Allow PIN unlock | OPPrefPINAllowed | Boolean |
| Set 1Password account password timeout (in minutes)* | OPPrefMasterPasswordTimeoutInMinutesKey | Integer |
* To set the 1Password account password timeout to “After Lock”, set the value to -999.
If you modify any keys after deployment, the team member will only receive the updated values the next time they unlock the 1Password app.