Teams and Businesses

About mobile device management

Learn how to use mobile device management to manage how your team uses 1Password on their devices.

If you’re an administrator in 1Password Teams or 1Password Business, you can use mobile device management (MDM) to enforce stricter controls for employees who use 1Password on their devices. You can use these settings to configure 1Password using your MDM solution.

1Password 8

The preference domain for 1Password 8 for Mac is com.1password.1password.

Security

These settings affect how a team member unlocks 1Password and uses data in it.

SettingKeyType
Allow Touch IDsecurity.authenticatedUnlock.appleTouchIdBoolean
Allow Apple Watch Unlocksecurity.authenticatedUnlock.appleWatchUnlockBoolean
Allow revealing passwordssecurity.revealPasswordsBoolean
Lock on sleep, screensaver, or switching userssecurity.autolock.onDeviceLockBoolean
Lock when main window is closedsecurity.autolock.onWindowCloseBoolean
Set auto-lock timeout *
(in minutes)
security.autolock.minutesInteger
Clear clipboard after timeoutsecurity.clipboard.clearAfterBoolean
Allow Universal Clipboardsecurity.deviceClipboardSharingBoolean

* You can choose a number from 1 to 1440 (1 day).

Privacy

These settings allow you to manage preferences related to privacy and Watchtower.

SettingKeyType
Show app and website iconsprivacy.downloadRichIconsBoolean
Check for vulnerable passwordsprivacy.checkHibpBoolean

Updates

These settings allow you to manage 1Password updates.

SettingKeyType
Automatically check for updatesupdates.autoUpdateBoolean
Set release channel*updates.updateChannelString

* The allowed values are PRODUCTION, BETA, and NIGHTLY.

1Password 7

The preference domain for 1Password 7 for Mac is com.agilebits.onepassword7.

Security

These settings affect how a team member unlocks 1Password and uses data in it.

SettingKeyType
Allow Touch IDOPPrefBiometryAllowedBoolean
Allow Apple Watch UnlockOPPrefAppleWatchAllowedBoolean
Set 1Password account password timeout
(in minutes)
OPPrefMasterPasswordTimeoutInMinutesKeyInteger
Conceal passwordsConcealPasswordsBoolean
Lock on sleepLockOnSleepBoolean
Lock when screen saver is activatedLockOnScreenSaverBoolean
Lock when main window is closedLockOnMainAppExitBoolean
Lock when fast user switchingLockOnUserSwitchBoolean
Lock after computer is idleLockOnIdleBoolean
Set auto-lock timeout
(in minutes)*
LockTimeoutInteger
Clear clipboard after timeoutsettingClearPasteboardAfterTimeoutBoolean
Set clear clipboard timeout
(in seconds)†
PasteboardClearTimeoutInteger
Allow Universal ClipboardOPPrefAllowUniversalClipboardBoolean
Approve sign-ins with Duo in the app‡OPMFALegacyDuoKeyBoolean

* Requires LockOnIdle.
† Requires settingClearPasteboardAfterTimeout.
‡ Applies if Duo is turned on. This prevents using a security key to authenticate with Duo.

Notifications

These settings allow you to manage the notifications that team members receive from 1Password.

SettingKeyType
One-time passwordsOPPreferencesNotifyOfTOTPCopyBoolean
Vault accessOPPreferencesNotifyVaultAddedRemovedBoolean
Watchtower alertsOPPreferencesNotifyCompromisedWebsitesBoolean

Updates

These settings allow you to manage 1Password updates.

SettingKeyType
Automatically check for updatesCheckForSoftwareUpdatesEnabledBoolean
Don't show What's New messages after updatesOPPreferencesWhatsNewDialogDisabledBoolean
Don't show notifications for major upgradesOPPreferencesBulletinServiceDisabledBoolean

1Password 7

The preference domain for 1Password 7 for iOS is com.agilebits.onepassword-ios.

Security

These settings affect how a team member unlocks 1Password and uses data in it.

SettingKeyType
Allow Touch ID and Face IDOPPrefBiometryAllowedBoolean
Allow PIN unlockOPPrefPINAllowedBoolean
Set 1Password account password timeout
(in minutes)*
OPPrefMasterPasswordTimeoutInMinutesKeyInteger
Allow Universal ClipboardOPPrefAllowUniversalClipboardBoolean

*  To set the 1Password account password timeout to “After restart”, set the value to 0.

If you modify any keys after deployment, the team member will only receive the updated values the next time they unlock the 1Password app.

Notifications

These settings allow you to manage the notifications that team members receive from 1Password.

Notification typeKeyType
One-time passwordsOPPreferencesNotifyOfTOTPCopyBoolean
Vault accessOPPreferencesNotifyVaultAddedRemovedBoolean
Watchtower alertsOPPreferencesNotifyCompromisedWebsitesBoolean

Autofill

These settings allow you to manage the suggestions that appear above the keyboard.

Setting typeKeyType
Show Usernames and WebsitesOPAutoFillExportMetadataKeyBoolean

Updates

These settings allow you to manage 1Password updates.

SettingKeyType
Don't show notifications for major upgradesOPPreferencesBulletinServiceDisabledBoolean

1Password 7

Security

These settings affect how a team member unlocks 1Password.

SettingKeyType
Allow biometric unlockOPPrefBiometryAllowedBoolean
Allow PIN unlockOPPrefPINAllowedBoolean
Set 1Password account password timeout
(in minutes)*
OPPrefMasterPasswordTimeoutInMinutesKeyInteger

*  To set the 1Password account password timeout to “After Lock”, set the value to -999.

If you modify any keys after deployment, the team member will only receive the updated values the next time they unlock the 1Password app.

Still need help?

If this article didn't answer your question, contact 1Password Support.

Published: