To use 1Password behind a firewall, add port 443 and the following domains to your whitelist:
| Accounts on 1Password.com | Accounts on 1Password.eu | Accounts on 1Password.ca |
|---|---|---|
| *.1password.com | *.1password.eu | *.1password.ca |
| *.1passwordservices.com | *.1password.com | *.1password.com |
| *.1passwordusercontent.com | *.1passwordservices.com | *.1passwordservices.com |
| *.1passwordusercontent.eu | *.1passwordusercontent.ca |
Outbound connections
1Password makes outbound connections to the following domains for the purposes described:
| Domain | Purpose |
|---|---|
| *.1password.com / .ca / .eu | Various subdomains on these domains provide the core 1Password service. |
| *.1passwordservices.com | Various subdomains on this domain provide supporting services for 1Password, like Duo integration and subscription management. |
| *.1passwordusercontent.com / .ca / .eu | Provides user content for 1Password accounts, like saved files and profile pictures. |
| *.1password.com | Provides 1Password app updates. |
| api.pwnedpasswords.com | Provides the vulnerable passwords feature in Watchtower using the Pwned Passwords service provided by haveibeenpwned.com. Learn more about Watchtower privacy. |
| in.appcenter.ms | Provides crash report management for 1Password for Mac and iOS. |
| api.privacy.com | Provides support for Privacy Cards. |
| fastmail.com, jmap.fastmail.com | Provides support for Masked Emails in Fastmail. |
| accounts.brex.com, platform.brex.com | Provides support for Brex virtual cards. |