1Password ports and domains

Learn which ports and domains 1Password uses, so you can make sure they’re accessible.

To use 1Password behind a firewall, add port 443 and the following domains to your whitelist:

Accounts on 1Password.com	Accounts on 1Password.eu	Accounts on 1Password.ca
*.1password.com	*.1password.eu	*.1password.ca
a.1passwordusercontent.com	c.1password.com	c.1password.com
f.1passwordusercontent.com	a.1passwordusercontent.eu	a.1passwordusercontent.ca
	f.1passwordusercontent.eu	f.1passwordusercontent.ca

Outbound connections

1Password makes outbound connections to the follow domains for the purposes described:

cache.agilebits.com

Serves as a download point for 1Password application updates.

app-updates.agilebits.com

Determines if an update is available for 1Password apps and provides download URLs for the update based on current 1Password build version and beta status.

b5n.1password.com/.ca/.eu

Informs the 1Password apps when there may be new or modified items to download.

c.1password.com

Provides the Watchtower database and serves as a download point for 1Password application updates.

*.1password.com/.ca/.eu

Various subdomains on these domains are used for providing the 1Password.com service.

api.pwnedpasswords.com

When enabled, the Vulnerable Passwords feature of Watchtower checks partial hashes of passwords against Have I Been Pwned using this domain. Learn more about Watchtower privacy.

Security and privacy