1Password ports and domains

Learn which ports and domains 1Password uses, so you can make sure they’re accessible.

To use 1Password behind a firewall, add port 443 and the following domains to your whitelist:

Accounts on 1Password.com	Accounts on 1Password.eu	Accounts on 1Password.ca
*.1password.com	*.1password.eu	*.1password.ca
*.1passwordusercontent.com	*.1password.com	*.1password.com
	*.1passwordusercontent.eu	*.1passwordusercontent.ca

Outbound connections

1Password makes outbound connections to the following domains for the purposes described:

*.1passwordusercontent.com / .ca / .eu

Provides user content (attachments, documents, avatars) for 1Password accounts.

*.1password.com / .ca / .eu

Various subdomains on these domains are used for providing the 1Password.com service.

app-updates.agilebits.com

Determines if an update is available for 1Password apps and provides download URLs for the update based on current 1Password build version and beta status.

cache.agilebits.com

Serves as a download point for 1Password application updates.

watchtower.1password.com

Provides the Watchtower database and serves as a download point for 1Password application updates.

api.pwnedpasswords.com

When enabled, the Vulnerable Passwords feature of Watchtower checks partial hashes of passwords against Have I Been Pwned using this domain. Learn more about Watchtower privacy.