Software review
1Password
Hands-on 1Password review for US & UK users—features, pricing reality, pros/cons, alternatives, and who should buy. Updated STA take for password manager shoppers.
Editor's ChoiceSTA Score
From Per-user monthly/annual (Families/Business tiers)
Windows · macOS · Linux · Android · iOS
Pros
- Best-in-class UX for daily password + passkey workflows
- Travel Mode and Watchtower-style hygiene cues
- Excellent sharing for families and small teams
- Strong browser extensions and CLI for power users
Cons
- No meaningful long-term free tier for full use
- Teams should budget seats deliberately
- Migrating from another vault takes a focused afternoon
- Offline edge cases still require good device hygiene
9 min read · Updated 2026-08-12
1Password is the password manager we recommend when the deciding factor is whether people will actually use the vault every day. This 2026 review is for US and UK buyers choosing between 1Password, Bitwarden, Apple/Google built-ins, Dashlane, and Keeper—not for people hunting a forever-free vault with zero polish.
1Password wins when UX friction is low enough that unique passwords and passkeys become habit instead of a New Year’s resolution.
Quick verdict
1Password earns about 4.7 / 5 for individuals, families, and small teams who will pay for a refined vault, Watchtower-style hygiene prompts, and sharing that does not feel like IT homework. Bitwarden often wins on price and open-source preference. Built-in keychains win when your life is single-ecosystem and simple. 1Password wins when adoption across devices is the real security control.
STA angle: clarity and daily workflow quality are excellent; value depends on how many seats you truly need.
What 1Password is (and is not)
1Password is a cross-platform password manager and secure item vault. It stores logins, passkeys, secure notes, credit cards, SSH keys (for many power users), and shared vaults for families or businesses. Encryption is designed so that 1Password’s servers should not be able to read your vault contents without your secrets—your account password and Secret Key (plus device unlock methods) are load-bearing. Treat recovery materials like cash.
What it is optimized for:
- Fast autofill across browsers and mobile OS password flows
- Family and small-team sharing without spreadsheet chaos
- Passkey storage alongside classic passwords during the long transition decade
- Travel and device-loss workflows that non-experts can rehearse
What it is not:
- A free forever full-featured consumer plan (budget for Individual / Families / Business)
- A replacement for endpoint antivirus or phishing common sense
- Magic protection if you reuse your account password elsewhere or screenshot recovery kits into chat apps
- Instant migration without an afternoon of cleanup when you leave LastPass/Bitwarden/Chrome
If marketing promises “never think about passwords again,” translate that to: “you will think about them once during setup, then mostly during unlock and sharing.”
Core features that matter day to day
1. Vault UX and autofill that people keep enabled
The product’s advantage is boring excellence: saving a new login takes seconds, autofill is usually trustworthy, and the apps feel native enough that relatives stop disabling extensions. In 2026, passkey support and OS integration matter as much as classic password fill. Test your top ten sites during onboarding—banks and government portals still surprise every manager.
2. Watchtower-style hygiene without scareware
Breach alerts, reused-password warnings, and weak-password nudges only help if they are actionable. 1Password’s hygiene surfaces are among the least hysterical in the category. Use them to schedule a monthly “fix ten worst items” cleanup rather than doomscrolling a 400-item red list in one night.
3. Travel Mode and device realism
Travel Mode (remove sensitive vaults from devices before border crossings, restore later) remains a standout for journalists, consultants, and anyone who crosses jurisdictions with a laptop. Even if you never use it, the existence of a rehearsed “thin device” workflow is a maturity signal. Separately: practice unlocking after a phone replacement before you lose the phone.
4. Sharing for Families and Business
Families plans beat emailing passwords. Business/Teams tiers add admin controls, provisioning patterns, and shared vaults for agencies. The failure mode is oversharing an “Everything” vault. Design vault taxonomy on day one: Personal, Household, Finance, Work-Client-A—not one mega pile.
5. CLI, SSH, and developer extras
Power users should verify current CLI and SSH agent features if that is part of the purchase justification. Developers often standardize on 1Password because secrets stay out of dotenv files committed to git. That is a different buyer than a household sharing Netflix—do not pay Business pricing for a solo Netflix use case.
Pricing renewal notes (Families math matters)
1Password bills as per-user / per-seat with Individual, Families, and Business-style tiers. Promotions appear, but the category is less “first year $1.99 then shock” than consumer VPNs—still, renewals are real money.
Model these 2026 realities:
- Families is usually the rational buy once two or more adults share finances, kids’ school portals, and streaming.
- Individual is fine for a solo professional who already has a clean personal vault.
- Business seats add up quickly—count humans who need access, not devices.
- Student or nonprofit discounts may exist; verify on the official site rather than random coupon blogs.
- Canceling does not magically export your brain—export before you let a renewal lapse if you intend to leave.
Calendar habits:
- Reminder 21 days before renewal to confirm seat count (remove ex-roommates, departed contractors).
- Annual review of shared vault membership after holidays when temporary access sprawls.
- Store billing receipts in the vault itself under a Billing item.
US vs UK: currency display and VAT differ; buy on the storefront matching your card’s home to reduce double-tax confusion and support friction.
Setup checklist (the afternoon that determines success)
- Install apps from official sources only; enable the browser extension for your daily browser—not every browser you rarely open.
- Create the account carefully: long account password you will not reuse, save the Secret Key and Emergency Kit PDF offline (printed or encrypted USB—not only in email).
- Turn on unlock via platform biometrics where appropriate, but keep the account password memorized or in a sealed recovery plan.
- Import from the previous manager once, then freeze the old vault as read-only reference for two weeks.
- Fix the worst Watchtower items: reused banking passwords first, email password second, Apple/Google identity third.
- Create shared vaults with least privilege; invite family with clear ownership of each vault.
- Enroll phone and tablet; test autofill on a real checkout and a real banking login.
- Practice Emergency Kit recovery on a spare browser profile so you know the drill.
- Only then enable advanced developer features or SSH integrations.
If autofill fights a critical work SSO for three days straight, fix that before inviting the whole family—adoption dies on day-one friction.
Who should buy — and who should skip
Buy 1Password if you:
- Will use a vault daily across phone and laptop
- Need family or small-team sharing that non-experts can navigate
- Want polished passkey + password coexistence
- Value Travel Mode or structured emergency recovery
Skip 1Password if you:
- Are happy with Apple iCloud Keychain or Google Password Manager inside a single ecosystem and have strong device hygiene
- Want a free or very cheap open-source-first option (Bitwarden is the usual comparison)
- Only need to store five passwords and will not open an app weekly
- Cannot safely store an Emergency Kit (shared family PC with no privacy)
- Need advanced enterprise IAM features better served by a full workforce identity stack
Alternatives with real nuance
| Alternative | Choose it when… | Trade-off vs 1Password |
|---|---|---|
| Bitwarden | Price, open-source preference, or self-host option matters | UX polish varies; family sharing is good but different |
| Dashlane | You like VPN-adjacent bundling and guided dark-web extras | Pricing and feature packaging change often—read the matrix |
| Keeper | Business-heavy buying motion and compliance storytelling | Consumer delight is not always the focus |
| KeePassXC | You want local-first files and zero subscription | Sync and sharing become your problem |
| Apple / Google built-ins | Single-ecosystem household with disciplined updates | Cross-platform and rich sharing are weaker |
Also compare LastPass only with eyes open about historical incident fatigue—many households migrated away for trust reasons even when features looked fine on paper.
Security notes password-manager buyers forget
- Your vault is only as strong as the account password, device unlock, and phishing resistance of the unlock prompts.
- Autofill on random sites can be dangerous—prefer fill only on exact domains you trust.
- Shared vaults need offboarding: remove people the week access should end, not “someday.”
- Export formats are sensitive; treat CSV exports as temporary and delete them after import verification.
- 2FA for the 1Password account itself is non-negotiable in 2026.
Migration and coexistence tips
Moving from another manager usually fails because of duplicates and trash logins, not because encryption is hard. After import, sort by “recently used” and delete ghosts. Keep the old manager installed but signed out for two weeks as a safety net. If coworkers still send passwords in Slack, 1Password cannot fix culture—pair the tool with a one-page team rule: “secrets live in the vault.”
Offline moments still happen on planes. Ensure critical travel items are available under your current unlock policy, and do not discover airplane mode gaps at the gate.
Final score: 4.7 / 5
1Password remains our favorite paid password manager for people who will live in it daily. The subscription is the cost of habit formation done well—measure success by unique passwords adopted, not by feature checklist length.
FAQ
Is 1Password safe to install?
Yes from the official site or reputable OS stores. Phishing sites clone login pages—bookmark the real URL.
Does 1Password replace good habits?
No. It multiplies good habits. Reused passwords and approval of fake unlock prompts still burn people.
Is there a free version?
Not a meaningful long-term free full product. Trials exist; plan for a paid tier.
Will it slow my PC or Mac?
Desktop apps are generally light. Browser extension glitches are more common than CPU issues—update the extension if autofill stalls.
Can I share one license across the family?
Use a Families plan with proper seats rather than sharing one Individual login. Shared logins destroy auditability and recovery.
What is the biggest mistake buyers make?
Losing the Emergency Kit / Secret Key materials, or inviting everyone into one undifferentiated vault.
How is this different from iCloud Keychain?
1Password is cross-platform and stronger at structured sharing and item types. Keychain is excellent inside Apple-only lives.
Can I use passkeys only?
Not yet for every site. Expect a hybrid passwords + passkeys decade; 1Password is built for that overlap.