Note: This review is based on 1Password’s official pricing pages, developer docs and security documentation, checked on September 27, 2026. We did not run hands-on benchmarks. 1Password runs promotions often, so confirm prices on its site before you buy.
Short answer: 1Password is worth paying for if you’re a developer who will use its tooling: the op CLI for injecting secrets, the SSH agent, Git commit signing and service accounts for CI. The old “$36/year” figure is now a first-year promo. The regular Individual price is $3.99/month, billed annually ($47.88/year). If you just need a password manager, Bitwarden does the core job for free (or $19.80/year for Premium) and is open source. NordPass is the cheaper paid option if you don’t need developer features.
1Password pricing (September 2026)
| Plan | Annual billing | Monthly billing | Who it’s for |
|---|---|---|---|
| Individual | $2.99/mo first year (promo), then $3.99/mo ($47.88/yr) | $4.99/mo | 1 person |
| Families | $4.49/mo first year (promo), then $5.99/mo ($71.88/yr) | $7.99/mo | Up to 5 family members included |
| Teams Starter Pack | $24.95/mo ($299.40/yr) for up to 10 members; up to 10 extra seats at $4.99/seat/mo | $29.95/mo | Small teams, up to 20 people |
| Business | $8.99/user/mo ($107.88/user/yr) | $10.99/user/mo | Companies needing IdP integration and admin controls |
| Enterprise | Custom quote | Custom quote | Large organizations |
What this means:
- The promo prices apply only to new customers who subscribe directly on 1Password.com, for the first year with annual billing. They don’t apply through the Apple App Store or Google Play.
- After year one, Individual goes from $35.88 to $47.88 a year.
- There’s no free plan, but Individual, Families, Teams Starter Pack and Business all have a 14-day free trial.
- Business includes a free Families plan for every user, for personal use.
Developer features
This is where 1Password stands apart from most competitors. According to 1Password’s developer docs:
| Feature | What it does | Notes |
|---|---|---|
1Password CLI (op) | Uses 1Password from your terminal, unlocked with biometrics | op run injects secrets into a process at runtime; op inject fills secrets into config templates |
| Secret references | op://vault/item/field URIs in place of plaintext secrets | Keeps real credentials out of .env files and repos |
| Shell plugins | Authenticates third-party CLIs with biometrics instead of stored API keys | Removes plaintext tokens from dotfiles |
| SSH agent | Serves SSH keys to your existing SSH and Git clients; keys never leave 1Password | Approve each request with Touch ID or Windows Hello |
| Git commit signing | Sets up SSH-based commit signing from the app | Uses the same SSH keys stored in 1Password |
| Service accounts | Non-personal credentials for CI/CD and automation, used with the CLI | Up to 100 per account; rate limits depend on plan |
| Connect server | Self-hosted secrets API for production infrastructure | The docs suggest service accounts for test environments and Connect for production |
Service account rate limits:
| Plan | Per token, per hour | Per account, per 24 hours |
|---|---|---|
| Business | 10,000 reads / 1,000 writes | 50,000 |
| Teams | 1,000 reads / 100 writes | 5,000 |
| Individual and Families | 1,000 reads / 100 writes | 1,000 |
If a CI pipeline pulls secrets on every build, the Individual plan’s 1,000-per-day account limit is easy to hit. Teams or Business raise it considerably.
Security model: the Secret Key
1Password’s main security difference is the Secret Key. Every account has two secrets:
- Your account password, which you memorize.
- A Secret Key: 34 letters and numbers, adding 128 bits of entropy. It’s generated on your device and stored on the devices you’ve signed in on and in your Emergency Kit. 1Password never has it.
The two are combined to create the key that encrypts your data. 1Password says “someone who attempts a brute-force attack on our servers won’t be able to decrypt your data without your Secret Key.” This is exactly the attack that hurt LastPass users after its 2022 breach, when stolen vaults protected only by a master password became open to offline cracking. The details are in our LastPass vs NordPass comparison.
The trade-off: 1Password can’t recover a lost Secret Key. Keep your Emergency Kit somewhere safe.
Audits and certifications (per 1Password’s security pages):
- SOC 2 Type 2.
- ISO 27001:2022, 27017:2015, 27018:2019 and 27701:2019 certifications.
- Independent assessments, including a penetration test and code review by Independent Security Evaluators (ISE). Pen-test reports are now published through the 1Password Trust Center.
- An ongoing bug bounty program on HackerOne covering the 1Password service and web app.
Other features that matter
- Apps for macOS, iOS, Windows, Android and Linux, plus browser extensions for Chrome, Firefox, Edge, Brave and Safari.
- Passkeys: save them and use them to sign in from the browser.
- One-time passwords (TOTP): 1Password can act as your authenticator.
- Watchtower alerts for weak, reused and compromised passwords.
- 1 GB of storage per user on Individual and Families.
- Travel Mode, and secure item sharing.
1Password vs the alternatives
| 1Password Individual | Bitwarden | NordPass Premium | |
|---|---|---|---|
| Free plan | No (14-day trial) | Yes: unlimited devices and passwords | Yes: one active session at a time |
| Paid price | $35.88 first year, then $47.88/yr | Premium: $19.80/yr | $1.39/mo on a 2-year plan ($37.53 for the first 27 months) |
| Open source | No | Yes | No |
| Secrets tooling | Yes (op CLI, service accounts) | Separate Bitwarden Secrets Manager product | Not listed |
| SSH agent / commit signing | Yes | Not covered here | Not listed |
| Built-in TOTP | Yes | Premium | Premium |
| Self-hosting | No | Yes | No |
Bitwarden is the honest default for developers on a budget. The free plan covers unlimited devices, passkeys and sharing with one other user, the code is open source, and you can self-host. Premium adds TOTP and file attachments for $19.80 a year.
NordPass is a good fit if you want a polished, cheap paid manager and don’t need developer tooling. Premium is $1.39/month on a 2-year plan and includes an authenticator, sharing and breach scanning. See NordPass’s current plans.
Which should you pick?
| Your situation | Pick |
|---|---|
You want secrets out of .env files and SSH keys behind biometrics | 1Password |
| CI/CD pipelines need vault access | 1Password Teams or Business (higher service-account limits) |
| $0 budget, or you want open source and self-hosting | Bitwarden |
| Want a cheap paid manager, no dev tooling needed | NordPass Premium |
| Family of up to 5 | 1Password Families, or Bitwarden Families at $47.88/yr for 6 |
| Team of 10 or fewer | 1Password Teams Starter Pack ($24.95/mo flat) |
Pros and cons
Pros
- The best developer tooling of the mainstream managers:
opCLI, secret references, shell plugins, SSH agent, commit signing and service accounts. - The Secret Key protects against offline cracking even if 1Password’s servers are breached.
- SOC 2 Type 2 and four ISO certifications, independent pen tests and a HackerOne bug bounty.
- Native apps on all major desktop and mobile platforms, including Linux.
- Business includes free Families accounts for employees.
Cons
- No free plan.
- The $35.88 price is first-year only. It renews at $47.88.
- Costs more than Bitwarden Premium and NordPass Premium.
- Not open source, and no self-hosting.
- Lose your Secret Key and Emergency Kit and your data can’t be recovered.
FAQ
How much does 1Password cost in 2026? Individual is $3.99/month billed annually ($47.88/year), or $4.99 month-to-month. New customers who buy directly get the first year at $2.99/month ($35.88).
Is 1Password still $36 a year? Only for your first year, as a new customer buying directly with annual billing. It renews at $47.88.
Does 1Password have a free plan? No. There’s a 14-day free trial on Individual, Families, Teams Starter Pack and Business.
Can 1Password manage SSH keys? Yes. The SSH agent serves keys stored in 1Password to your existing SSH and Git clients, with Touch ID or Windows Hello approval. It can also set up SSH commit signing.
What’s the difference between service accounts and Connect?
Service accounts are tokens the op CLI uses for automation such as CI jobs, with no extra infrastructure. Connect is a server you host that exposes a secrets API to your apps. 1Password suggests service accounts for test environments and Connect for production.
Is Bitwarden good enough instead of 1Password? For storing and filling passwords, yes, and its free plan is generous. Pick 1Password if you’ll use its CLI, SSH agent and service accounts every day. For more comparisons, see Dashlane vs 1Password and our best free password managers guide.
Sources, checked September 27, 2026: 1Password personal pricing, 1Password business pricing, 1Password CLI docs, 1Password SSH agent docs, 1Password service accounts, Service account rate limits, 1Password security, About the Secret Key, 1Password security assessments, 1Password one-time passwords, 1Password passkeys, Bitwarden pricing, NordPass plans.