Pricing and plans

Traditional IAM and PAM solutions focus on authenticating users or managing privileged accounts. Unified Access extends governance beyond authentication to control how credentials are stored, delivered, and exercised across developer endpoints, AI tools, and automated workflows. It addresses credential access across human and non-human identities without the complexity of deploying and managing traditional IAM or PAM systems for these use cases.

Unified Access provides visibility into AI tool and agent usage on developer endpoints, identifies exposed credentials, and delivers credentials securely at runtime. It ensures agent activity is governed and attributable across environments.

Unified Access provides unified attribution across humans, agents, and machines, allowing security teams to see who accessed what credential, when, and on whose behalf. This supports enterprise governance, incident response, and compliance requirements.

1Password uses a unique zero-knowledge architecture with dual-key encryption to keep your data private. Our Two-Secret Key Derivation (2SKD) model combines your account password with a device-generated Secret Key, ensuring only you can decrypt your data. Even when using SSO, decryption happens locally on trusted devices—your identity provider never sees your encryption keys. With support through the 1Password SDK for securely storing secrets used by AI agents, scripts, and service accounts, 1Password helps you protect all identities with complete visibility and control.

SaaS Manager helps IT teams discover, manage, and secure every SaaS application. It automates user provisioning and de-provisioning with 350+ direct app integrations, enforces access policies based on roles, and identifies risky or unused access to reduce security gaps. SaaS Manager also provides visibility into SaaS usage, shadow IT, and license spend—empowering teams to streamline operations, meet compliance standards like SOC2 and ISO 27001, and prevent unauthorized access with automated, no-code workflows.

When an organization has its end users install the Device Trust agent on an unmanaged device, it then acts as a possession factor for authentication. If a device is missing the agent or is failing health checks, it cannot authenticate to SSO-protected apps or integrated VPNs. Additionally, an integration with the 1Password EPM browser extension can block non-compliant devices from accessing web apps, including those not behind SSO.

1Password integrates seamlessly with your existing IT and security stack. It supports identity providers like Okta, Azure AD, and Google Workspace for SSO and SCIM-based provisioning. It integrates with tools like Datadog and Splunk to surface access activity in your SIEM. With hundreds of app integrations, support for custom workflows, and a flexible API, 1Password makes it easy to orchestrate access, enforce policy, and improve compliance across your environment. Explore what's available in the 1Password Marketplace.