Extended Access Management Plans

Enterprise Password Manager

Secure every credential. Strengthen every sign-in.

Protect credentials across every device and browser
Meet compliance needs with policies and reporting
Get dedicated support for 100+ users
Unlock volume-based pricing
Extend trial periods for large implementations

Device Trust

Ensure every device is secure and compliant by empowering employees to self-remediate device health issues before accessing work applications.

Request a quote

Secure both SSO and non-SSO web apps
Enforce continuous device posture checks
Ensure policy compliance through self-remediation
Integrate with IDPs like Okta, Entra ID, and Google Workspace

Trelica by 1Password

Reduce SaaS spend by discovering and right-sizing underutilized contracts while securing and managing access to all your SaaS apps, managed and unmanaged, in a single platform.

Request a quote

Auto-discover apps via IDPs, browsers, and finance systems
Automate onboarding and offboarding workflows
Track app usage, renewals, and spending
Build no-code workflows with 350+ integrations

Additional ways to buy

Managed Service Providers

1Password Enterprise Password Manager–MSP Edition

Proactively protect your client data and improve their security posture.

Learn More

The same trusted and loved Enterprise Password Manager, tailor-made for MSPs:

Manage clients simply and seamlessly with a dedicated MSP console
Add new or existing 1Password customers to the MSP console
Strengthen technician access with enhanced security measures
Tailor enablement for client selling, onboarding, training, and more
Access dedicated partnerships and CS experts for support needs

Unleash productivity without compromising security

Passwordless

Uncover password risk and guide your team’s journey toward a passwordless future.

Device security

Verify every device is trusted. Let users self-remediate to restore compliance and access.

Credential risk management

Protect credentials with a zero-knowledge password manager and reduce shadow IT exposure.

SaaS and shadow IT discovery

Discover all apps, managed or unmanaged, used across your organization.

SaaS governance

Automate access, cut spend, and stay compliant across every SaaS app.

Cybersecurity compliance

Enforce strong access policies, secure devices, and meet audit and regulatory needs.

Available for everyone

Secure password management for individuals and businesses

1Password makes it easy to save and autofill strong passwords with enterprise-grade security that works across all your devices.

See Password Manager plans

FAQs

What is 1Password Extended Access Management?

1Password Extended Access Management is the leading Extended Access Management solution that ensures that every identity is authentic, every application sign-on is secure, and every device is healthy.

What products are included in the 1Password Extended Access Management platform?

1Password Enterprise Password Manager secures passwords and provides multi-factor authentication to unmanaged apps and apps in the queue for federation.
1Password Device Trust ensures all managed and unmanaged devices are trusted before allowing them to access business applications and sensitive data, including employees' personal devices.
Trelica by 1Password discovers and secures your employees’ access to all apps, whether company-managed or unmanaged.

Can I buy each product separately, or only with the full 1Password Extended Access Management suite?

Yes. While 1Password Extended Access Management products work seamlessly together as a unified platform, each component—Enterprise Password Manager, Device Trust*, and Trelica by 1Password—can be purchased individually on an annual plan based on your priorities for credential management, device trust enforcement, or SaaS access governance.

*Depending on the Device Trust SKU purchased, 1Password Enterprise Password Manager may be required.

How does billing work for modular plans?

Are trials or proof of concepts available for 1Password Extended Access Management?

How does Device Trust work with unmanaged devices or BYOD?

When an organization has its end users install the Device Trust agent on an unmanaged device, it then acts as a possession factor for authentication. If a device is missing the agent or is failing health checks, it cannot authenticate to SSO-protected apps or integrated VPNs. Additionally, an integration with the 1Password EPM browser extension can block non-compliant devices from accessing web apps, including those not behind SSO.

What makes 1Password Enterprise Password Manager different from traditional password managers?

1Password uses a unique zero-knowledge architecture with dual-key encryption to keep your data private. Our Two-Secret Key Derivation (2SKD) model combines your account password with a device-generated Secret Key, ensuring only you can decrypt your data. Even when using SSO, decryption happens locally on trusted devices—your identity provider never sees your encryption keys. With support through the 1Password SDK for securely storing secrets used by AI agents, scripts, and service accounts, 1Password helps you protect all identities with complete visibility and control.

What is Trelica by 1Password, and how does it support access governance?

Trelica by 1Password helps IT teams discover, manage, and secure every SaaS application. It automates user provisioning and de-provisioning with 350+ direct app integrations, enforces access policies based on roles, and identifies risky or unused access to reduce security gaps. Trelica also provides visibility into SaaS usage, shadow IT, and license spend—empowering teams to streamline operations, meet compliance standards like SOC2 and ISO 27001, and prevent unauthorized access with automated, no-code workflows.

Can 1Password Extended Access Management integrate with my existing security and IT tools?

1Password Extended Access Management integrates seamlessly with your existing IT and security stack. It supports identity providers like Okta, Azure AD, and Google Workspace for SSO and SCIM-based provisioning. It integrates with tools like Datadog and Splunk to surface access activity in your SIEM. With hundreds of app integrations, support for custom workflows, and a flexible API, 1Password makes it easy to orchestrate access, enforce policy, and improve compliance across your environment. Explore what's available in the 1Password Marketplace.