1Password Business Review (2026)

Verdict: the most complete option, at more than twice the entry price

1Password Business is a strong choice when you need identity-provider integrations, delegated administration and reporting, and you want an interface non-technical staff will actually use. It costs $8.99 per user per month on annual billing, which is more than twice Bitwarden Teams ($4) and NordPass Business ($3.99). For a team of 20 or fewer that does not need SSO, the Teams Starter Pack at $24.95 a month for 10 members is a much cheaper way to get the same vault. If your priority is price, open source or self-hosting, compare the alternatives before you buy.

For comparison at 25 users on annual billing, Bitwarden Teams is $1,200, NordPass Business is $1,197 and Proton Pass Professional is $1,347. The Starter Pack grows by $4.99 per added seat per month, so 15 members cost $598.80 a year and 20 members cost $898.20. At 20 members, the Starter Pack ($898.20) is $1,259.40 a year cheaper than Business ($2,157.60), so the question is whether the Business features are worth that difference to you. Our password manager comparison shows every tier side by side.

1Password offers a 14-day Business trial, and states it offers discounts for eligible organizations such as nonprofits and journalists, plus custom volume pricing. You can also buy Business through AWS Marketplace.

What Business adds over the Starter Pack

1Password describes Business as the Starter Pack plus identity-provider integrations with Okta, Entra ID, OneLogin, Duo and others, Watchtower alerts, role-based vault sharing and permissions, and broader administration and reporting. The pricing page also lists guest accounts (5 on Starter, 20 on Business), custom groups, custom business reports, SIEM streaming to tools such as Splunk, Elastic, Sumo Logic and Panther, and provisioning for users and groups through Entra ID, Google Workspace, Okta, OneLogin, Rippling and JumpCloud.

Two provisioning details matter for small IT teams. 1Password documents hosted automated provisioning for Entra ID, Google Workspace, JumpCloud, Okta and OneLogin, and it says that automated provisioning will not manage groups that have the Recover Accounts or Manage All Groups permissions, which is a deliberate security boundary. Some environments still use a self-hosted SCIM bridge, which adds infrastructure for you to run and patch, so ask which method your identity provider needs before you buy.

Strengths and limits

Day-to-day use: what staff and administrators actually get

For everyday staff, 1Password's listed features are the ones that make adoption easier. Apps cover macOS, iOS, watchOS, Windows, Android and Linux, and browser extensions cover Chrome, Safari, Edge, Firefox and Brave. Staff can add a trusted device by scanning a QR code, autofill logins, addresses and payment details, sign in with passkeys, and share an item with someone who does not have a 1Password account using temporary sharing, expiration dates and a share history. That last feature matters in small firms where credentials are often passed to contractors by chat or email, because it gives the owner a record and an expiry.

For administrators, Business adds the pieces that turn a shared vault into something you can govern: custom groups for delegating responsibilities, vault permissions and policies, Watchtower alerts for weak, reused or breached passwords and missing two-factor, and custom reports on usage and account activity. The pricing page also lists account recovery for locked-out users. Treat recovery as an operating procedure, not a feature to assume: agree who can approve it, how identity is verified and where the steps are written down.

Support follows a similar split. The pricing page lists 24/7 support by email, forum and social media, a self-serve library, and phone support Monday to Friday, 9 AM to 5 PM Eastern. Personalized training and a dedicated customer success manager are listed only for organizations with 101 or more users, so a 20-person company should expect self-service onboarding.

Starter Pack or Business: a decision you can make in ten minutes

Answer these in order, and stop at the first yes.

1. Do you need staff to sign in with an identity provider such as Okta, Entra ID or OneLogin? If yes, you need Business.
2. Will you provision and deprovision users automatically from a directory? If yes, you need Business, and you should check which provisioning method your provider requires.
3. Do you work with more than five outside guests, such as contractors or clients, who need access to specific vaults? If yes, Business allows 20 guests against 5.
4. Will you pass 20 members within the year? If yes, the Starter Pack will not stretch, and you will pay for a move to Business at renewal.
5. Do you need custom business reports, SIEM streaming or delegated group administration? If yes, Business.

If every answer is no, the Starter Pack is the sensible choice, and you can move up later. If you answered yes to question 1 or 2 and cost matters, price Proton Pass Professional and Bitwarden Enterprise on the same requirements before you commit to $8.99 per seat.

Where Business is hard to justify

At 25 users, Business costs $2,697 a year. For a business that only needs managed sharing and a clean offboarding process, that is more than double what Bitwarden Teams or NordPass Business would cost, and the difference funds other controls such as multi-factor authentication hardware or a backup. The extra spend is easiest to justify when you will use the identity integration to turn off an employee's access from one place, when your customers or insurer expect reporting you can produce, or when a non-technical team's adoption is the main risk. It is hardest to justify when a technical administrator is comfortable running a cheaper alternative and nobody will open the reports.

Security and evidence

1Password states that vault data is protected with end-to-end AES 256-bit encryption, with two-key derivation from the account password and a Secret Key, and with the secure remote password protocol for authentication. Its pricing page lists SOC 2 Type II certification and independent third-party audits, and independent reviewers note that the company has published a full Cure53 penetration test. 1Password disclosed that it was affected by the October 2023 Okta support-system incident and reported that no customer vault data was accessed. These are vendor statements and third-party reports, not Valydex tests.

We have not independently tested the encryption, admin console or apps, and we have not deployed 1Password for a client for this review. It is based on 1Password's pricing page, support documentation and independent reviews checked October 27, 2026.

Running it: what makes the rollout work

The product does not decide who owns each shared login, so settle that first.

• Start with ownership. List the shared business accounts, name one owner for each, and retire any login nobody should still be using.
• Plan for the Secret Key. Walk each new user through storing their Emergency Kit and Secret Key, and decide who can perform account recovery.
• Use groups, not people. Assign vault access to groups that match roles, so removing a person removes their access without orphaning items.
• Name two administrators. Recovery should not depend on one person, and administrator recovery paths should be tested.
• Rehearse offboarding. Removing a person from 1Password removes vault access, but they may know passwords they have seen, so rotate critical shared secrets.
• Use the trial properly. Run the 14-day trial with five real users and two roles, then remove one of them and check what they can still reach.

Our implementation guide covers the rollout in more detail.

Offboarding and recovery: test these before you import everything

Two events decide whether a password manager protects the business: a person leaves, and someone is locked out. Run both as exercises during the trial. For departure, remove a test user, then check which vaults they could reach, whether any shared item lists them as its only owner, and which service passwords they knew. Rotate the passwords for anything critical, because removing someone from the vault does not erase what they have already seen. For lock-out, ask a pilot user to simulate losing their device and Secret Key, and record who approved the recovery, how long it took and what evidence was required. A recovery process that has never been run is a guess.

Document the result in a one-page runbook: who the two administrators are, how to reach them, where the recovery steps live, and which accounts are break-glass credentials stored offline. That page is more valuable than any additional feature you could buy.

Alternatives: when to look elsewhere

• Bitwarden Teams ($4). Includes SCIM and event logs; SSO and policies need Enterprise at $6. See our Bitwarden review.
• Proton Pass Professional ($4.49). Lists SSO, SCIM, required two-factor and an activity log. See our Proton Pass review and the Proton Pass vs 1Password comparison.
• NordPass Business ($3.99). A simple low-cost rollout on Google Workspace, with Entra ID and Okta on Enterprise. See our NordPass review.
• Built-in browser and operating-system managers. Cheaper for very small teams, with limits explained in our 1Password vs built-in managers comparison.

Before you buy

1. Decide whether you need identity-provider SSO or provisioning. If not, price the Starter Pack first.
2. Count real users, including contractors and guests, and check the 5 and 20 guest limits.
3. Ask which provisioning method your identity provider needs and what it will cost to run.
4. Run the 14-day trial with a clear checklist.
5. Save the quote, term and renewal price, and set a calendar reminder 30 days before renewal.

Frequently asked questions

Prices and features were checked on October 27, 2026 from 1Password's pricing page and support documentation and independent reviews. See our research methodology and affiliate disclosure. Some purchase links on this site may earn a commission; this review contains no tracked affiliate link and the commission does not affect our comparison.