1Password Review: What It Does, What It Costs and Whether It's Worth It in 2026

Summary

• What it is: a subscription password manager that stores logins, passkeys, cards and notes, fills them in browsers and apps, and flags weak or breached passwords through Watchtower.
• Price: website $2.99 a month billed yearly for the first year, regular $3.99 ($47.88 a year). Families $4.49 and $5.99. Inside the trial account the checkout showed $47.88 plus tax. Prices verified 10/09/2026 on 1Password’s site.
• Best thing I saw: the checkout printed the full first-year total with New York tax, $52.13, the charge date and the auto-renewal terms before asking for a card.
• Weakest point: support. My email at 5:03 a.m. ET on 10/09/2026 got only an auto-reply by midday, and slow replies are the most repeated complaint in owner reviews.
• Watch for: the “Share analytics” switch in the web app was on by default in the new account, even though the support site calls telemetry optional.
• Not for you if you want a free tier or a one-time license. 1Password 8 is subscription only, and the trial account turns read-only after 14 days.

How we rate 1Password

Criterion	Grade	What it’s based on (10/09/2026)
Results (30%)	Good	Watchtower scored the new vault and flagged the missing recovery code within minutes. A login saved from the web app with a 20-character generated password. Browser autofill not tested: the extension wasn’t installed
Price & value (20%)	Good	No free plan. $47.88 a year regular, $35.88 with the first-year promotion on the website; Bitwarden Premium costs $19.80. Families covers 5 people for $71.88 regular
Checkout honesty (15%)	Excellent	Trial with no card. The checkout showed $47.88 plus tax, then $52.13 with 8.875% New York tax, the 10/23/2026 charge date, a 7-day reminder and the renewal consent text, all before the card field
Data handling (15%)	Good	Sign-up asked for a name and email only. Account deletion is two clicks away in Manage Account. But the “Share analytics” switch in the web app’s first-run dialog was on by default
Ease of use (10%)	Good	Sign-up took 11 minutes, including a mandatory Emergency Kit download. Two prompts to install the extension before the form. No export from the web app
Support (10%)	Fair	Email only for personal accounts, plus a chatbot. No reply from a person in 7 hours on a Friday; slow email replies are the most repeated complaint on Trustpilot and the App Store

Account type tested: Individual 14-day trial, opened on 10/09/2026. The weights and the scale are on the methodology page, and the checkout scoring follows the US Privacy Checkout Test.

What’s good

• The trial asked for no card. Sign-up took a name, an email address and a six-digit code, which arrived within a minute on 10/09/2026.
• The checkout showed the real total before the card: $52.13 for a year with New York tax, charged on 10/23/2026, with a reminder email promised 7 days before.
• The marketing-email checkbox on the sign-up form was unchecked by default.
• Watchtower ran on the new vault right away and explained its one flag in plain words: the account had no recovery code.
• You can delete the account yourself: Manage Account, Permanently Delete Account, one confirmation. Data is erased after 30 days.
• The security design is documented and outside-checked: public pentest reports from 2020, annual tests since, ISO 27001 and SOC 2 Type 2.

What’s bad

• The $2.99-a-month promotion on the website never appeared inside the trial account, where the Individual plan was $47.88 a year plus tax.
• No refunds. The refund policy says 1Password is “unable to issue refunds for past charges or for any time remaining on your account.”
• Support for personal accounts is email and a chatbot. My question had only an auto-reply after 7 hours on 10/09/2026.
• The “Share analytics” switch in the web app’s first-run dialog was on before I chose anything, while the support site says you must opt in.
• Two-factor authentication was off by default, and the web app can’t export your data. Only the desktop and phone apps can, to unencrypted files.
• Prices went up on 03/27/2026 by $12 a year for both personal plans, and one App Store owner wrote on 10/06/2026 that changing a payment card triggered a charge months before renewal.

What 1Password is and how it works

1Password is a password manager from AgileBits Inc., a Toronto company that trades as 1Password. Its terms of service give the address as 4711 Yonge Street, Toronto, Ontario. Its about page says the company was founded in 2005 and is run by CEO David Faugno (10/09/2026). The same page claims more than 200,000 business customers and 1,400 employees. Those are the company’s own numbers.

The service works in four steps. You create an account with an email address and an account password, and 1Password generates a 34-character Secret Key on your device. The two together encrypt everything you store, so the company says it can’t read your vault or reset your password.

You install the browser extension and apps, which save and fill logins, cards, notes and passkeys. Watchtower then compares your saved logins against breach reports and flags weak, reused and unprotected passwords. Everything syncs through 1Password’s servers, which keep your data in the US, Canada or the EU depending on where you sign up.

Since version 8 the apps work only with a subscription account. There is no free plan, only a 14-day trial, and the older 1Password 7 apps are scheduled to be retired in early 2027 per the support site.

Results in the US Privacy Checkout Test

1Password’s row in the US Privacy Checkout Test comes from the Individual trial on 10/09/2026. The Billing page listed Individual at $47.88 plus tax a year, Families at $71.88, and a monthly option at $4.99 plus tax. Three things stood out:

• The total with tax appeared as soon as I picked a country, state and ZIP: “I agree to pay the annual fee of $52.13 USD starting on October 23, 2026. This fee includes 8.875% New York tax.”
• The same sentence is the renewal disclosure: the fee recurs each year unless you cancel, and a reminder email is promised 7 days before. There is no separate renewal price line, because the price is the same.
• The promotional $2.99 a month from the public pricing page wasn’t offered in the account. The website’s footnote says the promotion is for new customers subscribing “directly through 1Password.com,” which is where I was.

Pricing summary

The public pricing page on 10/09/2026 showed Individual at $2.99 a month and Families at $4.49, both “Per month. Billed yearly,” with $3.99 and $5.99 struck through as the regular prices. A footnote limits the promotion to new customers paying annually through 1Password.com for the first year.

Month to month, Individual is $4.99 and Families $7.99. Inside the trial account the annual plan was $47.88 plus tax, the regular rate, and the New York total came to $52.13. Sales tax is added where the law requires it and shows on the invoice.

Subscriptions renew automatically at the end of each billing cycle, and the refund policy allows no refund for past charges. The current rates follow the increase of 03/27/2026, when the Individual plan went from $35.88 to $47.88 a year. Plan details and the App Store prices are on the 1Password pricing page.

Free trial

There is no free plan. The 14-day trial asked for no card on 10/09/2026, and the account home page counted down the days with an “Add payment details” banner. If the trial ends with no payment method, the account freezes. The support site says you can still view items and copy passwords, but not add, edit, invite people or fill in the browser. Subscribing later unfreezes it.

If you cancel during the trial, nothing is charged. What you get in those 14 days is on the 1Password free trial page.

Interface and ease of use

Sign-up ran from 4:36 to 4:47 a.m. ET on 10/09/2026. Before the form, the site asked twice whether to install the browser extension. The form itself wanted a name and an email address, with the newsletter box unchecked. After the emailed code, 1Password asked for an account password of at least 10 characters and generated the Secret Key. It refused to continue until I had saved the Emergency Kit PDF.

The web app has one column of navigation: All Items, Favorites, Watchtower, your vaults, tags, Archive and Recently Deleted. A “Start here” checklist showed four steps left. The item editor is clear: title, username, a generated password, website, notes and tags. The first thing the app did, though, was open a dialog about sharing analytics, with the switch already on. I clicked “Remind me later.”

The apps are on the App Store (4.7 from 42,000 ratings) and Google Play (4.6 from 25,900 reviews, updated 10/05/2026). The Chrome extension had 3.1 from 3,500 ratings and about 7 million users on 10/09/2026. I didn’t install them, so this review covers the web account. Step-by-step setup is on the how to use 1Password page.

Vault and autofill

A new account comes with a Personal vault holding two starter items. New Item, Login opens the editor, and “Create a New Password” generated a 20-character random password with letters and numbers. Symbols were off by default, and the length and character types could be changed. The item saved with its website and tags, and showed up in All Items at once.

Autofill lives in the browser extension and the apps, and I didn’t install either in the test browser, so I can’t say how well it fills. Owners can: in the 150 App Store reviews I read from 07/27 to 10/07/2026, 14 of the 71 low-star reviews were about autofill or the extension failing after an update.

Import works from Chrome, Firefox, Edge, Safari, Bitwarden, Dashlane, KeePass, Keeper, LastPass, RoboForm and CSV files, and the web app has a “Migrate data into 1Password” screen for CSV. Export only works in the desktop and phone apps, to 1PUX or CSV files that the support site warns are unencrypted.

Sharing and family access

Any plan can share a single item with someone who doesn’t use 1Password, through a link. Shared vaults need the Families plan. It covers up to five people for one subscription, each with a Private vault and a Shared vault. You can add more vaults and share them with some members and not others. Guests get access to one vault.

The family organizer can recover a member’s account if they forget their password or lose their Secret Key. An Individual account can’t do that for itself. These details come from the support site on 10/09/2026. My test account was an Individual trial, so I didn’t share a vault.

Two-factor authentication and recovery

Two-factor authentication was off in the new account. The setting sits under Manage Account, More Actions, Manage Two-Factor Authentication. You can choose an authenticator app or a hardware security key such as a YubiKey. 1Password asks for the second factor only when you sign in on a new device.

Recovery is the part to understand before you rely on 1Password. The sign-up screen says “We cannot recover your password for you,” and the Secret Key isn’t a backup code. Manage Account offers “Set up recovery code,” and Watchtower nags until you do. Lose the password and the Secret Key without a recovery code, and nobody, including 1Password, can open the vault.

Security history and audits

1Password publishes its security design in a white paper, and its support site lists the outside checks it has had (10/09/2026):

• Penetration test and code review by Independent Security Evaluators, April and June 2020. The report PDF is public.
• Infrastructure review by Onica, covering the AWS environments. The report PDF is public, but no date is printed on the support page.
• Annual penetration tests, with reports in 1Password’s Trust Center since 11/03/2025, and a bug bounty on HackerOne since December 2024.
• Certifications: SOC 2 Type 2, ISO/IEC 27001:2022, 27017, 27018 and 27701. The support page gives no dates for them, and the SOC 2 report is available on request only.

Two incidents are worth knowing. On 09/29/2023, 1Password found suspicious activity on the Okta system it uses for employee apps. Its report, posted 10/23/2023, traces the activity to Okta’s own support-system breach and says “no 1Password user data was accessed.”

Separately, a security researcher reported in October 2023 that the command-line tool keeps a vault unlocked for child processes. A malicious script could read secrets that way. 1Password cleared the disclosure in January 2024 and pointed to service accounts as the mitigation. Neither incident touched customer vaults.

The design matters more than the list. Your account password is never sent to 1Password, and the Secret Key, which the company never sees, adds 128 bits of entropy to the encryption key. The trade-off is the recovery problem above.

What it’s like to be a U.S. customer: price, cancellation, data, support

What you’ll actually pay at checkout

Individual: $47.88 a year plus sales tax, or $4.99 a month plus tax, inside the account on 10/09/2026. With a New York address the first year came to $52.13. The website’s $2.99-a-month promotion, $35.88 for the first year, didn’t show in the account, so count on the regular price unless the promotion appears at your sign-up.

You can pay by card, by ACH from a U.S. bank account or with a 1Password gift card. The support site warns that 1Password is a Canadian company and some U.S. banks add a foreign transaction fee.

What’s in the plan (and what isn’t)

Individual covers one person on unlimited devices, with 1 GB of document storage, Watchtower, passkeys, Travel Mode and item sharing. Families adds up to five people, shared vaults and account recovery for members. Neither plan includes a VPN, dark web identity monitoring beyond breached passwords, or insurance, which some rivals bundle. Business features such as reports and SSO are separate products.

How to cancel and get a refund

On a trial there is nothing to cancel. The account simply freezes on 10/23/2026 if no card is added. For a paid plan the support site’s path is Billing, then Cancel subscription at the bottom of the page. The plan stays active until the end of the billing period and then freezes.

Refunds: none for past charges or unused time, per the refund policy. The terms add that requests “may be considered on a case-by-case basis.” Cancel during the trial and you pay nothing. I didn’t test the paid cancel flow.

What personal data they ask for — and how to delete it

Sign-up asked for a name and an email address. No phone number, street address, card or SSN at any step before payment. The privacy notice, effective 12/29/2025, says vault contents are encrypted with keys 1Password never has. It also says sharing data with marketing partners “may be considered a sale or sharing” under state privacy laws, with an opt-out link in the footer.

The “Share analytics” switch in the web app’s first-run dialog was on before I chose anything, and I clicked “Remind me later.” The matching “Share information about your usage” checkbox sits under Manage Account; it was unticked in my screenshot. The support site’s telemetry page says participation is optional and nothing is collected unless you decide to take part, so check both places yourself.

Deleting the account takes Manage Account, Permanently Delete Account, then a confirmation that offers either “Cancel subscription temporarily” or “Delete all of my data and cancel billing.” Data is gone after 30 days, and support can restore it inside that window. I stopped at the confirmation.

Who can sign up (U.S. only, state limits, age)

1Password sells worldwide. U.S. accounts are created on 1Password.com and billed in U.S. dollars, with data stored in the United States. I found no state restrictions on 10/09/2026. The consumer terms don’t state a minimum age. Children join through a Families plan.

Support: channels and hours (ET)

Personal accounts get email (support@1password.com), a contact form and a 24/7 chatbot. There is no phone line for individuals. I sent our standard question by email at 5:03 a.m. ET on Friday, 10/09/2026, and got an automatic reply with a ticket number the same minute.

As of 12:20 p.m. ET, 7 hours later, no person had replied. Trustpilot’s profile says the company replies to negative reviews “typically over 1 month” later, and slow email replies were the most repeated complaint I counted. I’ll update this section when the answer arrives.

What we saw inside the account

Home with the trial banner and Billing with four plans. Manage Account with the Secret Key, Emergency Kit, recovery code, two-factor, Travel Mode and auto-lock at one hour. A sign-in activity log that showed the city of our connection. In the web app: the Personal vault with two starter items, the item editor and generator, Watchtower with a 1000 score and one flag, and the import screen. The browser extension and the phone apps were not installed.

Is 1Password safe and legit?

AgileBits Inc. is a Canadian company with a Toronto address in its terms and a history going back to 2005. The checks above, ISO 27001, SOC 2 Type 2, public pentest reports and a bug bounty, are more than most password managers publish. Two-factor authentication is available but off by default. I reached the delete dialog in two clicks on my own account.

I found no FTC or CFPB action naming AgileBits or 1Password on 10/09/2026, and BBB lists no complaints in three years. The things to decide for yourself are the recovery model, which puts the whole burden on you, and the telemetry default.

What other users say

1Password had 12,498 Trustpilot reviews and a 4.1 TrustScore on 10/09/2026, with 85% five-star and 6% one-star. The profile notes the company hasn’t recently invited customers to review. The App Store listing showed 4.7 from 42,000 ratings, Google Play 4.6 from 25,900 reviews. BBB lists AgileBits with an A+ rating, no accreditation and zero complaints in three years.

I read the 150 most recent U.S. App Store reviews (07/27 to 10/07/2026) and the first two pages of Trustpilot, including the one-star filter. Themes with three or more independent mentions on two platforms:

• Support that answers slowly or with automated replies. 17 of the 71 low-star App Store reviews and 11 of 20 one-star Trustpilot reviews. Several mention an AI bot answering email. On the other side, most five-star Trustpilot reviews from September 2026 praise a named support agent.
• Price increases and billing surprises. 15 App Store reviews and 7 Trustpilot one-star reviews, mostly after the March 2026 increase. One owner wrote on 10/06/2026 that changing a payment card triggered a charge months before renewal.
• Autofill and extension bugs after updates, 14 App Store reviews, including crashes on the newest iPhone system.
• Lockouts and lost access, 6 App Store and 5 Trustpilot reviews: a forgotten password or missing Secret Key, a 2FA glitch, or a frozen account after a failed payment.

Reddit blocked our connection, so this review doesn’t count Reddit threads. On Hacker News, the biggest 1Password threads of the past year were about the March 2026 price increase (209 comments) and people asking how to migrate away (150 comments, 09/03/2026).

Who it’s for (and who it’s not for)

It’s for you if:

• You want a password manager with a documented security design and outside audits, and you’ll set up two-factor and a recovery code on day one.
• You run a family of up to five and want shared vaults plus the ability to recover a relative’s account.
• You’re leaving LastPass or Chrome’s built-in manager and want import, passkeys and breach alerts in one place.
• You’d rather pay yearly for a company that shows the taxed total before the card than chase the cheapest plan.

It’s not for you if:

• You need a free plan or a one-time license: 1Password 8 is subscription only.
• You expect phone or live chat support for a personal account.
• You want the $2.99 promotional price and it doesn’t show at your checkout.
• You’re uneasy with a service that can’t reset your password under any circumstances.

What I’d change

• Show the website’s promotional price inside the trial account, or stop advertising it to people who won’t see it.
• Switch the usage-data toggle off by default, to match the support site’s own description of telemetry as opt-in.
• Turn two-factor authentication on, or at least prompt for it, during sign-up.
• Let the web app export data, encrypted, instead of only the apps and only in plaintext.
• Give personal customers a published reply-time target, and a way to reach a person without a ticket queue.

Alternatives to 1Password (on this site)

• Bitwarden has a permanent free plan and a $19.80-a-year Premium tier with annual Cure53 audits. It has no affiliate program with this site. See Bitwarden vs 1Password.
• Proton Pass gives you a free plan with 10 hide-my-email aliases and unlimited logins, and Pass Plus is billed at $35.88 every 12 months (10/09/2026). This site hasn’t reviewed it yet; the password generator page explains how it fits.
• Dashlane costs more, $65.04 a year on 10/09/2026, with no free plan and a 14-day trial. In May 2026 it disclosed a two-factor brute-force incident affecting fewer than 20 personal users. See 1Password vs Dashlane.

The what is a password manager page covers the basics.

Verdict: is 1Password worth it in 2026?

1Password does the core job well and shows its work. The trial needs no card, the checkout printed the taxed total and renewal terms before payment, and the security design has public audits behind it.

The reasons to hesitate are money and help. The price is $47.88 a year unless the promotion shows up for you, there are no refunds, and personal customers wait on email.

It’s a sound choice for a family or an individual who wants everything in one vault. That holds if you set up two-factor and a recovery code and don’t need a free tier. If price or support matter more, Bitwarden’s free plan is the first thing to try.

Try 1Password

What we checked

• Test account: Individual 14-day trial opened 10/09/2026 at about 4:47 a.m. ET with a name and email only. Home, Billing, Manage Account, the web vault, Watchtower, the item editor and the import screen captured the same day. The trial runs to 10/23/2026
• Checkout: Billing, Subscribe, up to the payment field on 10/09/2026 with a New York ZIP. Saw the annual total with 8.875% tax, the start date and the auto-renewal consent text. No card entered
• Cancellation: nothing to cancel on a trial, so the path comes from the help center. The account deletion dialog was reached in 2 clicks on 10/09/2026 and not confirmed
• Vendor pages: personal pricing, terms of service, privacy notice, refund policy, 20 support articles, security and assessments pages, the Okta incident report, the about page, the affiliate page — read 10/09/2026
• Support: one email sent to support@1password.com on 10/09/2026 at 5:03 a.m. ET from our test mailbox. Auto-reply with a ticket number at 5:03 a.m.; no reply from a person as of 12:20 p.m. ET the same day
• User reports: 12,498 Trustpilot reviews (4.1/5), 150 most recent App Store reviews (07/27–10/07/2026), Google Play rating, BBB profile, 4 Hacker News threads from 2025–2026 — read 10/09/2026. Reddit blocked both of our connections
• Public records: FTC cases and proceedings, the CFPB complaint database and CourtListener searched 10/09/2026 — no action naming AgileBits or 1Password
• Third-party walkthroughs watched for the parts we couldn't reach: Cybernews (09/30/2026) and VPNpro (06/12/2026) reviews; both carry affiliate links
• Not checked: browser autofill, because the extension wasn't installed in our test browser; the paid cancel flow; the desktop and phone apps
• Where the run stopped: payment field of the Individual checkout on 10/09/2026: no card entered, so the paid cancel flow, invoices and the apps' export were not reached

FAQ

More on 1Password

• Is there a real free plan? →
• 1Password pricing and renewal →
• How to use 1Password →
• 1Password vs Dashlane →
• Bitwarden vs 1Password →