1Password: Password Manager

Review by eFreeware

1Password is a password manager from AgileBits, and it has been part of this category for a long time: the developer traces it back to 2006. The Android app is free to download, carries no ads, and offers in-app purchases. On Google Play it sits above a million installs with a 4.6 average from roughly 26,000 ratings, which is the kind of score a utility earns by being dull in the right way.

The reason to consider it is scope. Rather than a vault that only holds website logins, it is built to keep passkeys, credit cards, banking details, medical records and secure notes in one place, then put them to work through autofill on your phone. If you have ever reset a password because it lived only in your head, or kept a card number in a notes app, this is the job it is designed to do.

One vault for logins, cards and notes

The everyday experience is meant to be mostly invisible. You save a username and password once, and 1Password offers to fill them the next time you sign in to a site or an app on Android. The developer says it works with popular mobile browsers, Google Chrome among them, so the same vault covers browsing and native apps rather than forcing you to pick one.

Beyond credentials, the app acts as a general store for personal information you would rather not leave lying around: payment cards, bank details, medical records, notes and anything else you want kept private. Everything is available on any device you sign in from, which is the point of putting it in a synced vault rather than a spreadsheet.

Sign-ins made through Google or another provider are covered too. If you tap a button to log in with an outside account instead of typing a password, that arrangement can be saved and reused from the vault as well.

Strong passwords and passkeys without the friction

A generator is built in, so creating a long, unguessable password takes a tap rather than a minute of invention. That matters most at the moment you sign up for something new, which is exactly when people tend to reuse an old favorite. Generating and saving in one motion removes the excuse.

Passkeys get equal billing. These are the credential type that replaces a password entirely on sites that support them, and 1Password can create and store them. It can also use a passkey to unlock the vault itself, which is a neat piece of circularity: the thing protecting your credentials can be a credential.

The developer describes its passkey work as industry-leading, and that is marketing language I would treat as a claim rather than a specification. What is concrete is the direction of travel. If the services you use have started offering passkeys, having somewhere to keep them matters more each year.

Two-factor codes in the same app

One-time codes for two-factor authentication can be generated inside 1Password and filled in automatically for services that support 2FA. That removes the copy-and-paste shuffle between a password manager and a separate authenticator, and it removes one more app from your phone.

There is a reasonable argument on the other side. Keeping your second factor in the same vault as your password concentrates both halves of the login in one place, and some security-minded people deliberately split them across two apps. The developer's pitch is convenience, and the convenience is real; whether the trade suits you is a judgment about your own threat model rather than a flaw in the feature.

For most people juggling a handful of accounts, the practical gain is that codes are simply there when a login asks for them, with no second app to open and no numbers to retype.

Sharing, alerts and Travel Mode

Sharing is handled in a way that avoids email and messaging apps. You can pass along a password or any other stored item to someone who does not use 1Password, with the developer describing the link as secure and temporary. Wi-Fi details, financial information and similar items are the obvious candidates. Sending a Wi-Fi password to a guest without pasting it into a chat thread is a small thing that adds up.

Watchtower provides alerts and reporting, and the developer says you will know immediately if an account of yours turns up in a data breach. That turns the vault from a storage box into something closer to a monitoring service, and it is the feature I would expect long-term users to value most, since the hard part of password hygiene is noticing when something has gone wrong.

Travel Mode is the more unusual inclusion. It temporarily hides vaults holding sensitive information while you are traveling and restores them once you are home, which is aimed at border crossings and any situation where your phone might be examined. Unlocking the app itself can be done with biometric authentication, so day-to-day access does not depend on typing a long master password in public.

What it costs and what it assumes

The app is free to download with no ads, but it is not a free product. The developer offers a 14-day trial and then expects you to choose a plan for yourself or your business, and in-app purchases are part of how the Android app is set up. Budget for a subscription rather than treating this as a one-off install.

The other assumption is that you want a cross-platform vault. The app is one piece of a system that also runs as a browser extension and a desktop app, and its value comes from that reach. Someone who only ever signs in on a single phone is paying for breadth they may not use.

On privacy, the developer's position is that it cannot see your 1Password data and therefore cannot use, share or sell it. That is a claim about the security model, and it is the kind of claim worth reading up on directly if it is the reason you are considering the app.

Two-factor codes, passkeys and autofill all depend on the services you use supporting them. The app can hold a passkey for a site that accepts passkeys; it cannot make a site accept one.

A fit for households and small teams

The people I would point to this app first are those managing credentials for more than themselves. The sharing feature is built for passing items to family members or colleagues who do not use the app, and the developer's framing around protecting a family from cyber criminals suggests that is a deliberate audience. If you are the person who ends up resetting everyone else's accounts, a shared vault is a genuine improvement over text messages.

Second are people with a scattered digital life: accounts across browsers and apps, a mix of passwords and passkeys, cards and documents that need somewhere safer than a notes file. The breadth of what can be stored is the argument here, and it is a stronger one the more places your information currently lives.

The app suits anyone who wants a single, well-organized place for credentials and is willing to pay a subscription for it. The 4.6 average across a large number of ratings suggests that arrangement has worked for a lot of Android users, though I would read the trial as the real test: two weeks is enough to find out whether the autofill habits stick.

A subscription vault worth trialing first

1Password is a mature, carefully scoped password manager for Android, and its strengths are breadth and follow-through: passwords, passkeys, two-factor codes, cards, notes and documents in one vault, with autofill doing the work on your phone. Watchtower and Travel Mode are the features that separate it from a plain store of logins, and secure sharing gives it a use beyond the individual.

The caveats are straightforward. It is free to download but not free to keep using, the trial runs 14 days, and the in-app purchases point to a paid arrangement afterward. Its best features depend on the sites and apps you use supporting passkeys and two-factor codes, so results will vary across your accounts.

My recommendation is to install it, run the trial against your real logins, and judge it on whether autofill and code generation become automatic. If you are managing accounts for a household or a small team, or you want passkeys and breach alerts handled in the same place as your passwords, this is built for you. If your credentials live on one device and you have no interest in a subscription, the case is weaker.

What's new in version 8.12.40

We've updated the text in the "Access your passwords everywhere" setup task to say "Set up the 1Password apps so you can recover your account if you ever get locked out". We've fixed an issue where 1Password could ask for your account password instead of offering to unlock with biometrics.