1Password Share Passwords via Secure Link?

Yes, 1Password lets you share passwords and other items through a secure link, but the feature is called Psst! (Password Secure Sharing Technology). You can create a link that grants temporary, revocable access to a single item, and it works even for people who don’t have a 1Password account.

What Psst! Does and How It Works

Psst! is 1Password’s built-in sharing mechanism. Instead of sending a password in plain text over email or chat, you generate a unique URL that the recipient opens in a browser. The link itself doesn’t contain the actual password; it contains an encrypted reference. When the recipient opens it, 1Password’s servers decrypt the item on the fly and display it in a secure, read-only view. The recipient can see the password, copy it, or sometimes save it to their own 1Password vault if they have an account.

Key characteristics of Psst! links:

• One-time or multi-use: You choose whether the link can be opened once or multiple times.
• Expiration: You set a time limit, from as little as 30 minutes up to 30 days.
• View-only: The recipient cannot edit the original item.
• Revocable: You can revoke a link at any time from your 1Password app, even if it hasn’t expired.
• No account required: The recipient does not need a 1Password account to view the shared item.

How to Share a Password via Secure Link

Sharing an item with Psst! takes only a few steps, and the process is nearly identical across 1Password’s desktop apps, mobile apps, and the web interface.

1. Open 1Password and navigate to the item you want to share (a login, credit card, secure note, etc.).
2. Click the Share button (usually a share icon or the word “Share”) on the item’s detail view.
3. Choose the option Share as a link or Create a shareable link.
4. Set the link’s expiration time and choose whether it can be viewed once or multiple times.
5. Click Create Link (or similar). 1Password generates the URL.
6. Copy the link and send it to your recipient via whatever channel you prefer (email, chat, etc.).

Important: The link itself is sensitive. Anyone who has the link can access the item until it expires or is revoked. So treat it like the password itself.

What the Recipient Sees

When someone clicks your Psst! link, they are taken to a 1Password web page. They will see the item’s name and the fields you’ve shared (usually username, password, website, etc.). The password is initially hidden behind dots; they click an eye icon to reveal it. They can also copy it to the clipboard. If they have a 1Password account, they may see a button to save the item directly into their own vault.

There is no need for them to create an account or install any software. The entire interaction happens in the browser. This makes it a very low-friction way to share a password with a family member, a colleague, or a contractor.

Common Problems and Limitations

While Psst! is convenient, it has a few limitations worth knowing:

• Link theft: If you send the link over an unsecured channel (e.g., a public forum) and someone else grabs it, they can access the item. Always send the link through a private channel.
• No password protection on the link itself: 1Password does not let you add an extra password to a Psst! link. The link is the only key.
• Expiration is mandatory: You cannot create a link that never expires. The maximum is 30 days.
• Item type matters: Some item types (like certain file attachments) may not be shareable via Psst!. The feature is primarily for logins, notes, and similar data.
• Revoking after view: Once a recipient has opened the link, revoking it does not un-view it. They’ve already seen the data. Revocation only prevents future access.

Security Considerations and Best Practices

Psst! is designed with security in mind, but you still need to use it carefully. The link is encrypted in transit and at rest on 1Password’s servers. 1Password’s zero-knowledge architecture means that even they cannot see the decrypted content of your shared item—the decryption happens in the recipient’s browser using keys embedded in the link.

Best practices for sharing passwords via secure link:

• Use the shortest expiration time that still gets the job done.
• Prefer one-time links for sensitive credentials, so the link becomes useless after the first view.
• Send the link through a channel that is encrypted (e.g., Signal, WhatsApp, or a password-protected email).
• After the recipient has confirmed they’ve received the password, revoke the link immediately—even if it hasn’t expired.
• Never post the link in a public place like a Slack channel or a shared document that others can see.

Alternatives to Psst! for Sharing Passwords

Psst! is not the only way to share a password with someone. Depending on your situation, you might consider:

• 1Password Family or Teams vaults: If you’re on a family or team plan, you can share an item directly into a shared vault. This is more permanent and doesn’t require a link.
• End-to-end encrypted note apps: Apps like Standard Notes or Joplin (with encryption) allow you to share a note containing the password, but you still need to share the decryption key separately.
• Password-protected ZIP files: You can put the password in a text file, compress it with a strong password, and share the file and the password separately. This is clunky but works offline.
• Just tell them verbally: For very small, trusted groups, reading the password over the phone or in person may be the most secure method.

Cost and Availability

Psst! is available on all paid 1Password plans, including individual, family, and business tiers. There is no extra charge for using it—it’s built into the product. If you’re on a free trial, you can also use Psst! during the trial period. The feature is available on the following platforms:

• 1Password 8 for Windows, Mac, Linux, iOS, and Android
• 1Password in the browser (via the extension)
• 1Password web interface (on 1password.com)

There is no separate limit on the number of links you can create, but your plan may have limits on the number of items or vaults you can have.

Frequently Asked Questions

Can I share a password with someone who doesn’t have 1Password?

Yes, that’s the whole point of Psst!. The recipient does not need a 1Password account. They just open the link in a browser and see the item. They can copy the password without installing anything.

How do I revoke a shared link?

In the 1Password app, go to the item you shared, click the Share button (or the share icon), and you’ll see a list of active links. Click the trash icon or “Revoke” next to the link you want to invalidate. The link will stop working immediately.

Can I set a password on the secure link?

No, 1Password does not offer the option to add an extra password to a Psst! link. The link itself is the only credential needed to access the item. This is why it’s important to send the link through a secure channel.

What happens if the link expires while the recipient is viewing it?

If the recipient has already opened the link and is viewing the item, the expiration won’t suddenly blank out the screen. They can continue to see the item they’ve already loaded. However, if they try to refresh the page or open the link again after expiration, they’ll get an error.

Can I share a password via a secure link from the mobile app?

Yes, the mobile apps (iOS and Android) support creating Psst! links. The process is the same as on desktop: open the item, tap the share icon, choose “Share as link,” set the options, and send the link.

Is there a limit to how many times a link can be viewed?

You can choose between one-time and multi-use when creating the link. Multi-use links can be opened multiple times until they expire. There is no cap on the number of views for multi-use links, but each view is logged in the item’s activity history.

Related

• Forensic Disk Cloning: How It Works
• Workplace Gender Discrimination Protections for Tech Employees
• Clear Recently Watched Disney Plus: Full Guide