1Password for Business: Team Setup Guide

Setting up 1Password for a business involves creating an account, inviting team members, and configuring policies to secure shared credentials. This guide walks through the practical steps from initial setup to daily use, covering the key decisions you will make along the way.

Why Teams Need a Password Manager

Employees routinely reuse passwords across work and personal accounts, and shared logins are often passed around in spreadsheets or chat messages. A password manager gives every team member a unique, strong password for each service and stores them in an encrypted vault. For a business, the main benefits are centralized control, audit logs, and the ability to revoke access instantly when someone leaves. 1Password specifically offers shared vaults, item history, and two-factor authentication (2FA) storage, which reduces the risk of phishing and credential stuffing attacks.

Before You Begin: What You Need

• A domain name you control (for email verification and SSO options).
• A payment method and a decision on the plan tier (Teams, Business, or Enterprise).
• An admin account that will own the initial setup.
• A list of team members and their work email addresses.
• Decide whether to use 1Password’s built-in authentication or integrate with an existing SSO provider like Google Workspace or Microsoft Entra ID.

The Business plan adds administrative controls like custom roles, event logs, and guest access. The Teams plan is simpler and cheaper but lacks those governance features. If you have compliance requirements or need to manage many users, Business is the usual starting point.

Step-by-Step Setup Process

1. Create the account: Go to 1Password.com and choose “Try Business� or “Start a business trial.� Enter your work email and a strong master password. This master password is the key to your account – if you lose it, 1Password cannot recover it for you. Write down your Secret Key (a long code generated during setup) and store it in a safe place, like a physical safe or a secure document.
2. Verify your domain: 1Password will ask you to verify that you own the domain in your email address. You do this by adding a DNS TXT record or uploading an HTML file to your website. This step is essential for enabling SSO and for managing accounts under your domain.
3. Invite your team: In the admin console, go to “People� and click “Invite People.� Enter each person’s email address. They will receive an email with a link to create their own account, choose a master password, and download the app. You can also import users from a CSV file or sync with your identity provider.
4. Create shared vaults: Vaults are containers for logins, documents, and other items. Start with a “Company� vault for shared credentials, and create separate vaults per department or project (e.g., “Marketing,� “Development�). Set access permissions per vault – who can read, write, or manage.
5. Configure policies: In the admin console, under “Policies,� you can set requirements like minimum master password length, require 2FA for all members, and control whether users can export items. For most businesses, requiring 2FA and setting a minimum length of 12 characters is a good baseline.
6. Install the apps: Ask team members to install the 1Password desktop app, browser extension, and mobile app. They can download these from 1Password.com/downloads. The browser extension is crucial for autofill on websites.
7. Migrate existing passwords: Encourage users to import their existing passwords from browsers or other managers. 1Password can import from CSV files or directly from Chrome, Firefox, and Safari. For shared accounts, move them into the shared vault.

Common Problems and How to Fix Them

• Users forget their master password: There is no backdoor. The only recovery option is for an admin to reset the user’s account, which requires the user to have a recovery code or an admin to initiate a reset. To avoid this, emphasize the importance of the master password and Secret Key during onboarding.
• SSO not working: If you integrate with Google or Microsoft, ensure the domain is verified and the SSO app is configured correctly. Check that users are logging in with the same email domain as your SSO. If issues persist, disable SSO temporarily and use the standard login.
• Duplicate items: When importing from multiple sources, duplicates are common. Use the “Duplicate� feature in the app to merge them. For large imports, clean up the CSV before importing.
• Users not using the browser extension: Some employees may resist. Set a policy that requires the extension for work devices. Provide a short training session showing how to save and autofill passwords.
• Guest access: If you need to share a vault with an external contractor, use the guest feature. Guests have limited access to only the vaults you share, and you can revoke access at any time.

Costs and Plans

1Password pricing is per user per month, billed annually. The Teams plan costs about $19.95 per month for up to 10 users (around $2 per user). The Business plan is $7.99 per user per month. Enterprise pricing is custom. These prices are subject to change, so check the official site for current rates. The Business plan includes features like activity logs, custom roles, and SSO, which are worth the extra cost for larger organizations. There is no free tier for business, but a 14-day trial is available.

Security Best Practices

• Require two-factor authentication for every account. 1Password can store TOTP codes, but it is safer to use a separate authenticator app for the 1Password account itself.
• Use the “Watchtower� feature to identify weak, reused, or compromised passwords. It scans your vaults and gives a security score.
• Regularly audit who has access to which vaults. Remove users who leave the company immediately.
• Enable the “Travel Mode� for employees who travel across borders. This allows them to temporarily remove sensitive vaults from their devices.
• Never share the master password. Each user has their own.

Alternatives to 1Password

Other business password managers include Bitwarden, Dashlane, and Keeper. Bitwarden is open-source and offers a self-hosted option, which some businesses prefer for data control. Dashlane has a similar feature set but a different pricing model. Keeper focuses on security with features like file storage and breach monitoring. The choice often comes down to budget, compliance needs, and user preference. 1Password is known for its polished user experience and strong security architecture, but it is not the only option.

Frequently Asked Questions

Can I use 1Password for free for my business?

No, there is no free business plan. However, you can try it free for 14 days. The Teams plan is relatively inexpensive for small groups.

What happens if an employee leaves the company?

An admin can revoke their access immediately. This prevents them from accessing any vaults. Their personal items can be transferred to another user or archived.

Is 1Password secure enough for compliance (SOC 2, GDPR)?

Yes, 1Password is SOC 2 Type 2 certified and GDPR compliant. They undergo independent security audits. For compliance, you need the Business or Enterprise plan to get the necessary reporting and audit logs.

Can I migrate from LastPass to 1Password?

Yes, you can export your data from LastPass as a CSV and import it into 1Password. The process is straightforward, but you may need to clean up the CSV for formatting issues.

Does 1Password work on all devices?

Yes, 1Password has apps for Windows, macOS, Linux, iOS, and Android, plus browser extensions for Chrome, Firefox, Safari, Edge, and Brave. All devices sync via your account.

What is the Secret Key and why is it important?

The Secret Key is a unique 34-character code generated for your account. It is combined with your master password to encrypt your data. Even if your master password is weak, the Secret Key adds an extra layer of protection. You must keep it safe – it is needed when setting up a new device.

Related

• Business Phone Systems for Remote Teams: Which Fits?
• Turn Kits Allen Key Redesign: Key Concept Changes
• Encrypted Flash Drive: What It Is & How to Choose