iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To use 1Password for Business, an owner or administrator creates the organization, sets access rules, invites employees, and assigns shared vaults. Team members accept their invitations and use a 1Password app or browser extension to save and fill work credentials. Set up shared vaults before distributing passwords, and treat single sign-on (SSO) and automated provisioning as separate identity-management tasks.
1. Prepare the organization before inviting employees
The person who creates a 1Password organization becomes its owner and receives administrative privileges. Before sending invitations, decide which teams need access to which work credentials and establish the initial policies that fit your organization.
1Password’s administrator guidance describes controls for password requirements, two-factor authentication, sign-in, app-version visibility, and keeping apps updated. Available controls can depend on the plan, so check the current Business plan details before designing policies around a particular feature.
- Identify which work items should be shared and who needs them.
- Plan vaults around teams or projects rather than putting every company credential in one broadly accessible vault.
- Decide who will administer the organization, review access, and handle account recovery.
2. Invite and onboard your team
Administrators can invite people individually by email or use a signup link. Team members must confirm their accounts before they can access shared items. For a straightforward rollout, give each person the same short set of steps:
#1 Best Overall
- ✅ PROTECT ONLINE ACCOUNTS – A password manager, two-factor security key, and secure communication token in one, OnlyKey can keep your accounts safe even if your computer or a website is compromised. OnlyKey is open source, verified, and trustworthy.
- ✅ UNIVERSALLY SUPPORTED – Works with all websites including Twitter, Facebook, GitHub, and Google. Onlykey supports multiple methods of two-factor authentication including FIDO2 / U2F, Yubico OTP, TOTP, Challenge-response.
- ✅ PORTABLE PROTECTION – Extremely durable, waterproof, and tamper resistant design allows you to take your OnlyKey with you everywhere.
- ✅ PIN PROTECTED – The PIN used to unlock OnlyKey is entered directly on it. This means that if this device is stolen, data remains secure, after 10 failed attempts to unlock all data is securely erased.
- ✅ EASY LOG IN –No need to remember multiple passwords because by plugging OnlyKey to your computer, it automatically inputs your username and password. It works with Windows, Mac OS, Linux, or Chromebook, just press a button to login securely!
- Accept the organization invitation and follow the sign-in instructions.
- Install or open a supported 1Password app or browser extension.
- Practice saving a work login, finding it later, and filling it into a sign-in page.
- Use the organization’s shared vaults for credentials meant for colleagues.
The employee guide explains how to save, fill, and change passwords, find items, and share with the organization. For rollout materials, 1Password’s Business launch kit provides tutorials, adaptable email templates, and FAQs, with a path covering business setup, SSO integration, and enabling team members.
3. Share credentials through vaults
Each employee has an Employee vault for their work-related information. That is distinct from organization-shared vaults: an item belongs in a shared vault when colleagues who have permission need to use it. To share an existing item with a colleague, move it into a vault that person can access.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Use vault membership and permissions to scope access by team or project, then periodically check whether members still need access. For a contractor or other limited collaborator, consider a guest account when access to a single vault is sufficient. The administrator guide describes guest accounts and vault permissions; confirm any plan-specific limits in the current plan comparison.
Free tools Windows power users keep installed
One-click scans. No signup required.
4. Decide whether you need SSO, provisioning, or both
These features solve different problems. Unlock with SSO changes how a member authenticates to unlock 1Password. Automated provisioning manages user and group lifecycle tasks through an identity provider. Choosing one does not automatically provide the other.
Rank #3
- Requires 3 "AAA" batteries (included)
- Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs
Unlock with SSO
With Unlock with SSO, members use an identity provider to sign in to unlock 1Password rather than using their account password and Secret Key. Before setup, confirm that the owner or administrator has the required 1Password permissions, an identity-provider administrator is available, email addresses match, and apps and browser extensions are up to date. Follow 1Password’s current Unlock with SSO setup guide to plan the rollout, connect the provider, and configure the feature. Review its recovery and export considerations before enabling it.
Automated provisioning
Automated provisioning can create users and groups, grant or revoke group access, and suspend users through the identity provider. It does not include SSO. 1Password also notes that selecting its automated provisioning method affects whether a self-hosted SCIM Bridge can be used on that account in the future. Read the current provisioning documentation and any migration guidance relevant to your existing setup before changing methods.
5. Maintain access and review security
Administration continues after onboarding. 1Password’s administrator resources describe audit logs for reviewing what happened and when, usage reports for seeing which items were accessed, and security reports for identifying compromised information and other issues, including developer secrets. These are review tools, not a guarantee that every threat will be detected.
Recommended Free Tools
Team members can use Watchtower to surface password breaches and other security problems. 1Password says Watchtower is updated as breaches are reported; use alerts as a prompt for investigation and response, not as a substitute for a response process. Build recurring access reviews into your administration routine, with a named owner for checking vault membership and handling departures.
Best Value
- FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
- SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
- DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
- DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
- Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)
6. Choose a plan based on team needs
The official U.S. pricing page checked on October 7, 2026 listed the following prices and a 14-day free trial. Prices and packaging can change, so confirm the currency, billing period, seat count, and current terms on the pricing page before purchasing.
| Plan | Price shown (U.S., checked Oct. 7, 2026) | Stated billing and size |
|---|---|---|
| Teams Starter Pack | $24.95 per month | Billed annually; up to 10 members |
| Business | $8.99 per user per month | Billed annually |
| Free trial | 14 days | Trial duration listed on the pricing page |
The same page described Business as adding identity-provider integrations, expanded role-based vault sharing and permissions, Watchtower alerts, and broader administration and reporting. It also lists developer tools and workflows such as CLI, SDKs, SSH key signing, Git commit signing, and integrations. Check current plan terms to confirm that the features your organization needs are included.
For a small team, compare the fixed-price starter option with the per-user Business plan using your actual member count. For either plan, assess whether you need identity integrations, more granular permissions, guest access, security reporting, or delegated administration; do not assume that the presence of an identity feature means both SSO and provisioning are included.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
