1Password

Who 1Password is

1Password has built password and access management software since 2005 and more than 180,000 businesses use it. Since acquiring Kolide in 2024, the platform has grown into Extended Access Management: device trust, visibility into unmanaged apps, and developer secrets alongside the password vaults most people know it for.

How we deploy it

Shared credentials in a spreadsheet are usually the first finding in a new engagement. A 1Password rollout is how we close it.

• Vault architecture: vaults organized by team and sensitivity, so access follows role and offboarding is a group removal
• Policies: account recovery, master password rules, and sharing controls set before the first credential goes in
• SSO integration: sign-in connected to your identity provider, so joiners and leavers are handled once
• Engineering secrets: API keys and service credentials moved out of code, config files, and chat threads
• Adoption: a rollout plan and short training so people actually move their passwords in, which is where most deployments fail

We run on it too

Every Amomitto credential lives in 1Password. Client credentials get dedicated vaults with access limited to the consultants on that engagement, and contractor onboarding and offboarding runs through it on day one. When a client gets asked how credentials are managed, the program we set up for them is the same one we run ourselves.