{
  "slug": "1password",
  "name": "1Password",
  "maker": "1Password",
  "category": "passwords",
  "verdict": "y",
  "answer": "Yes. Only you can read your 1Password vaults, and only the people you share a vault or item with can read what you share. 1Password never has the keys.",
  "title": "Is 1Password encrypted? Vaults, sharing and quantum",
  "description": "Only you can read your 1Password vaults, and only the people you share with can read shared items. Vault keys aren't post-quantum yet.",
  "parts": [
    {
      "key": "pass",
      "status": "y",
      "words": "Only you",
      "note": "Sealed on your device with a key made from your account password and your Secret Key.",
      "sources": [
        1
      ],
      "label": "Your passwords"
    },
    {
      "key": "share",
      "status": "y",
      "words": "Only you and the people you share with",
      "note": "Shared vaults and item links are sealed so 1Password can't read them.",
      "sources": [
        2,
        3
      ],
      "label": "Shared passwords"
    },
    {
      "key": "pq",
      "status": "x",
      "words": "Not yet",
      "note": "Only connections and some new passkeys use post-quantum methods; vault keys are still wrapped with RSA, and no post-quantum protection for vault contents was announced as of 25 October 2026.",
      "sources": [
        5,
        6,
        7,
        8
      ],
      "label": "Post-quantum"
    }
  ],
  "extra_parts": [],
  "keys": "Your devices, using your account password plus your Secret Key. 1Password never has them.",
  "can_see": "Your name and email address, the IP addresses and kinds of devices you use, and the names of any groups you're in, but not what's in your vaults.",
  "business": null,
  "fix": null,
  "fix_line": null,
  "sections": [
    {
      "id": "can-1password-see-my-passwords",
      "q": "Can 1Password see my passwords?",
      "a": "No. 1Password says all keys are made on your devices and all encryption happens there, so it never learns your account password or keys [1]. Your vault is locked with both your account password and a Secret Key kept on your devices, which 1Password says means nothing it stores can be used to guess your password [1].\n\nWhat its servers hold in readable form is account information, like your name, email address and the devices you use [4]."
    },
    {
      "id": "how-1password-sharing-works",
      "q": "How does 1Password keep shared passwords private?",
      "a": "Each vault has its own key. To share a vault, your app locks a copy of that key for the other person, so only they can open it [2]. 1Password's servers never have the key [2].\n\nYou can also share a single item with a link. The key to open it sits in the part of the link that never reaches 1Password, and you send that link yourself [3]."
    },
    {
      "id": "is-1password-quantum-safe",
      "q": "Is 1Password quantum-safe?",
      "a": "Not fully. In 2026, 1Password added post-quantum key exchange to its connections, first for its web app in March and then for all its own apps by September [6][7]. In October it began supporting post-quantum passkeys for sites that accept them [8].\n\nThe keys that lock your vaults are still shared and stored using RSA, which a large quantum computer could break [5]. No post-quantum protection for vault contents was announced as of 25 October 2026."
    }
  ],
  "sources": [
    {
      "title": "Key security features (1Password Security Design White Paper)",
      "publisher": "1Password",
      "url": "https://agilebits.github.io/security-design/key-security-features.html",
      "read": "2026-10-25"
    },
    {
      "title": "How vaults are shared securely (1Password Security Design White Paper)",
      "publisher": "1Password",
      "url": "https://agilebits.github.io/security-design/sharedVaults.html",
      "read": "2026-10-25"
    },
    {
      "title": "How items are shared with anyone (1Password Security Design White Paper)",
      "publisher": "1Password",
      "url": "https://agilebits.github.io/security-design/share.html",
      "read": "2026-10-25"
    },
    {
      "title": "Server infrastructure (1Password Security Design White Paper)",
      "publisher": "1Password",
      "url": "https://agilebits.github.io/security-design/infra.html",
      "read": "2026-10-25"
    },
    {
      "title": "A deeper look at keys (1Password Security Design White Paper)",
      "publisher": "1Password",
      "url": "https://agilebits.github.io/security-design/deepKeys.html",
      "read": "2026-10-25"
    },
    {
      "title": "A first step toward post-quantum security",
      "publisher": "1Password",
      "url": "https://1password.com/blog/post-quantum-cryptography",
      "read": "2026-10-25"
    },
    {
      "title": "How we deployed post-quantum TLS without any code changes",
      "publisher": "1Password",
      "url": "https://1password.com/blog/post-quantum-tls-without-code-changes",
      "read": "2026-10-25"
    },
    {
      "title": "Launching post-quantum safe passkeys",
      "publisher": "1Password",
      "url": "https://1password.com/blog/post-quantum-passkeys",
      "read": "2026-10-25"
    }
  ],
  "changes": [
    {
      "date": "2026-10-25",
      "text": "First published."
    }
  ],
  "related": [
    "bitwarden",
    "apple-passwords",
    "google-password-manager"
  ],
  "url": "https://isitencrypted.com/1password/",
  "checked": "2026-10-25"
}