1Password: Secret Key Architecture and Passkey Support Reviewed

1Password has been at this longer than most — AgileBits started out in Toronto in 2005 building a Mac-only password manager, and the company now claims something in the region of 15 million individual users plus six figures' worth of business accounts. What has kept it interesting isn't longevity, though. It's the Secret Key: a 128-bit value generated on your own device that never touches 1Password's servers and gets folded into your master password to derive the encryption key. It's an unusual design decision, and it has aged extremely well.

The practical upshot is that a server-side breach of 1Password's encrypted vault data would be, by the architecture's own logic, useless to an attacker without a second factor they were never in a position to steal. That's a meaningfully different threat model to "we hash your master password very slowly and hope for the best," and it's the main reason security-conscious users keep recommending this one. Add AES-256-GCM, zero-knowledge decryption on-device, and passkey support now rolled out across platforms including native Windows 11 integration, and the fundamentals look current rather than legacy.

Who's it for? People who take credential hygiene seriously and are willing to pay $36 a year for it. Families and teams who want Watchtower breach monitoring, Travel Mode, TOTP autofill and secure sharing in one place. It is decidedly not for anyone shopping for a free password manager, and it's a harder sell to the genuinely non-technical relative you're setting up remotely.

The security story is the review. The Secret Key does real work: it means even a mediocre master password inherits 128 bits of entropy it didn't earn, which is a rare case of good architecture compensating for predictable human behaviour rather than scolding it. Coverage is broad too — desktop across Windows, macOS and Linux, mobile on both platforms, web access, and extensions for every browser that matters including Brave and Safari. Passkey support arriving across the board keeps it from looking like a product defending yesterday's login model.

The costs of that design are real and worth stating plainly. There is no recovery backdoor. Lose the Secret Key with no enrolled devices left and the vault is gone — permanently. That is the correct engineering trade-off and I wouldn't want it changed, but it shifts genuine responsibility onto the user, and the Secret Key setup step is repeatedly flagged as a stumbling block for beginners. Pair that with support limited to a chatbot, email and a knowledge base — no live chat, no phone — and the onboarding experience is thinner than the price suggests it should be. If something goes wrong at 11pm, you're reading documentation.

Pricing is the other friction point. $36 a year is not expensive for what you get, but the absence of any free tier beyond a 14-day trial puts 1Password in direct, unflattering comparison with rivals that let you start at zero and upgrade later. You're being asked to commit before you've properly lived with it.

One caveat on the evidence: a clean breach record is claimed by a single source and I'd treat it as encouraging rather than established, and the business customer count varies between sources. Neither changes the verdict. This is a mature, well-architected product whose main weaknesses are commercial and experiential rather than technical — and for anyone who values the security model, those are the right weaknesses to have. It lands at 4.5 out of 5, held just short of perfect by no free tier, no live support, and a setup process that asks more of newcomers than it should.