Topics Map > Office of Cybersecurity > Tools and Software > 1Password
1Password - Password Manager FAQs
What is 1Password?
1Password is a Password Manager. Password managers are apps that generate and store all the passwords you want to save. The passwords are stored securely and are automatically entered on websites and apps when you need to log in. It creates and remembers the strong, unique passwords that keep you safe online and fills them in so you don’t have to.
1Password lets you save credentials, documents, secure information, and more into one secure vault that is easily accessible with a single click.
- 1Password canGenerate and suggest new, unique passwords for you.
- Automatically save passwords, PiNs, and login details for each website/application
- Autofill logins, credit cards, addresses, and identities into forms
- Securely share items like passwords, credit cards, or documents with colleagues through shared vaults
- Always monitor your data online to notify you of any security risk
- Protect you and your family online with a free 1Password Families account
Is 1Password safe?
Yes, 1Password is safe as are other Password Managers, especially compared to the alternative of not using one. Not only do password managers offer the convenience of generating and storing strong, unique passwords, they make staying safe online easy while promoting good security habits.
Can password managers be hacked?
Yes, but most password managers employ several layers of security against breaches. A hack doesn’t necessarily mean that your data can be accessed. While there is no way to completely avoid a hack in any scenario, reputable password managers will transparently explain what process they have in place to keep your data secure in the event of a breach.
Does 1Password work on multiple devices?
Yes, most paid password managers work on multiple devices by syncing your passwords to various devices through the cloud. There’s no limit to the number of devices where you can use 1Password. Install it on all your computers and mobile devices to always have your information with you. After everything is in sync, it’ll be available even if you need to go offline for a bit. Installers for browser extensions, mobile apps, and desktop apps can be found here: https://support.1password.com/sync/
1Password is available for Windows, MacOS, iOS, iPadOS, Linux, Chrome OS, and Android.
1Password is available on Chrome, Firefox, Safari, Microsoft Edge, and Brave.
Should I use a browser password manager?
Using a dedicated password manager is the safest and most convenient option. Browser password managers are still very limited in their benefits and may be less secure than a dedicated password manager. That said, using a built-in browser password manager is better than nothing, but:
- Built-in browser password managers are limited to that specific browser, meaning you can’t use a different browser or sync your passwords on your phone, at work, or on any other device.
- Many browser password managers only store passwords, meaning you can’t store other items like secure notes, sensitive documents, credit cards, and more.
- You can’t safely and conveniently share passwords with your family or colleagues
- If you lose access to your passwords you might not be able to recover them on another device, or recover your account via a family or team member.
How often should I change my passwords?
There is no need to change your passwords regularly. Apart from being inconvenient, changing your passwords regularly makes you more vulnerable to data breaches and hackers than choosing a strong, complex password when you create your account and only changing it if it’s compromised in a breach.
Humans aren’t good at random – we tend to fall into a predictable pattern for creating new passwords. The passwords are simplistic, incredibly easy to remember, and often go up in sequential order, because we only change the number or special character that’s tacked on the end. These simple and predictable password patterns are easy to hack.
Are passwords going away?
No, passwords are not going away any time soon. Passwords are simple for developers to implement and have been ubiquitous for a long time, and passwordless options still have a long way to go. For example, eliminating passwords doesn’t mean you’re eliminating all forms of authentication.
Using biometrics, like facial recognition or a fingerprint scan, has become a more common way to avoid passwords – but while you can change a compromised password at any time, you can’t change your biometrics. Issues like these are still in need of solutions, are we’re not there yet.
For the time being, strong, unique passwords, two-factor authentication, and a password manager are your best options for staying secure online. While the way we use passwords will continue to evolve, passwords are still more relevant than ever, so it’s best to focus on improving your existing password management for the foreseeable future.
Are generated passwords safe?
Yes. It’s safer to use randomly generated passwords than it is to create your own. However, not all password generators are built equal. It’s important to make sure that the password generator you’re using has security certifications, doesn’t store logs, and is transparent about how it works and what protocols are in place.
How do I create a strong password?
To create a strong password, follow these best practices:
- Make passwords at least 16 characters in length. The longer, the better.
- Randomness is a critical factor in password strength, and the best way to generate a truly random password is with a password generator.
- Never include personally identifiable information in your passwords – or any fields related to your login credentials.
Why should I use a different password for every account?
If you use the same password for both your email and your bank account login, an attacker only needs to steal one password to get access to both accounts, doubling your exposure. If you’ve used that same password for 14 different accounts, you’re making the attacker’s job very, very easy. You can protect yourself by using a password generator to create unique passwords that are easy to remember.