1

1Password

Builds password and access security tools

Frontend Developer

Full-Time
$123k - $172k/yr+ Equity grant + Incentive programs
Mid
Remote in USA+1 moreMore locations: Remote in Canada
RemoteRemote employees must work from their home country and be willing to travel for in-person engagement, including offsites, team meetings, and events.
Software EngineeringFrontend Engineering

About the job

Requirements
  • At least two years of experience in frontend software development.
  • Strong TypeScript fundamentals and experience with React or a comparable component-based framework.
  • Experience contributing to features end-to-end, from API contract through component implementation and unit tests.
  • Experience building complex form flows, including multi-step wizards, validation, error states, and asynchronous operations with sequential API calls and robust failure handling.
  • Strong attention to code quality and visual craft, including critically reviewing work and maintaining a high standard for shipped work.
  • Working knowledge of accessibility fundamentals, including keyboard navigation, Accessible Rich Internet Applications (ARIA), and screen reader considerations.
  • Familiarity with internationalization workflows, including static string extraction and integration with a localization system.
  • Ability to work iteratively, manage ambiguity, communicate progress clearly, and coordinate with cross-functional teams throughout the development cycle.
Responsibilities
  • Build controls and workflows that give developers and security teams visibility over how machine workloads, continuous integration and continuous delivery (CI/CD) pipelines, and artificial intelligence agents access credentials at runtime.
  • Build user interfaces for a developer-facing secrets management product, including CI/CD integrations, workload identity flows, and environment configuration.
  • Contribute to the authentication prompt and autofill experience across desktop and web surfaces.
  • Build product surfaces including multi-step setup wizards, list/detail pages, and administration policy controls, implementing designs from Figma through production-ready components.
  • Ship features incrementally, collaborating from scoping through launch, with visibility controls and policy checks shaping what different users see.
  • Follow established design system guidelines and contribute to component patterns; provide component tests alongside every feature as part of the pull request process.
  • Collaborate with product, design, and infrastructure partners throughout the development lifecycle, from planning and estimation through launch and iteration.
  • Review code and share knowledge with teammates.
  • Contribute to and maintain documentation on code processes, systems, and decisions.
  • Participate in a rotating on-call schedule shared across the team.
Desired Qualifications
  • Experience with Electron or other desktop-targeted web runtimes.
  • Working knowledge of GraphQL, including writing queries and mutations and managing fetch/refetch behavior with Apollo Client.

About the company

1Password builds password management and identity security software for individuals, families, and organizations. Its password manager stores logins, passkeys, and sensitive documents in encrypted vaults, with apps and browser extensions that generate passwords and fill them into websites. Businesses use administrative controls to set access permissions, monitor sign-ins, and automate account provisioning through integrations with their existing identity systems. The company sells subscriptions for personal accounts and teams, while developer tools retrieve credentials for applications without putting secrets directly in source code. Founded in 2005, 1Password is headquartered in Toronto, Ontario.

Company Size

1,001-5,000

Company Stage

Series C

Total Funding

$920M

Headquarters

Toronto, Canada

Founded

2005

Get referred to 1Password

See people who can refer or advise you

Simplify Jobs

Simplify's Take

What believers are saying

  • Operations generate cash: in November 2025, 1Password reported over $400 million annual recurring revenue and positive free cash flow.
  • Enterprise demand anchors sales: businesses accounted for over 75% of 1Password revenue in November 2025.
  • Time off has a regular cadence: 1Password supplements employee PTO with quarterly wellness days.

What critics are saying

  • Consumer acquisition faces free alternatives: 1Password sells paid plans, while Bitwarden keeps basic password management free.
  • AI adoption is a job expectation: 1Password says using AI is essential to its daily work.
  • Cost controls required repair: August 2026 CFO report described a fivefold AI vendor bill and revised approvals.

What makes 1Password unique

  • Password-based vaults add a separate secret: 1Password combines account passwords with a device-generated Secret Key.
  • Travel Mode limits carried data: 1Password removes unapproved vaults from apps when users travel.
  • Security extends beyond vaults: 1Password Device Trust checks over 100 health signals before allowing access.

Help us improve and share your feedback! Did you find this helpful?

Benefits

  • 👶 Maternity and parental leave top up programs
  • 👟 Wellness spending account
  • 🏝 Generous PTO policy
  • 💖 Company-wide wellness days off scheduled throughout the year
  • 🧠 Complimentary Headspace membership
  • 🩺 Comprehensive health coverage
  • 📈 Employee stock option program for all full time employees
  • 💸 Retirement matching program
  • 💡 Training budget, 1Password University access, and learning sessions
  • 🔑 Free 1Password account (and friends and family discount!)
  • 🤝 Paid volunteer days
  • 🌎 Employee-led DEI&B programs and ERGs

Growth & Insights and Company News

Headcount

6 month growth

3%

1 year growth

4%

2 year growth

4%
1Password
Oct 6th, 2026
AI agents and NHIs present security leaders with new credential and access challenges. The GigaOm Radar for Enterprise Password Management makes it clear that 1Password is uniquely able to manage t...

1Password named a leader in the GigaOm Radar for Enterprise Password Management. by Rachel Sudbeck October 6, 2026 - 5 min Identity and access have changed drastically in the past decade. To meet the needs of the modern enterprise perimeter, Enterprise Password Managers (EPM) have evolved far beyond traditional workplace password storage. The GigaOm Radar: Enterprise Password Management charts this evolution of the category. As the report states, "...evaluation now turns on what surrounds the vault: passwordless login paths, machine and AI-agent credential delivery, breach intelligence, and the administrative machinery to govern all of it at scale." As such, it's an honor to announce that GigaOm Radar positions 1Password as a Leader and Disruptive Pioneer among Enterprise Password Management platforms. This is the fifth year running that 1Password has been named a leader in EPM. Read on to learn more about the Radar's analysis and criteria for EPM platforms, and how 1Password's solutions are built to manage the complex access needs of modern companies. Why GigaOm declared 1Password a leader in Enterprise Password Management. GigaOm's report analyzes 23 EPM vendors according to how well they meet essential enterprise password management requirements, such as strong cryptography and the ability to manage developer secrets. It also analyzes emerging critical capabilities within enterprise password management, such as managing credential and secrets access for AI agents. The report calls attention to how EPM platforms serve various security and management needs across the "Tech Buying Triad" of CIOs, CTOs, and CISOs. Across the core capabilities for these buyers, 1Password EPM ranked highly on several distinct criteria. These include, among others: * Browser and application coverage * Developer API ecosystem * Identity integration extensibility * Passwordless and passkey support * Secrets management integration * Compliance certifications * Vault cryptography architecture 1Password's strength is depth on two axes, developer tooling and identity integration. The developer surface carries published OpenAPI specifications, maintained Go, JavaScript and Python SDKs, a Terraform provider, a Kubernetes operator, and an explicit version-support and compatibility statement. Identity integration backs it up: OIDC Unlock with SSO participates in key management, with device-key-encrypted credential bundles and IdP policy evaluated at every unlock...For an organization that wants its vault wired into identity and developer workflow rather than sitting alongside it, 1Password is built for the job." -Paul Stringfellow, GigaOm Radar: Enterprise Password Management AI-agent and non-human identity governance with 1Password EPM. AI agents and other non-human identities (NHIs) are increasingly used in enterprise environments to access applications, APIs, infrastructure, and sensitive data. An agent may need credentials to complete a specific task, but their access needs differ from human employees. To prevent credentials from becoming permanently accessible through the agent's context, that access should be scoped, time-bound, individually revocable, and audited separately from the human who initiated the work. Critically, GigaOm's report also highlights 1Password as a leader in its "Disruptive Pioneer" category, referring to organizations that leverage emerging technologies to redefine authentication and access management. In particular, they ranked 1Password highly in their criteria for "Agentic non-human identity credential governance." If AI agents will access credentials in your environment, they should have their own identities. These should be scoped, expiring, individually revocable, and audited separately from their human sponsors. A vault that allows an agent to use only its owner's identity may make it harder to establish exactly who, or what, performed an action during an audit." -Paul Stringfellow, GigaOm Radar: Enterprise Password Management Governing access for AI agents and NHIs is a critical capability in the modern enterprise. 1Password's own research has found that while 65% of developers say they're expected or encouraged to use AI agents, only 33% have a secure way to do so. GigaOm echoes these findings, stating that "Agentic and non-human identity governance is the youngest capability in this evaluation and one of its weakest field-wide... The gap between the front and the floor is wider here than on any established criterion." In short, capabilities like agentic autofill make 1Password truly unique among EPM offerings, with a singular strength in its platform's ability to manage credential access for agents and NHIs. Innovation built on a strong foundation. The modern enterprise faces continuous evolution in how 1Password LLC define credentials and identities, and EPM platforms need to straddle this divide. For example, passwordless authentication is critical to modern security, but few would argue that it means 1Password LLC can stop securing traditional passwords. 1Password has been named a leader in GigaOm's EPM Radar for the fifth year running; for an EPM to be effective, it needs to evolve to meet modern enterprise access needs, while still providing essential security controls. GigaOm's report this year illustrates that 1Password EPM is a leader on both fronts. AI agents and NHIs present security leaders with new credential and access challenges. The GigaOm Radar for Enterprise Password Management makes it clear that 1Password is uniquely able to manage this new access perimeter, built on a security model that provides the strongest foundation for credential and secrets management. Ready to read the full GigaOm Radar for Enterprise Password Management?

IntelPro
Sep 9th, 2026
Viral AI assistant Instinct now has its own email address.

Viral AI assistant Instinct now has its own email address. Instinct's new email feature lets the AI agent create and manage accounts, contact businesses, handle support requests, and do more on users' behalf. Instinct, the buzzy new AI assistant now valued at $2.5 billion, is rolling out a new feature that will allow it to do more on its users' behalf: It's giving everyone Instinct email addresses. The company's founder, Noah Shinn, said on Tuesday that the new email addresses let the agent create and run its own accounts without cluttering up users' inboxes. Shinn said the idea is to allow Instinct to handle the account sign-up and management for you if it needs to do so for completing tasks that require email, like creating accounts on various services, contacting businesses, and following up on things that need attention. "For example, Instinct can use its own email to contact a restaurant about a special request, ask a business about availability, or sign up for a service it needs to complete your task," Shinn wrote on X. IntelPro is giving Instinct access to more tools. Starting today, your Instinct will have its own email address. This is the first step towards enabling your Instinct to own and run its own accounts. Most everyday tasks flow through your email: creating accounts, confirming bookings,... pic.twitter.com/brwQSsJnmJ Noah Shinn (@noahrshinn) September 8, 2026 The feature could help make Instinct's user experience more seamless, as users wouldn't have to intervene to log in or provide their credentials. (Instinct partnered with 1Password on the latter last week.) But for businesses trying to establish a relationship with their customers, having an AI manage the account would provide a layer of obscurity as to who they're actually dealing with. Customers, however, may see this as a perk, as many are these days tired of having to turn over their emails and phone numbers just to complete simple tasks or one-offs. Instinct says it has reserved some email addresses for its earliest users, and others can claim theirs at mail.instinct.com. Shinn suggested that users could now forward emails to Instinct, too, when it needs certain information to complete a task. For example, if a user wants Instinct to handle a product return on their behalf, they could forward their order confirmation to Instinct's email address. Then Instinct could contact support, provide the order details, ask whether they wanted a return or replacement, and then come back with the return label to print. Instinct's email can also be added to group threads so it can keep track of the information exchanged, or it can be sent a long thread that the user needs to work with, perhaps by asking what decisions still need to be made, which tasks are due when, or other questions. The bot will check back in with the user when it requires their input, but otherwise will act autonomously. The feature is one of several recent updates aimed at improving Instinct's capabilities. It follows the recent partnership with 1Password to help enable logins to users' existing accounts, as well as a new location-sharing feature that lets Instinct understand where the user is currently so it can help them find nearby businesses or restaurants, or map routes and itineraries, among other things. Users can also ask questions about their location history, like where they parked or what restaurant they tried last month. Instinct also partnered with Stripe in August to offer a more seamless payment experience, letting the agent do things like book trips, classes, and appointments and make purchases.

It's FOSS
Sep 3rd, 2026
1Password just pledged $300,000 to DHH's Omarchy, and its own employees aren't happy.

1Password just pledged $300,000 to DHH's Omarchy, and its own employees aren't happy. Internal Slack messages show the CEO and cofounder gave staff two very different explanations for the decision. Omarchy has been on something of a roll now. Funding for its foundation has been climbing fast, from an $8 million launch to $10 million a few weeks later, and now crossing $13 million with the most recent pledge. What's drawn my attention are the first two Corporate Patrons, 1Password and 37signals, both of whom have decided to pitch $100,000 a year for the next three years. Now, 37signals I get; DHH is heavily involved there, but 1Password was a surprise entry. Naturally, not everyone's onboard with their pledge. Signs of disagreement. This has not gone well with employees working at 1Password, with company leadership having to take certain damage control measures to assure their staff. An internal Slack message has surfaced (courtesy of The Verge), which shows cofounder Roustem Karimov downplaying the criticism, telling team members that: people have different personal opinions. You believe in your heart that DHH is evil, that you have the moral high ground, and that nothing will change your mind. However, not everyone believes that. It is not fair to claim a monopoly and ostracize team members who might disagree with you. There are people who are afraid to speak up simply because they will be personally attacked. CEO David Faugno responded on a different note, telling employees the company doesn't endorse DHH's views, while also noting that Omarchy is the second most used Linux distribution among 1Password's own users. Why the backlash? DHH is known to be someone who firmly falls on the "right" side of the political spectrum, someone who doesn't shy away from putting his opinions in public view. He regularly posts blogs that show where he stands on certain societal issues, and some of his recent writeups are what's fueling this particular backlash. His recent July post, titled "Wolves, sheep, and gypsies," compares Denmark's wolf population with the Romani people camping in Copenhagen parks, where he argues: "When gypsies take over public spaces, you deport them." Then there's "As I remember London" from September 2025, where he laments about London losing its native Brit majority and a nod of approval for a Tommy Robinson march. Of course, these aren't the only factors behind his disapproval, but you get the gist of it, right? Users could jump ship. If you search for the terms "1Password" and "Omarchy" right now, you are bound to run into the many comments made by disgruntled 1Password users on Reddit and Hacker News. They are calling the choice tone-deaf, given how many smaller open source projects could've benefited from the money. Some are already jumping to alternatives like Bitwarden, while others suggest self-hosting Vaultwarden or going with KeePass and its forks instead. I see the issue compounding too. Back in February, 1Password raised subscription prices, taking effect at renewals from March 27. Individual plans went up 33 percent from $35.88 to $47.88 a year, and family plans went up 20 percent from $59.88 to $71.88. Its community forum already has a long thread full of longtime users saying they were leaving over it. If 1Password continues playing with its users' trust like this, who knows what kind of exodus it will see next? Enjoyed this update? Support independent Linux news coverage It's FOSS has been helping people use Linux for the past 14 years. Help Ubo stay independent from big tech. Become a Plus member, enjoy ad-free reading and get 5 eBooks. Plus yearly Best value Plus lifetime Pay once, Enjoy forever Buy Ubo a coffee Any amount, no commitment A nerd with a passion for open source software, custom PC builds, motorsports, and exploring the endless possibilities of this world.

ITGix
Sep 2nd, 2026
Managing secrets securely in Kubernetes with 1Password.

Managing secrets securely in Kubernetes with 1Password. 02.09.2026 Reading time: 4 mins. Last Updated: 02.09.2026 Table of contents. Managing secrets securely in Kubernetes is a critical challenge for modern cloud-native environments. Application credentials, certificates, private keys, and passwords must be handled in a way that is secure, auditable, and operationally flexible - especially when regular rotation is required. By integrating 1Password with Kubernetes using the External Secrets Operator (ESO), teams can centralize secret management while keeping sensitive data out of Git repositories and Kubernetes manifests. This approach enables Kubernetes workloads to consume secrets securely while maintaining strong access control and rotation practices. Architecture overview: 1Password + Kubernetes. The 1Password integration with Kubernetes works by introducing an abstraction layer between Kubernetes and the 1Password cloud API. Instead of Kubernetes communicating directly with 1Password's cloud service, a 1Password Connect Server runs inside the cluster. This design provides better security, performance, and control. * Kubernetes communicates with the External Secrets Operator * ESO talks to the 1Password Connect Server inside the cluster * The Connect Server authenticates to 1Password using a token * Requested secrets are fetched and returned to Kubernetes This architecture allows secrets to be synced securely into Kubernetes-native Secret objects. Step 1: install External Secrets Operator and configure ClusterSecretStore. To begin, you must install the External Secrets Operator in your Kubernetes cluster. ESO provides the Custom Resource Definitions (CRDs) required to define how Kubernetes connects to external secret providers. The most important CRD in this setup is the ClusterSecretStore. It is a cluster-wide resource that defines how Kubernetes authenticates and communicates with 1Password. Example configuration: kubectl get ClusterSecretStore/ie-onepassword -o yaml apiVersion: external-secrets.io/v1 kind: ClusterSecretStore spec: conditions: - namespaceSelector: matchLabels: bango.com/dept: Engineering provider: onepassword: auth: secretRef: connectTokenSecretRef: key: token name: onepassword-connect-token-ie namespace: ns-dev-external-secrets connectHost: http://onepassword-connect.ns-dev-1password-connect-server.svc.cluster.local:8080 vaults: Engineering DevTest: 1 This configuration instructs ESO to communicate with the 1Password Connect Server rather than the public 1Password API. The Connect Pod authenticates using a token and retrieves secrets from the specified vault. Step 2: create externalsecret resources for applications. To consume secrets inside an application - for example, a service that uses a client certificate to authenticate to a remote endpoint - you must define an ExternalSecret resource. apiVersion: external-secrets.io/v1 kind: ExternalSecret metadata: labels: env: dev name: dev-cert-external-secrets-even namespace: ns-dev-engineering-korek spec: data: - remoteRef: key: CERT Engineering|endpoint|Cert|dev 20260626 property: endpoint_dev_CERT_PUBLIC.pem secretKey: CERT_PEM - remoteRef: key: CERT Engineering|endpoint|Key|dev 20260626 property: endpoint_dev_KEY.key secretKey: CERT_PRIVKEY target: name: dev-external-secrets-even creationPolicy: Owner deletionPolicy: Retain Key Concepts Explained * remoteRef.property specifies the exact entry inside 1Password to be retrieved. * Applications cannot reference ExternalSecret objects directly. * The target section defines the Kubernetes Secret that ESO creates and keeps in sync. This target secret is what applications ultimately consume. Supporting certificate rotation with even/odd secrets. To enable safe certificate and key rotation, it's recommended to maintain two ExternalSecrets: * dev-external-secrets-even * dev-external-secrets-odd This approach allows: * Seamless certificate rotation * Zero-downtime updates * Easy rollbacks by switching references When a rotation cycle is approaching, new certificates can be added to 1Password and synced to the inactive ExternalSecret without impacting the running application. Understanding creationPolicy and deletionPolicy. Two fields require special attention: creationPolicy: Owner * ESO creates the Kubernetes Secret if it doesn't exist * ESO updates the Secret whenever the external value changes * Deleting the ExternalSecret deletes the target Secret Alternatively, Merge can be used when multiple controllers manage the same Secret. deletionPolicy: Retain * If a secret is accidentally removed from 1Password, the Kubernetes Secret remains * Prevents accidental outages caused by human error * Recommended for production workloads Step 3: verifying externalsecret health. kubectl -n ns-dev-app get externalsecret NAME STORETYPE STORE REFRESH INTERVAL STATUS READY dev-app-external-secrets-even ClusterSecretStore ie-onepassword 5m SecretSynced True dev-app-external-secrets-odd ClusterSecretStore ie-onepassword 5m SecretSynced True Updating secrets in 1Password automatically updates the corresponding Kubernetes Secret without disrupting the application. Step 4: mount multiple secrets using projected volumes. To make both certificate sets available in the same directory inside a container, you can use a projected volume. This allows multiple secrets to be mounted into a single path. Example using Flux and Kustomize: patch: |- - op: add path: "/spec/template/spec/volumes/-" value: name: app-keystore-cert projected: sources: - secret: name: dev-app-external-secrets-odd items: - key: TEST_PEM path: app_keystore-odd.pem - key: TEST_PRIVKEY path: app_keystore-private-odd.pem - secret: name: dev-app-external-secrets-even items: - key: TEST_PEM path: app_keystore-even.pem - key: TEST_PRIVKEY path: app_keystore-private-even.pem The final step is simply configuring the application to reference the appropriate file inside the container. Final thoughts. Using 1Password with Kubernetes via the External Secrets Operator provides a secure, flexible, and production-ready approach to secret management. This setup enables: * Centralized secret storage * Safe certificate rotation * Reduced blast radius from human error * Kubernetes-native secret consumption For teams operating at scale, this approach significantly improves both security posture and operational reliability. Check out more of its blog posts here. Signal, not noise -. Join 12,000+ engineers and business leaders getting field notes on SRE, DevOps and cloud- native reliability. Your work email. More posts. Encryption is one of the first security controls FinTech companies think about when discussing PCI DSS. Sensitive data is encrypted at rest. Connections use TLS. Payment information is tokenized. Cloud... Expanding an iGaming business into a new regulated market is rarely as simple as obtaining a new license. Every jurisdiction comes with its own regulatory expectations, technical requirements, security controls,... Get In Touch ITGix provides you with expert consultancy and tailored DevOps services to accelerate your business growth.

1Password
Sep 2nd, 2026
Introducing universal sign-in: a seamless solution for every way you login.

Introducing universal sign-in: a seamless solution for every way you login. by Travis Hogan and Brandon Lucier September 2, 2026 - 4 min Today 1Password LLC is releasing universal sign-in, a new experience from 1Password that provides a seamless and secure way to sign into any site with your preferred method. It's currently available to all customers in the latest version of the 1Password browser extension. Signing in doesn't happen one way anymore. A single site might support passwords, passkeys, or third-party providers like Google. Over the last several years, 1Password has evolved to support all major authentication methods used today (passwords, passkeys, 2FA, social logins, OIDC and SAML). But the authentication experience varied because of differences with the underlying technologies. Not having a consistent way to use every authentication type 1Password offered meant needing to remember which third-party provider account you used, manually submitting pages, or needing to find and click sign-in fields. No password manager on the market had a single, consistent way to let you sign in, until now. Universal sign-in means that when you land on a login page, 1Password displays a single prompt to sign in using the authentication method you've chosen for that website. No need to remember how you've logged into the website in the past; passwords, passkeys, one-time codes, social logins, and company-managed apps will all appear in the same, intuitive prompt. Simply pick which account you'd like to sign in with, and 1Password handles the rest. How it works. * Visit a login page, or launch a saved login in 1Password with an available sign-in URL. * The universal sign-in prompt appears at the top of the login page using its new advanced field analysis. It'll appear when you need it, and disappear when you don't. * Every account and available authentication method is listed and selectable within the universal sign-in prompt. * Choose the login you'd like to use. Over time, 1Password also learns which accounts and methods you prefer using for that site. * 1Password then automatically fills your credentials across however many steps it takes to log into the site. It submits the forms, enters your one-time code, signs you in with your passkey, or selects the right provider for a social login or a managed app. * If a site requires you to manually complete a sign in step, an alert will display describing what the site needs you to do to complete sign in. 1Password already provided best-in-class autofill functionality. With universal sign-in, 1Password LLC is taking it a step further by improving the accuracy and speed of field analysis (i.e. what 1Password can and should autofill on a webpage) and sign-in with button detection (identifying buttons that allow third-party sign-in). This allows 1Password LLC to surface a consistent sign-in experience across many webpages, even when dynamic content changes. What once required multiple steps and clicks has been streamlined, reducing the time and effort it takes for you to sign in. Improving its field accuracy also improves both filling and autosubmit accuracy, making sure multi-page login flows are a seamless experience. Another crucial improvement involves how 1Password LLC handle URLs. The website address saved on a login is usually not the address that signs you in. It's often the homepage or the URL where you created the account in the first place. When you ask 1Password to open the site and fill in your details, it can leave you searching for the right way to login. To solve this problem, 1Password LLC developed enhanced sign-in URLs. Once every authentication method runs through its universal sign-in system, that system can be driven by something other than your click, including an AI agent acting with your explicit approval. That is the principle behind 1Password for Claude: your credentials stay in 1Password, access is scoped and approved, and the sign-in still happens. Universal sign-in is the layer underneath that makes it work the same way regardless of how a site expects you to authenticate. Universal sign-in is available in the latest 1Password browser extension, across Chrome, Edge, Firefox, Safari and other supported browsers. Already using 1Password? Update your browser extension and you are set. It works with the logins already in your vaults, so there is nothing to move or re-save. New to 1Password?