1Password
the best key architecture in the category, from the vendor that just made its audit reports harder to read.
the secret key design genuinely raises the floor on a weak master password — but a closed stack whose reports moved behind a request form in late 2025 is asking for more trust than it used to.
the dual-key model is the real differentiator. a master password you choose plus a 128-bit secret key stored on your devices are combined, so a stolen server-side vault is not brute-forceable against a weak password alone. authentication uses srp, so the password never crosses the wire. it is the strongest answer here to exactly what went wrong at lastpass.
the compliance record is the deepest of the mainstream options — soc 2 type 2 plus iso 27001, 27017, 27018 and 27701 — and the older independent security evaluators reports from 2020 remain downloadable.
the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.
- category
- password managers
- pricing
- $35.88/yr
- website
- 1password.com
the secret key design genuinely raises the floor on a weak master password — but a closed stack whose reports moved behind a request form in late 2025 is asking for more trust than it used to.
we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.