1Password Business Password Manager - monthly subscription

1Password Business, billed monthly

A password manager for an organization that has outgrown doing it by hand. Shared vaults scoped by group, private vaults administrators cannot read, and the two things that separate Business from Teams: single sign-on and SCIM provisioning. Priced per user, per month, billed monthly with no annual commitment.

Teams or Business, and how to tell

The honest way to choose

Under about 20 people, you do not need SSO or SCIM. You onboard someone a few times a year and it takes five minutes. Teams covers you, and paying per user for features you will not configure is money spent for nothing.

Past 30 or so, SCIM is the reason to move to Business. Not convenience. Offboarding. Removing someone from your identity provider revokes their password manager access automatically. Done by hand that step gets missed, and a former employee keeping access to the vault that holds every other credential is the worst version of this going wrong.

Single sign-on is the smaller of the two. It saves a password and puts your existing MFA and conditional access rules in front of 1Password. Useful if you run Microsoft Entra ID or Okta properly. Not a reason on its own to change plan.

There is also a hard ceiling worth knowing: Teams stops at 20 users. If you expect to pass that, start on Business rather than migrating later.

Fewer than 20 people? 1Password Teams Starter Pack covers 10 members in one monthly pack and costs less.

What administrators get

SCIM provisioning with Microsoft Entra ID, Google Workspace, Okta, OneLogin, Rippling and JumpCloud. Accounts created when someone joins, revoked automatically when they leave.

Single sign-on, so your existing MFA and conditional access rules apply to 1Password too.

Custom groups and granular vault permissions, view only, fill only or full edit.

Watchtower, flagging weak and reused passwords, logins missing two-factor authentication, and credentials found in known breaches.

Event streaming to SIEM tools including Splunk, Elastic, Sumo Logic and Panther.

Custom business reports on usage, account activity and onboarding progress.

20 guest accounts for external collaborators, and a free Families plan for every user.

Data residency in Canada

1Password lets you choose where encrypted data is stored: the United States, Canada or the European Union. If you have a Canadian residency requirement, say so when you order and we will create the account in the Canadian region from the start. Moving it later is harder than choosing correctly now.

Why buy it from Nuformat

Billed monthly alongside the rest of your security stack on one invoice, with no annual commitment. We set up the tenant, connect it to your identity provider where that applies, and stay involved after go-live. If you already run Microsoft Entra ID, Sophos ITDR or TrendAI identity protection with us, this sits with them rather than beside them.

Frequently asked questions

What is the difference between 1Password Teams and Business?

Business adds single sign-on, SCIM provisioning, event streaming to SIEM tools, custom groups and custom business reports. Teams has shared vaults, Watchtower, the apps and developer tools, but no SSO and no SCIM. Teams is one monthly pack including 10 members and caps at 20; Business is priced per user with no limit.

Do I need SCIM provisioning?

If you have more than about 30 people, probably yes. SCIM revokes a departing employee's 1Password access automatically when they are removed from your identity provider. Done manually that step is often missed. Below about 20 people, handling it by hand is manageable and Teams is better value.

Do I need single sign-on?

It is the less important of the two. SSO saves your users one password and puts your existing MFA and conditional access policies in front of 1Password. Useful if you already run Microsoft Entra ID or Okta properly, but not a reason on its own to choose Business over Teams.

Is there a minimum number of users on Business?

No. Business is priced per user with no minimum seat count and no annual commitment when bought through Nuformat. Add or remove users and the next invoice follows.

What is the Secret Key?

A 128-bit key generated on your device and stored there, used alongside your account password to decrypt your data. Both are required, so a stolen account password alone does not open a vault. 1Password cannot decrypt your data either.

Where is our data stored?

1Password offers data residency in the United States, Canada or the European Union. Canadian organizations with residency requirements can keep encrypted data in Canada. Choose the region when the account is created, because moving later is harder.

What happens when someone leaves?

With SCIM provisioning, removing them from your identity provider revokes their 1Password access automatically. Without it, an administrator suspends the account and recovers any items held in their private vault.

Does 1Password support developer workflows?

Yes, on both plans. SSH key signing, Git commit signing, a CLI, SDKs, and integrations with IDEs, CI/CD pipelines and infrastructure-as-code tools.

Plan features, user limits and guest account counts as published by 1Password. Pricing and availability confirmed by Nuformat at the time of order.