Estate planning as a 1Password account holder
AgileBits Inc. reviews transfer requests for accounts individually upon receipt of documentation
1Password is a password manager that stores login credentials, credit cards, secure notes, identity documents, software licenses, file attachments, and shared vaults. 1Password uses a zero-knowledge architecture where all data is end-to-end encrypted with keys derived from the account password and Secret Key — meaning 1Password itself cannot access vault contents.
When a 1Password account holder dies, their accounts may be transferred to a designated person at AgileBits Inc.'s sole discretion. A transfer is not guaranteed, and satisfactory documentation is required before processing any request.
What happens at death
1Password has no formal bereavement or estate process. There is no dedicated form, support path, or policy page for deceased account holders. Due to 1Password's zero-knowledge architecture, even 1Password itself cannot access or decrypt vault contents. If the account password and Secret Key are both lost, vault data is permanently and irrecoverably inaccessible. The Emergency Kit (a PDF containing the Secret Key with space to write the account password) is the primary mechanism for estate access. The Terms of Service prohibit account assignment or transfer without prior consent, with no exception for death or estate administration.
How to protect your 1Password accounts
Because AgileBits Inc. reviews transfer requests on a case-by-case basis, there is no guarantee that accounts will be transferred after death. Lifetime planning reduces dependence on that outcome.
7 steps for managing your 1Password accounts during your lifetime:
1
Print your Emergency Kit and write your account password on it. Store it with your will, in a safe deposit box, or with a trusted person. The 1Password founders have publicly stated they include their printed Secret Keys with their wills.
2
If you use two-factor authentication, write the 16-character 2FA recovery secret on the Emergency Kit as well. Without it, even someone with the correct password and Secret Key may be locked out.
3
Set up 1Password Families and designate at least two Family Organizers. Family Organizers can manage billing and shared vaults if one organizer becomes unavailable. A single organizer creates a single point of failure.
4
Share critical credentials through shared vaults rather than keeping everything in your Private vault. Items in shared vaults are accessible to other family members; items in Private vaults require your personal credentials to access.
5
Create a "digital estate" vault shared with your executor or spouse containing the most critical account credentials (email, banking, insurance, etc.).
6
Consider periodically exporting your vault data as a backup. Export to 1PUX format for complete data including attachments. Store the export securely (encrypted drive, safe deposit box) -- exported files are unencrypted plaintext.
7
Document where your Emergency Kit is stored in your will or estate planning documents. Without the Emergency Kit, your executor may be permanently locked out of all your digital accounts.
Family sharing
A 1Password Families account includes up to 5 members plus 5 guests. Family Organizers manage members, recover accounts, and control vault sharing. Shared vaults allow family members to access common credentials (Wi-Fi passwords, streaming logins, etc.). Each member also has a Private vault that only they can access. Family Organizer account recovery requires the locked-out person to click a recovery email and create new credentials — it cannot be completed on behalf of a deceased person. A Family Organizer cannot recover their own account.
When someone dies
Handling 1Password accounts after a death
Transfer is handled on a case-by-case basis, 6-step process, and 2 required documents.
View details →1Password does not support beneficiary designations. Unlike bank accounts or investment accounts, there is no way to formally name a beneficiary on this type of account.
Frequently asked questions
The Emergency Kit is a PDF generated when a 1Password account is created. It contains the sign-in address, email, Secret Key, a QR code for setup, and a blank field for the account password. When printed with the password written on it, it provides everything needed to access the account. Without it, vault data may be permanently inaccessible. Store it with your will or in a safe deposit box.
The vault data is permanently and irrecoverably inaccessible. This is by design -- it is the core of 1Password's security model. Even 1Password employees cannot decrypt the data. The Secret Key is a 128-bit cryptographic key generated on the user's device that 1Password never receives. The Emergency Kit is the only safeguard against this scenario.
No documented inactivity deletion policy exists. It is unknown whether accounts with lapsed subscriptions are eventually purged. However, even if the account persists indefinitely, vault access still requires the account password and Secret Key.
Very little. Per their Government Request Guidelines, 1Password can provide account type, payment information, login timing and frequency, vault creation and item counts, storage utilization, IP addresses, connected devices, and the account holder's name, email, and profile picture. 1Password cannot provide decrypted passwords, secure notes, documents, item metadata (titles, URLs, tags), or any vault contents in readable form. Requests are handled via Legal_Requests@agilebits.com.
Sources
Data sourced from AgileBits Inc. primary sources (15 pages reviewed). How we research.