SAME CATEGORY. YOUR PRIORITIES.

Build a comparison.

Compare evidence, costs and trade-offs. Adjust the criteria to reflect your own workflow.

CategoryProduct 1Product 2Product 3 (optional)

MAKE THE SCORE YOURS

What matters most?

Core capabilities carry 32 points; workflow depth carries 68. AI contributes the category-specific weight shown below within those totals. Change group priorities and see every contribution update.

How the score is calculated →

Credential coverage 16% base weightControlled use and handover 20% base weightDevices and identity lifecycle 16% base weightSecurity oversight 16% base weightDeveloper and AI-agent access 12% base weightOperational detail 20% base weight

Documented fit across available plans · unknowns shown as ranges · no customer ratings

Show checksShowing fewer rows does not change the score.

Business password management evidence comparison
Features & decision context	1Password Business 1Password Business 88–100/100 documented fit 88% evidence coverage Core capabilities32 / 32 pts10/10 checks with established status Workflow depth55.5–68 / 68 pts13/18 checks with established status	NordPass NordPass 68–100/100 documented fit 68% evidence coverage Core capabilities27.2–32 / 32 pts8/10 checks with established status Workflow depth40.8–68 / 68 pts8/18 checks with established status
How AI changes fitSame priorities, with and without AI	88–100 with AI86–100 without AIFeature-fit points; not measured ROI	68–100 with AI77–100 without AIFeature-fit points; not measured ROI
Supplier website	Visit 1Password Business	Visit NordPass Ad · affiliate linkWe may earn a commission if you buy through this link.
Good fit for	US teams managing both employee logins and scoped developer or AI-agent credentials.	Companies consolidating employee passwords with managed onboarding and offboarding.
Look more closely when	You need employee-vault recovery after permanent deletion or turnkey autonomous agents without development work.	You require a verified developer secret manager or AI-agent runtime credential broker.
Pricing snapshotDifferent billing units are not directly comparable	$8.99user/month · billed annually $8.99/user/month billed annually ($107.88/year); one-user minimum. Teams Starter is a distinct 10-member bundle. Pricing source	See pricinguser/month Current amounts did not render. Teams is a 10-user pack; Business and Enterprise start at five users. Confirm term and renewal price. Pricing source
Credential coverage 16% base weight
Core capabilityEncrypted business vaultEncrypted business vault. Verify the supported plan and demonstrated workflow.	Supported3.2 / 3.2 pts Encrypted business vaults and device access. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts Encrypted business vault. Official documentation · Oct 20, 2026Source
Core capabilityPassword and passphrase generationPassword and passphrase generation. Verify the supported plan and demonstrated workflow.	Supported3.2 / 3.2 pts Random-character and memorable-word generation. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts Password generation. Official documentation · Oct 20, 2026Source
Depth checkPasskey storagePasskey storage. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate passkey storage with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Store/use/share passkeys; export currently requires iOS/Android. Official documentation · Oct 20, 2026Source	Supported4.8 / 4.8 pts Stored passkeys. Official documentation · Oct 20, 2026Source
Depth checkAuthenticator-code storageAuthenticator-code storage. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate authenticator-code storage with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Store TOTP seeds and fill or copy rotating codes. Official documentation · Oct 20, 2026Source	Supported4.8 / 4.8 pts Built-in authenticator codes. Official documentation · Oct 20, 2026Source
Controlled use and handover 20% base weight
Core capabilityShared team credentialsShared team credentials. Verify the supported plan and demonstrated workflow.	Supported4 / 4 pts Shared vaults with individual and group access. Official documentation · Oct 20, 2026Source	Supported4 / 4 pts Business shared folders. Official documentation · Oct 20, 2026Source
Core capabilityBrowser and app autofillBrowser and app autofill. Verify the supported plan and demonstrated workflow.	Supported4 / 4 pts Browser/app filling of saved credentials. Official documentation · Oct 20, 2026Source	Supported4 / 4 pts Browser/app autofill. Official documentation · Oct 20, 2026Source
Depth checkGranular vault permissionsGranular vault permissions. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate granular vault permissions with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported6 / 6 pts Business separates item rights, vault management and client restrictions. Official documentation · Oct 20, 2026Source	Supported6 / 6 pts Folder permission levels; inherited below top level. Official documentation · Oct 20, 2026Source
Depth checkLeaver vault recovery or transferLeaver vault recovery or transfer. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate leaver vault recovery or transfer with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported6 / 6 pts Recovery plus mailbox access permits pre-deletion transfer; deleted Employee vaults are unrecoverable. Official documentation · Oct 20, 2026Source	Supported6 / 6 pts Owner transfer; unavailable over 2,100 items. Official documentation · Oct 20, 2026Source
Devices and identity lifecycle 16% base weight
Core capabilityMobile vault accessMobile vault access. Verify the supported plan and demonstrated workflow.	Supported3.2 / 3.2 pts iOS and Android vault applications. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts iOS/Android access. Official documentation · Oct 20, 2026Source
Core capabilityDesktop vault accessDesktop vault access. Verify the supported plan and demonstrated workflow.	Supported3.2 / 3.2 pts Windows, macOS and Linux applications. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts Desktop applications. Official documentation · Oct 20, 2026Source
Depth checkBusiness single sign-onBusiness single sign-on. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate business single sign-on with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Business OIDC; one IdP, Owners excluded, offline biometric setup required. Official documentation · Oct 20, 2026Source	Supported4.8 / 4.8 pts Enterprise Entra/Okta/AD FS; tier matters. Official documentation · Oct 20, 2026Source
Depth checkDirectory provisioningDirectory provisioning. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate directory provisioning with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Business SCIM provisions/suspends users and groups; recovery-privileged groups excluded. Official documentation · Oct 20, 2026Source	Supported4.8 / 4.8 pts Enterprise SCIM: Entra ID/Okta user/group lifecycle. Official documentation · Oct 20, 2026Source
Security oversight 16% base weight
Core capabilityWeak or exposed credential checksWeak or exposed credential checks. Verify the supported plan and demonstrated workflow.	Supported3.2 / 3.2 pts Watchtower flags weak/reused/exposed credentials; inaccessible vaults expose issue counts only. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts Business password health and breach checks. Official documentation · Oct 20, 2026Source
Core capabilityEnforced security policiesEnforced security policies. Verify the supported plan and demonstrated workflow.	Supported3.2 / 3.2 pts Business enforces MFA, locking, sharing and sign-in restrictions. Official documentation · Oct 20, 2026Source	Supported3.2 / 3.2 pts Password and MFA policies. Official documentation · Oct 20, 2026Source
Depth checkAdministrative event historyAdministrative event history. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate administrative event history with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Business audit records attributable changes; 365-day retention. Official documentation · Oct 20, 2026Source	Supported4.8 / 4.8 pts Administrative activity history. Official documentation · Oct 20, 2026Source
Depth checkExportable security eventsExportable security events. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate exportable security events with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported4.8 / 4.8 pts Business audit CSV plus Events API/SIEM streaming. Official documentation · Oct 20, 2026Source	Supported4.8 / 4.8 pts Enterprise Activity Log API. Official documentation · Oct 20, 2026Source
Developer and AI-agent access 12% base weight
Core capabilityDeveloper secret toolingDeveloper secret tooling. Verify the supported plan and demonstrated workflow.	Supported2.4 / 2.4 pts CLI, SDKs, SSH/Git signing and development integrations. Official documentation · Oct 20, 2026Source	Not verified0–2.4 / 2.4 pts Not established in the reviewed documentation. Not verified · Oct 20, 2026Source
Core capabilityRuntime secrets for AI agentsRuntime secrets for AI agents. Verify the supported plan and demonstrated workflow.	Supported2.4 / 2.4 pts SDK retrieves agent credentials at runtime; custom integration required. Official documentation · Oct 20, 2026Source	Not verified0–2.4 / 2.4 pts Not established in the reviewed documentation. Not verified · Oct 20, 2026Source
Depth checkRestricted AI-agent credential scopeRestricted AI-agent credential scope. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate restricted ai-agent credential scope with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported3.6 / 3.6 pts Service accounts restrict vaults and permitted operations; up to 100 accounts. Official documentation · Oct 20, 2026Source	Not verified0–3.6 / 3.6 pts Not established in the reviewed documentation. Not verified · Oct 20, 2026Source
Depth checkAttributable AI-agent access historyAttributable AI-agent access history. Verify the supported plan and demonstrated workflow. Ask for a demonstration Demonstrate attributable ai-agent access history with a restricted test account. A scenario to run with the supplier; not a completed product test.	Supported3.6 / 3.6 pts Business usage report attributes secret access to service accounts within permitted vaults. Official documentation · Oct 20, 2026Source	Not verified0–3.6 / 3.6 pts Not established in the reviewed documentation. Not verified · Oct 20, 2026Source
Operational detail 20% base weight
Depth checkGrant emergency access after a waiting periodDemonstrate: Grant emergency access after a waiting period. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. Ask for a demonstration Demonstrate: Grant emergency access after a waiting period. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkRecord justified exceptions to credential-risk warningsDemonstrate: Record justified exceptions to credential-risk warnings. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. Ask for a demonstration Demonstrate: Record justified exceptions to credential-risk warnings. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkStore encrypted files with vault itemsDemonstrate: Store encrypted files with vault items. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. Ask for a demonstration Demonstrate: Store encrypted files with vault items. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test.	Supported2.5 / 2.5 pts Vault items support secure file attachments. Business documents and attachments; administrators can disable storage; size limits apply. Global capability evidence; local plan availability and interface language are not inferred. Official documentation · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkRestore a previous credential versionDemonstrate: Restore a previous credential version. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. Ask for a demonstration Demonstrate: Restore a previous credential version. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test.	Supported2.5 / 2.5 pts Item history restores earlier credential versions. Business vaults; permitted users can restore earlier versions. Global capability evidence; local plan availability and interface language are not inferred. Official documentation · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkControl item exports and disclose enforcement limitsDemonstrate: Control item exports and disclose enforcement limits. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. Ask for a demonstration Demonstrate: Control item exports and disclose enforcement limits. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test.	Supported2.5 / 2.5 pts Export restrictions are client-enforced and have explicit limits. Export controls are client-enforced, not a cryptographic boundary against a hostile authorised reader. Global capability evidence; local plan availability and interface language are not inferred. Official documentation · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkRevoke an active device session remotelyDemonstrate: Revoke an active device session remotely. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. Ask for a demonstration Demonstrate: Revoke an active device session remotely. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkRead the vault securely without network accessDemonstrate: Read the vault securely without network access. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. Ask for a demonstration Demonstrate: Read the vault securely without network access. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
Depth checkRotate managed application passwords automaticallyDemonstrate: Rotate managed application passwords automatically. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. Ask for a demonstration Demonstrate: Rotate managed application passwords automatically. State the plan, limits and behaviour on failure. Use dummy credentials, never production secrets. A scenario to run with the supplier; not a completed product test.	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source	Not verified0–2.5 / 2.5 pts This specific check has not been verified. Missing evidence does not mean the capability is absent. Ask for a demonstration in the proposed plan. Not verified · Oct 21, 2026Source
AI usage and limits	SDKs and service accounts provide scoped runtime secrets to custom agents; this is access infrastructure rather than an included task-performing agent. Agent implementation and external models are separate. Maximum 100 service accounts; rate/usage allowance not established. Secure Agentic Autofill remains early access. AI documentation	AI-agent runtime credential retrieval and attribution were not established. Autofill and password-health checks do not prove an AI-agent secret broker. AI documentation
Additional costs to ask about
Integration shortlist	Microsoft Entra ID Okta Google Workspace OneLogin JumpCloud Splunk	Microsoft Entra ID Okta Microsoft AD FS Splunk Microsoft Sentinel
Research date	Oct 20, 2026 Full source record →	Oct 20, 2026 Full source record →

TURN THE COMPARISON INTO A DECISION

Run the same demo with every finalist.

Demonstrate passkey storage with a restricted test account.
Demonstrate authenticator-code storage with a restricted test account.
Demonstrate granular vault permissions with a restricted test account.
Demonstrate leaver vault recovery or transfer with a restricted test account.
Demonstrate business single sign-on with a restricted test account.
Demonstrate directory provisioning with a restricted test account.
Demonstrate administrative event history with a restricted test account.
Demonstrate exportable security events with a restricted test account.
Demonstrate restricted ai-agent credential scope with a restricted test account.
Demonstrate attributable ai-agent access history with a restricted test account.

Use the same sample data and success criteria. Check the result, the handoff, the permissions and the final bill.

Build a comparison.

What matters most?

1Password Business

NordPass

Run the same demo with every finalist.