In short
NordPass vs 1Password for business: NordPass encrypts vaults with xChaCha20, while 1Password uses AES-256 with a 128-bit Secret Key. NordPass includes Google Workspace SSO on every business plan and puts Entra ID and Okta sign-in on Enterprise; 1Password Business unlocks with SSO over OpenID Connect and includes provisioning.
Want an impartial recommendation?
Tell us about your users, systems and priorities and we will tell you which option fits, and why.
NordPass vs 1Password at a glance
| NordPass | 1Password | |
|---|---|---|
| Made by | Nord Security, the team behind NordVPN | AgileBits Inc. |
| Vault encryption | xChaCha20-encrypted vault, zero-knowledge architecture | AES 256-bit end-to-end encryption, with Secure Remote Password sign-in |
| Unlocking the vault | Master password, biometrics and multi-factor authentication; single sign-on on the business plans | Account password plus a 128-bit Secret Key (Two-Key Derivation); Unlock with SSO on 1Password Business |
| Business plans | Teams (10-user pack), Business (from 5 users), Enterprise (from 5 users) | Teams Starter Pack (10 users minimum, up to 20), 1Password Business (1 user minimum), Enterprise Password Manager (quote only) |
| Single sign-on and provisioning | Google Workspace SSO on every business plan; Entra ID, Microsoft ADFS and Okta SSO, plus provisioning with Entra ID and Okta, on Enterprise | 1Password Business: Unlock with SSO over OpenID Connect; SCIM provisioning with Entra ID, Google Workspace, Okta, OneLogin and JumpCloud |
| SIEM | Microsoft Sentinel and Splunk integrations on Enterprise | Event streaming to SIEM tools including Splunk, Microsoft Sentinel, Elastic and Sumo Logic |
| Breach and password monitoring | Data Breach Scanner on Business (1 domain) and Enterprise (up to 10 domains) | Watchtower alerts for breaches and weak, reused or expiring passwords |
| Business trials | 14-day free business trial, no credit card | 14-day free trial, no credit card |
| Certifications named | ISO 27001 and SOC 2 Type 2 | SOC 2 Type 2; ISO 27001, 27017, 27018 and 27701 |
Sources: NordPass Business (opens in a new tab), NordPass plans for business (opens in a new tab), 1Password security (opens in a new tab) and 1Password Unlock with SSO (opens in a new tab). The sections below explain what the differences mean in use.
Still not sure which way to go? Ask us
Tell us what matters most to you and we will recommend one, with the trade-offs explained.
Security model: xChaCha20 or a Secret Key
Both encrypt your vault on your own device with zero-knowledge designs, so neither provider can read your passwords.
NordPass describes an "xChaCha20-encrypted vault" on every plan and a "zero-knowledge architecture". Its Data Breach Scanner works the same way: "The scan happens locally, on your device, so NordPass never sees your unencrypted data" (NordPass (opens in a new tab)). NordPass is made by Nord Security, "the team behind NordVPN", and names ISO 27001 and SOC 2 Type 2 certifications (NordPass (opens in a new tab)).
1Password uses "end-to-end AES 256-bit encryption" with Two-Key Derivation: your account password plus a Secret Key with "128 bits of entropy" that 1Password has no record of (1Password (opens in a new tab)). It holds SOC 2 Type 2 and ISO 27001, 27017, 27018 and 27701.
The practical difference for your staff is the Secret Key, which 1Password adds to every account and which each person keeps in their Emergency Kit. See are password managers safe? for what these designs protect against.
Business plans, single sign-on and admin
| NordPass | 1Password | |
|---|---|---|
| Plans and seats | Teams (10-user pack), Business (from 5 users), Enterprise (from 5 users) | Teams Starter Pack (10 users minimum, up to 20), 1Password Business (1 user minimum), Enterprise Password Manager (quote only) |
| Sign-in and provisioning | Google Workspace SSO on every business plan; Entra ID, Microsoft ADFS and Okta SSO, plus provisioning with Entra ID and Okta, on Enterprise | 1Password Business: Unlock with SSO over OpenID Connect; SCIM provisioning with Entra ID, Google Workspace, Okta, OneLogin and JumpCloud |
| Sharing | Secure sharing on every plan; group and folder sharing on Business; shared subfolders and the Sharing Hub on Enterprise | Shared vaults with role-based permissions, guest accounts, and sharing items with anyone, even without 1Password |
| Policies and admin | Password Policy, granular policies, activity log and item transfer on every plan; group management on Business and Enterprise | Custom policies, recovery of team members' accounts, Travel Mode controls and custom business reports |
| Reporting and SIEM | Microsoft Sentinel and Splunk integrations on Enterprise | Event streaming to SIEM tools including Splunk, Microsoft Sentinel, Elastic and Sumo Logic |
| Breach monitoring | Data Breach Scanner on Business (1 domain) and Enterprise (up to 10 domains) | Watchtower alerts for breaches and weak, reused or expiring passwords |
| Family benefit for staff | A 'Free Premium plan for all users' row on Business and Enterprise | Free 1Password Families membership for every 1Password Business user |
| Trial | 14-day free business trial, no credit card | 14-day free trial, no credit card |
Where single sign-on sits. NordPass gives every business plan single sign-on with Google Workspace, and adds "SSO log in with Entra ID, MS ADFS, and Okta" and "Automatic user access management via Entra ID and Okta" on Enterprise. 1Password includes Unlock with SSO (OpenID Connect, one identity provider) and SCIM provisioning with Google Workspace, JumpCloud, Entra ID, Okta and OneLogin on 1Password Business (1Password provisioning (opens in a new tab)).
Plan sizing. NordPass Teams is a 10-user pack for teams "of up to 10 users", and Business and Enterprise start at 5 users. 1Password's Teams Starter Pack starts at 10 users and goes up to 20, and 1Password Business has a one-user minimum. NordPass's plans support article (opens in a new tab) and 1Password's business pages set out the rest.
Weighing up the options?
We can compare them against your own requirements and recommend what fits.
Which suits you?
Match the facts to your situation:
- You sign in with Google Workspace and are a small team: NordPass includes Google Workspace SSO on Teams
- You use Entra ID and want SSO without an enterprise plan: 1Password Business includes Unlock with SSO and provisioning; NordPass puts Entra ID on Enterprise
- You want breach monitoring for your company domain: NordPass Business includes the Data Breach Scanner for one domain, Enterprise up to 10; 1Password Business includes Watchtower alerts
- You want a second secret on every account: 1Password adds the Secret Key automatically
Moving between NordPass and 1Password
NordPass imports passwords from other password managers through a CSV file, and it "automatically recognizes which browsers store your passwords" for Chrome and Firefox (NordPass (opens in a new tab)). 1Password imports from browsers and other password managers, and from a CSV file on 1Password.com (1Password import (opens in a new tab)).
Export on a trusted computer, import into the new vault, check that shared items arrived, then delete the export file, which is not encrypted. Our switching guide covers each step.
Buying NordPass or 1Password for your organisation
We can quote NordPass and 1Password for your business, so we can help you choose between them rather than steer you to one; the plan and terms are confirmed at quote. We can:
- Help you choose between NordPass and 1Password against your identity platform (Microsoft Entra ID, Google Workspace or Okta), your team size and how your teams share logins
- Set up single sign-on and user provisioning on the plans that include them, so accounts are created and removed from your directory
- Set policies and build shared folders or vaults for each team before staff are invited
- Import passwords from browsers, spreadsheets or the other password manager
- Keep licensing in one place: licences can be billed monthly, with terms confirmed at quote
See our NordPass and 1Password business pages for each plan in detail. Contact us for free advice on which fits, or a quote.
Frequently asked questions
Is NordPass or 1Password more secure?
Both encrypt your vault on your own device so the provider cannot read it. NordPass uses xChaCha20 with a zero-knowledge architecture and names ISO 27001 and SOC 2 Type 2; 1Password uses AES-256 with your account password and a 128-bit Secret Key, and holds SOC 2 Type 2 and ISO 27001, 27017, 27018 and 27701. See are password managers safe?.
Can we trial both?
Yes. NordPass offers a 14-day free business trial with no credit card. 1Password offers 14-day free trials of its Teams Starter Pack and 1Password Business, with no credit card.
Does NordPass work with Microsoft Entra ID?
Yes, on NordPass Enterprise, which adds Entra ID, Microsoft ADFS and Okta single sign-on and user provisioning with Entra ID and Okta. 1Password Business supports Entra ID for Unlock with SSO and provisioning.
Do both give staff a personal account outside the work vault?
1Password Business includes a complimentary 1Password Families membership for every user, linked to the business account only by subscription status. NordPass lists a "Free Premium plan for all users" on Business and Enterprise, not on Teams.
Can a personal NordPass account become a business account?
Yes. NordPass says you can buy the business plan using your current account, and the switch does not remove items already in your personal vault.
Still deciding?
Ask us and a member of our team will get back to you.