Sold by: 1Password
Deployed on AWS
1Password Device Trust Connect requires a device to be known, trusted, and compliant before granting access to protected applications, whether managed or unmanaged. Enforce custom compliance Checks, discover AI tools running on endpoints, and let employees self-remediate, all via an IdP integration and the 1Password browser extension.
4.6
Overview
Secure Every Device Before It Reaches Your Applications
1Password Device Trust Connect helps organizations establish device trust and enforce compliance requirements by empowering employees to self-remediate issues before accessing work applications. Available in two versions - Device Trust Core and Device Trust Connect - the solution fits the security needs of organizations at every stage of their zero trust journey.
How It Works
1Password Device Trust Connect sits between your identity provider and your protected applications, ensuring that only healthy, known devices can authenticate through SSO. When a device fails a health check, the employee is guided through a self-remediation workflow to resolve the issue independently - reducing the burden on IT teams and minimizing access disruptions.
Key Capabilities
Block Unknown and Unregistered Devices
Only devices registered to known users can log in via SSO, protecting your data even if attackers manage to steal valid credentials. This closes a critical gap that traditional identity solutions leave open - ensuring that a compromised password alone is not enough to gain access.
Enforce Compliance Requirements
Define what a healthy device looks like for your organization, then enforce it at every authentication. Device Trust includes a library of prebuilt Checks covering common requirements such as disk encryption, OS and browser updates, screen lock, and endpoint protection, and self-service templates let admins create custom Checks for their own policies and target them to specific people or device groups. MDM enrollment and management state are verified as part of this, making MDM one signal in a broader compliance picture rather than the only control.
Checks run continuously and are evaluated at the point of access across macOS, Windows, and Linux, on both managed and unmanaged devices. That gives security teams enforcement where it matters and gives auditors evidence that only compliant devices reached protected applications
Discover and Govern AI Tools on Your Endpoints
AI Insights shows which AI applications, browser tools, CLIs, IDE extensions, and MCP servers are running on employee devices, including tools adopted before IT has reviewed them. Admins can see who is using what, flag misconfigured or unsanctioned tools, and apply policy so AI usage is governed rather than invisible.
Device Trust also surfaces related risk on the endpoint, such as plaintext secrets that AI tools and agents could reach, giving security teams a path from discovery to remediation. Collection stays at the metadata level: which tool, which surface, how often. Prompt and conversation content is never inspected.
Employee Self-Remediation
When a device falls out of compliance, employees receive clear, actionable guidance to resolve the issue themselves. This approach reduces IT support tickets, accelerates time-to-compliance, and keeps employees productive without waiting for helpdesk intervention.
Seamless IdP Integration
Works alongside Okta, Google, and Entra to enforce device trust and device health policies before allowing access to managed applications. Device trust decisions are evaluated at the point of authentication, adding a layer of security without disrupting existing SSO workflows.
Use Cases
- Preventing credential-based attacks: Even when valid SSO credentials are compromised, Device Trust Connect blocks authentication from unrecognized or unhealthy devices, stopping access before it starts.
- Securing access from unmanaged endpoints: For organizations with contractors, Linux devices, remote workers, or BYOD policies, Device Trust Connect verifies device posture before granting access to sensitive web applications.
- Simplifying compliance posture: By continuously enforcing device health checks at the point of authentication, organizations can demonstrate that only compliant devices access protected resources - supporting audit and compliance objectives.
Get Started on AWS Marketplace
Deploy 1Password Device Trust Connect through AWS Marketplace to streamline procurement and consolidate billing. To learn more about implementation, supported configurations, or to discuss your organization's requirements, contact the 1Password team through the support channel provided in this listing.
Highlights
- Block Unregistered and Non-Compliant Devices at Login. Only devices registered to known users can authenticate via SSO, protecting your data even if attackers steal valid credentials from providers like Okta, Google, or Entra. Device Trust Connect performs real-time health checks before granting access, ensuring every device meets your organization's compliance policies before reaching managed applications.
- See and Govern AI Tools Running on Employee Devices. AI Insights discovers AI applications, agents, and MCP servers across macOS, Windows, and Linux, including shadow AI adopted outside procurement. Security teams can flag misconfigured or unsanctioned tools, surface plaintext secrets exposed to them, and enforce policy at login, without inspecting prompt content.
- Empower Employees to Self-Remediate Device Issues. When a device fails a compliance check, employees receive guided instructions to resolve the issue themselves - such as enabling disk encryption or updating their OS - without filing an IT ticket. This self-remediation workflow reduces IT support burden while respecting employee privacy on personal and BYOD devices.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
1Password Device Trust | Please reach out to 1Password Directly for Device Trust pricing, available only via Private Offer. Can be purchased at a minimum of 20 seats. | $2,640.00 |
Dimension | Description | Cost/unit |
|---|---|---|
True Up | True Ups/Overuse | $0.01 |
Dimensions summary
You buy this product through a contract, and pricing comes only through a Private Offer arranged with the vendor. The main dimension, 1Password Device Trust, is priced per seat, with a minimum purchase of 20 seats. The True Up dimension handles overuse. If you exceed your committed seat count during the term, you pay for the extra usage through True Ups. This keeps your base commitment fixed while letting your seat count grow. Contact the vendor directly to set your seat-based price, since it is not published on the listing.
Top-of-mind questions for buyers
A seat maps to one device you protect and verify before it accesses your systems. Device Trust installs an agent on each device, covering company-owned machines, personal (BYOD) devices, and contractor devices across Windows, macOS, Linux, iOS, and Android. You must purchase at least 20 seats to start.
Extra usage beyond your committed seat count is billed through the True Up dimension. This means your base commitment stays fixed while your protected device count can grow. You pay for the overage rather than resetting your original contract.
The Connect version enforces device checks before access to SSO-protected apps. It needs integration with a supported identity provider. The optional Extended Device Compliance feature for non-SSO web apps also requires 1Password Enterprise Password Manager Business and the browser extension. Those are separate requirements, not part of this seat price.
1password.com
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Support URL: https://support.1password.com Support email: support@1password.com Sales / Enterprise inquiries: sales@1password.com
1Password provides business support for Device Trust Connect customers. For assistance with setup, troubleshooting, or account inquiries, contact the 1Password support team at https://support.1password.com .
For questions about refunds or billing, reach out through the same support portal and reference your AWS Marketplace subscription.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
1Password Device Trust Core enforces device health and compliance policies in real time by blocking unhealthy devices from accessing web apps via the browser extension. Device Trust Core walks users through resolving issues at the moment of access, enabling previously unattainable levels of compliance amid an ever-changing security environment.
1Password Unified Access secures credentials for your workforce, AI agents, and machines in one platform. Discover shadow AI, govern secrets, and audit all access with end-to-end encryption.
1Password SaaS Manager unifies AI and SaaS discovery, access governance, and spend optimization to help IT and security teams reduce risk and control costs.
1Password Business is an enterprise password manager that extends identity security beyond SSO, secures logins, reduces shadow IT, and protects infrastructure secrets to keep your team safe and productive.
Customer reviews
Aletta v.
Fast, Lightweight Windows App—But Vault Access Management Is Painfully Cumbersome
Reviewed on Oct 09, 2026
Review provided by G2
What do you like best about the product?
The application on Windows makes work run much smoother. Especially when it comes to needing quick access to credentials on short notice and such. It’s simple to add new items to an existing vault and to edit existing items as needed (for example, updating or deleting them). You can also add favourites and create duplicates, which makes it very useful for sharing the same access across different vaults0 There is a variety of 'types' you can add, from server specific info to websites to one time use passwords etc.
Performance wise, the app is light and does not slow down my PC at all. I can have it running in the background without causing stuttering or lag with other softwares.
Performance wise, the app is light and does not slow down my PC at all. I can have it running in the background without causing stuttering or lag with other softwares.
What do you dislike about the product?
Limited access within in the Windows application makes editing access to vaults etc an absolute nightmare.
Why do I need to use the browser in order to manage which users/groups have access to which vault. Especially as the web based model doesn't allow you to edit multiple vaults at once.
So you need to navigate to each vault individually in it's own window, then sign in again, then manage access. Additionally, the 'access' setup doesn't list existing groups or users. So you need to manually type out every single group/user, instead of a simple checkbox or checklist.
Why do I need to use the browser in order to manage which users/groups have access to which vault. Especially as the web based model doesn't allow you to edit multiple vaults at once.
So you need to navigate to each vault individually in it's own window, then sign in again, then manage access. Additionally, the 'access' setup doesn't list existing groups or users. So you need to manually type out every single group/user, instead of a simple checkbox or checklist.
What problems is the product solving and how is that benefiting you?
Security wise 1Password is great for sharing temporary limited access credentials.
As well as just general maintenance of saved credentials etc. It's simple enough to open a vault and then copy-paste as needed.
As well as just general maintenance of saved credentials etc. It's simple enough to open a vault and then copy-paste as needed.
Brad M.
Easy, Secure, and Reliable—Seamless Deployment at a Fair Price
Reviewed on Oct 08, 2026
Review provided by G2
What do you like best about the product?
Easy to use and very secure. It integrates well within my organization, and it’s quick and reliable in day-to-day use. The pricing feels fair and competitive, and the deployment process is fairly seamless overall.
What do you dislike about the product?
It would be helpful if the mobile app improved its real-time communication features.
What problems is the product solving and how is that benefiting you?
It has been phenomenal at helping with password storage, both personal and shared.
Gary L.
A Secure, Time-Saving Password Vault That’s Easy for Staff to Use
Reviewed on Oct 07, 2026
Review provided by G2
What do you like best about the product?
I find having a single, secure repository for hundreds of passwords is a huge time saver. The ease of use also makes it far more likely that our staff will use secure passwords, creating a more secure environment.
What do you dislike about the product?
A small percentage of websites seem to block pasting passwords, which can prevent 1Password from filling in the username and password automatically. That’s especially frustrating when you’re using secure passwords, since they can be clunky and time-consuming to type out by hand.
What problems is the product solving and how is that benefiting you?
1Password eliminates the need to store passwords in spreadsheets and reduces the temptation to reuse the same common password across multiple logins.
Shauna D.
Fast, Secure Logins with Excellent Browser Integration and Built-In One-Time Passwords
Reviewed on Oct 05, 2026
Review provided by G2
What do you like best about the product?
1Password has become one of the tools I use constantly throughout the workday. The browser integration is probably the feature I value most. It makes signing into websites and applications extremely quick because credentials are available directly where I need them without having to open a separate application, search for the account, and copy and paste passwords.
I also really like the built-in one-time password functionality. Having 1Password store and generate one-time passwords alongside the associated login makes MFA much more convenient. Instead of switching between a password manager and a separate authenticator app, I can complete the entire login process from one place. This is especially valuable when you work with a large number of systems and accounts throughout the day.
From a UI/UX perspective, 1Password is clean, intuitive, and easy to navigate. The browser extension integrates naturally into my workflow, and searching for credentials is fast. Performance has also been reliable; I rarely have to think about the application itself because it is simply there when I need it.
The biggest benefit for me is the combination of security and efficiency. It makes it practical to use unique, complex passwords and MFA across many accounts without adding a lot of friction to everyday work. That saves time while encouraging better security practices, which provides good value and ROI.
Onboarding and day-to-day use have been straightforward, and I haven't needed significant support to use the product effectively. I also don't currently consider AI or intelligent features a major reason I use 1Password. Its value to me comes primarily from doing its core job extremely well: securely managing credentials, integrating with the browser, and making MFA and one-time passwords much easier to use.
I also really like the built-in one-time password functionality. Having 1Password store and generate one-time passwords alongside the associated login makes MFA much more convenient. Instead of switching between a password manager and a separate authenticator app, I can complete the entire login process from one place. This is especially valuable when you work with a large number of systems and accounts throughout the day.
From a UI/UX perspective, 1Password is clean, intuitive, and easy to navigate. The browser extension integrates naturally into my workflow, and searching for credentials is fast. Performance has also been reliable; I rarely have to think about the application itself because it is simply there when I need it.
The biggest benefit for me is the combination of security and efficiency. It makes it practical to use unique, complex passwords and MFA across many accounts without adding a lot of friction to everyday work. That saves time while encouraging better security practices, which provides good value and ROI.
Onboarding and day-to-day use have been straightforward, and I haven't needed significant support to use the product effectively. I also don't currently consider AI or intelligent features a major reason I use 1Password. Its value to me comes primarily from doing its core job extremely well: securely managing credentials, integrating with the browser, and making MFA and one-time passwords much easier to use.
What do you dislike about the product?
There isn't much I dislike about 1Password overall. One area that could be improved is the initial onboarding experience, especially for users who are new to password managers. There are a lot of features available, and understanding things like vault organization, browser integration, one-time passwords, and the different ways credentials can be managed can take some time.
The browser integration is excellent overall, but occasionally the autofill suggestions can appear when they aren't needed or it may not immediately select the login I want when multiple accounts are associated with the same site.
I also think some of the more advanced functionality could be surfaced or explained better within the interface. I've discovered useful features simply through continued use rather than knowing they were available from the beginning.
These are relatively minor issues for me and haven't significantly affected the value I get from the product. The performance and reliability have been very good, and the time saved through the browser integration and built-in one-time password functionality outweighs these small inconveniences.
The browser integration is excellent overall, but occasionally the autofill suggestions can appear when they aren't needed or it may not immediately select the login I want when multiple accounts are associated with the same site.
I also think some of the more advanced functionality could be surfaced or explained better within the interface. I've discovered useful features simply through continued use rather than knowing they were available from the beginning.
These are relatively minor issues for me and haven't significantly affected the value I get from the product. The performance and reliability have been very good, and the time saved through the browser integration and built-in one-time password functionality outweighs these small inconveniences.
What problems is the product solving and how is that benefiting you?
1Password solves the challenge of securely managing a large number of unique credentials across different systems, applications, and customer environments. This is especially valuable in an MSP environment, where we work with many different customers and need to keep credentials organized, secure, and easily accessible to the appropriate team members.
The browser integration saves a significant amount of time when moving between customer systems, and the built-in one-time password functionality makes MFA much easier by keeping the login and verification code together rather than requiring a separate authenticator application.
It also helps us maintain better security practices by making it practical to use strong, unique passwords instead of reusing or manually managing credentials. Overall, 1Password reduces the administrative burden of credential management, improves efficiency when supporting multiple customers, and makes secure access much easier to manage in an MSP environment.
The browser integration saves a significant amount of time when moving between customer systems, and the built-in one-time password functionality makes MFA much easier by keeping the login and verification code together rather than requiring a separate authenticator application.
It also helps us maintain better security practices by making it practical to use strong, unique passwords instead of reusing or manually managing credentials. Overall, 1Password reduces the administrative burden of credential management, improves efficiency when supporting multiple customers, and makes secure access much easier to manage in an MSP environment.
Mohammed H.
Easy and Secure Password Management without the Hassle
Reviewed on Oct 01, 2026
Review provided by G2
What do you like best about the product?
I really like how 1Password makes managing passwords and creating strong, unique passwords so easy. Having my login information organized securely in one place saves me the hassle of remembering multiple passwords. The autofill feature is also a great time saver when signing in. I also use 1Password to securely store important links, passwords, and login details, and to help manage accounts such as Gmail. The setup was straightforward, and I didn't need much technical knowledge to get started. Overall, I find it useful for both personal and work account management.
What do you dislike about the product?
One thing I would improve is that it can take a little time to get used to all the features, especially when you are using a password manager for the first time. The interface is generally easy to use, but setting an option could be more clearly explained for new users. Apart from that, I haven't experienced any major issues with 1Password, which is great.
What problems is the product solving and how is that benefiting you?
I haven't had any major problems with 1Password so far. For me, its main benefit is making password and account management easier and more organized. I don't have to remember every password or keep login details scattered in different places. I can securely store my information, generate strong passwords, and use autofill when signing in. It saves time and makes managing my personal and work accounts more convenient.