The best 1Password alternatives, compared honestly
1Password did not get worse. The apps are still the best-built in the category, the sharing model is sound, and the CLI does real work in CI. What sends teams looking is where the line sits. Single sign-on, SCIM provisioning, custom reports and SIEM streaming all live in Business at $8.99 per user per month paid annually, roughly 3.6 times the effective rate of the Teams Starter Pack most small teams begin on, and that starter pack runs out at about 20 people. So this page compares eight alternatives on one axis: the cheapest plan each one asks for before it will let you turn on SSO, SCIM and an audit log, and whether you can run it yourself at all.
The best 1Password alternative depends on which wall you hit:
- Moving a whole company → Bitwarden: SCIM and event logs already in Teams at $4 per user per month, SSO at $6, and a direct 1pux importer.
- Smallest bill with nothing gated → Enpass: $1.99 per user per month billed yearly, one plan, SSO and SCIM and audit logs all on it.
- Under 10 people who still need the controls → Psono: the On-Premise Enterprise edition is EUR 0 up to 10 users, SSO and audit logging included.
- No vendor at all → Vaultwarden: AGPL-3.0, no licence file, event logs and OIDC SSO for nothing but the server you run it on.
Narrower cases are in the table below: Proton Pass if the data has to stay in Europe, Passbolt if you want an AGPL server with a support contract behind it, Dashlane if you would rather pay one flat $8 and never think about tiers again.
Why teams look elsewhere
What pushes teams off 1Password
Almost nothing here is about the product being bad at storing passwords. Six patterns recur in migration write-ups, and five of them are the same pattern seen from different angles: the controls a company needs on the day it hires its tenth person are all on the far side of one price step.
SSO is a tier, not a toggle
"Unlock with Single Sign-On (SSO)" first appears in Business, $8.99 per user per month paid annually. The Teams Starter Pack is $24.95 per month for 10 members paid annually, about $2.50 a head. Turning on SSO is a 3.6x jump per seat, and it is the same jump whether you have 12 people or 200.
Teams Starter runs out at about 20
The pack covers 10 members and lets you "add up to 10 additional seats at per member pricing". There is no third option. Person 21 has nothing to grow into except Business, which is why so many teams discover the pricing model at exactly the moment they are least able to spend a week migrating.
The audit trail sits on the same side of the wall
SCIM provisioning, custom business reports and SIEM streaming to Splunk, Elastic, Sumo Logic and Panther are all Business features. Compliance evidence and identity plumbing get billed together, so a team that only wants an exportable log has to buy the whole identity bundle to get it.
Enterprise has no published price
Every 1Password product page ends the same way: "Request a quote". There is no number for the tier above Business, so a team cannot model what growth costs before booking a sales call. Half the alternatives on this page publish every figure they charge.
Consumer renewals went up in March 2026
Renewals on or after 2026-03-27 moved Individual from $35.88 to $47.88 a year, up 33%, and Families from $59.88 to $71.88. It is not a business line item, but it is what put "1Password alternatives" back into a lot of people's search history, and it is why the evaluation usually starts at home.
There is no self-hosted 1Password
Not in Teams, not in Business, not in Enterprise. If a regulator, a customer contract or an air-gapped network requires the vault to sit on infrastructure you control, there is nothing to buy. Four of the eight alternatives below ship a server you can run, three of them under an OSI-approved licence.
The shortlist
8 1Password alternatives worth evaluating
Password managers split into two jobs that get priced very differently: keeping secrets safe for individuals, which everything here does competently, and proving to an auditor that access is controlled, which is where the money is. This ranking optimises for the second job, because the first one is rarely why anyone migrates. Each pick lists one honest strength and one real weakness.
Teams is $4 per user per month billed annually and already includes SCIM, Directory Connector and event logs, so the audit story is solved one full tier below where 1Password puts it. Enterprise at $6 adds passwordless SSO over SAML and OIDC. The server is AGPL-3.0, and the importer reads 1Password's 1pux export directly. Weakness: SSO is still a paid step up, and Bitwarden's own licensing page says self-hosting is free "however some features must be unlocked in your self-hosted instance with a registered license file", so the free self-host is not the full product.
$1.99 per user per month billed yearly, one plan, no tiers: SSO, SCIM provisioning, event and audit logs, a security audit dashboard, SIEM integration, UEM and MDM support and policy enforcement all sit on it. The unusual part is custody: vaults live in your own Microsoft 365 or Google Workspace tenant, and Enpass states plainly that it "stores nothing". Weakness: it is proprietary with no server of its own, so "self-hosted" here means "hosted by the cloud provider you already pay", and large organisations get pushed to Contact Sales.
Essentials is $1.99 per user per month yearly but has no SSO, no SCIM and no logs, which makes Proton the clearest illustration of the axis on this page. Professional at $4.49 adds SSO, SCIM, detailed activity logs, enterprise policies, a CLI and an SSH agent, still well under 1Password Business. Swiss company, EU infrastructure. Weakness: no self-hosting at any price, a three user minimum, and the yearly rates on the pricing page carry promotional discount labels rather than being a stable list price.
The On-Premise Enterprise edition is EUR 0 for up to 10 users with the complete feature set: LDAP, SAML and OIDC single sign-on, audit logging, policies, compliance enforcement and a gateway for SSH, RDP and VNC. That is the entire 1Password Business feature list, free, for a team that fits. The server is Apache License 2.0. Weakness: the step off the free tier is steep, because the paid plan is EUR 2.5 per user per month billed annually with a 25 user minimum, so there is nothing sensible to buy between 11 and 24 people.
An AGPL-3.0 reimplementation of the Bitwarden server in Rust, at v1.37.2 released 2026-08-22 with 66,650 stars and commits landing the same week. Organizations, collections, groups, policies, event logs, admin password reset, Directory Connector and OIDC SSO all work, with no licence file and no per-seat anything, using the official Bitwarden clients. Weakness: no SCIM, the wiki is explicit that "a master password will still be required and not controlled by the SSO", and it is unaffiliated with Bitwarden, so support is a community forum.
Community Edition is free for unlimited users under AGPL-3.0, and the honest detail most comparisons miss is that Pro is too: Passbolt states that "Passbolt pro is distributed under AGPL V3", so the subscription buys updates and support rather than access to code. Pro is $4.9 per user per month billed annually and brings LDAP provisioning, SSO across Microsoft, Google, OpenID and AD FS, SCIM, an activity log and account recovery. Weakness: Pro carries a 10 user minimum, so a four person team pays for ten.
A genuinely deep enterprise product with secrets management, connection management and privileged access alongside the vault, and worth a look if you are buying the whole suite rather than replacing one tool. On this page's axis it is the cautionary tale: SSO and SCIM appear only in Enterprise, and Advanced Reporting and Alerts is a paid add-on on every tier, so the audit log is never simply included. Weakness: the pricing page is geo-served, which makes even quoting a figure awkward, and two stacked paywalls make the real cost hard to model.
Dashlane has stopped selling its Starter, Team and Standard plans and now lists one price for password management: Omnix at $8 US per user per month billed annually, with SSO and SCIM included. On the axis of this page it scores perfectly, because there is no security paywall to be taxed by. Weakness: the floor is the problem instead. At $8 it sits within a rounding error of 1Password Business, so a small team gets no cheap entry tier at all, and the credential protection module is quoted separately at $4 with a Contact Sales gate.
Deliberately left off: KeePassXC and the wider KeePass family, which are excellent file-based managers but have no organisation-level SSO, SCIM or audit story, so the axis of this page simply does not apply to them.
Side by side
1Password alternatives compared
Prices as of September 2026, from each vendor's own pricing page. The column that decides most migrations is the third one: the cheapest plan that will let you turn on single sign-on. Everything else on a password manager pricing page is roughly interchangeable, but that number ranges from nothing to $8.99 across the same category. 1Password's own row is included as the baseline.
| Tool | Type | CHEAPEST PLAN WITH SSO | SCIM | Audit log at | Self-host / licence | Best for |
|---|---|---|---|---|---|---|
| 1Password | Hosted only | Business, $8.99/user/mo annual | Business | Business (reports + SIEM) | ✗ proprietary SaaS, none at any tier | Teams under 20 already standardised on it |
| Bitwarden | Hosted or self-hosted | Enterprise, $6/user/mo annual | Teams, $4 | Teams, $4 (event logs) | ✓ AGPL-3.0 server; some features need a licence file | Moving a whole company off 1Password |
| Enpass | Hosted in your own M365 or Google tenant | Business, $1.99/user/mo yearly | Same plan | Same plan | ✗ proprietary; vaults sit in your tenant | Smallest bill with nothing switched off |
| Proton Pass | Hosted only | Professional, $4.49/user/mo yearly | Professional | Professional | ✗ proprietary SaaS | EU data residency, Swiss vendor |
| Psono | Self-hosted or managed | On-Premise Enterprise, EUR 0 to 10 users | Same plan | Same plan | ✓ Apache-2.0 server | Under 10 people who still need the controls |
| Vaultwarden | Self-hosted | Free (OIDC; master password still required) | ✗ Directory Connector instead | Free (event logs) | ✓ AGPL-3.0, no licence file | Zero licence cost, you carry the ops |
| Passbolt | Self-hosted or cloud | Pro, $4.9/user/mo annual, min 10 users | Pro | Pro (activity log) | ✓ AGPL-3.0, every edition | An AGPL server with a support contract |
| Keeper | Hosted | Enterprise, £5.00/user/mo annual | Enterprise | Never included: paid add-on on every tier | ✗ proprietary SaaS | Orgs buying the whole Keeper suite |
| Dashlane | Hosted only | Omnix, $8 US/user/mo annual | Included | Included | ✗ proprietary SaaS | Teams that want one price and no tiers |
Minimums that do not fit in the cells: Proton Pass needs 3 users, Passbolt Pro needs 10, Psono's paid plan needs 25 at EUR 2.5 per user per month billed annually, and 1Password's Teams Starter Pack is sold as a $24.95 per month block for 10 members rather than per seat. Keeper is quoted in pounds because its pricing page is served by region and could not be switched to USD; its listed annual rates are £2.00, £3.50 and £5.00 per user per month with VAT included. Pricing and free tiers change often; check each vendor for current terms. Compiled September 2026.
Official pages: 1Password · Bitwarden · Enpass · Proton Pass · Psono · Vaultwarden · Passbolt · Keeper · Dashlane
A fair call
When 1Password is still the right choice
Migrating a password manager is not a weekend. Item records export cleanly; vault permissions, group structure, identity provider mapping and any CI plumbing do not, and every person in the company has to re-enrol a browser extension and a phone. That cost is real, and for a decent number of teams it is larger than the difference between $8.99 and $4.
1Password is still right if…
- You are under about 20 people on the Teams Starter Pack. At $24.95 per month for 10 members it works out near $2.50 a head, which is cheaper than almost everything on this page, and none of the gating described here applies to you yet.
- SSO on the password manager is a convenience rather than a control, because your identity provider already governs the systems that matter.
- The clients are the reason it stuck. 1Password's macOS, iOS and browser apps are still the best in the category, and a manager people find annoying is a manager people paste passwords out of.
- You use Secrets Automation or the CLI in CI. That plumbing is genuinely good, it has no direct equivalent in most alternatives, and rebuilding it is where migration timelines quietly double.
Look elsewhere if…
- You are about to hire past 20 and the only plan above Teams Starter is $8.99: Bitwarden Teams is $4 and already includes SCIM and event logs.
- An auditor wants an exportable log and you would rather not buy identity plumbing to get one: Psono ships audit logging free for up to 10 users.
- The vault has to sit on infrastructure you control. There is no self-hosted 1Password at any price, while Vaultwarden and Passbolt are both AGPL-3.0.
- You want one number with nothing behind a tier: Enpass is $1.99 per user per month billed yearly with SSO, SCIM and audit logs on the same plan.
Common questions
Common questions about 1Password alternatives
What is the best 1Password alternative in 2026?
For most teams leaving 1Password it is Bitwarden, because it is the only alternative that covers every exit at once: a hosted plan at $4 per user per month billed annually that already includes SCIM and event logs, an AGPL-3.0 server you can run yourself, and a direct importer for 1Password's 1pux export. If the deciding factor is price alone, Enpass is cheaper at $1.99 per user per month billed yearly with SSO, SCIM and audit logs all on that one plan. If it is control, Vaultwarden and Passbolt are both AGPL-3.0.
How much does 1Password cost in 2026, and what is behind the Business tier?
The Teams Starter Pack is $24.95 USD per month for 10 members paid annually, roughly $2.50 per person, with the option to add up to 10 more seats at per member pricing. Business is $8.99 USD per user per month paid annually. Business is where single sign-on, SCIM provisioning, custom business reports and SIEM streaming to Splunk, Elastic, Sumo Logic and Panther first appear. Enterprise carries no published price at all: every 1Password product page asks you to request a quote.
Which 1Password alternative has the cheapest SSO?
Among paid plans, Enpass at $1.99 per user per month billed yearly is the cheapest published price that includes SSO, and it includes SCIM provisioning and audit logs on the same plan. Proton Pass Professional is next at $4.49 per user per month billed yearly with a three user minimum. Among free options, Psono's On-Premise Enterprise edition is EUR 0 for up to 10 users with LDAP, SAML and OIDC SSO plus audit logging, and Vaultwarden supports OIDC SSO at no cost, although it still requires a master password that the identity provider does not control.
Is there a truly open-source 1Password alternative?
Yes, and the licences differ in ways that matter. Vaultwarden and Passbolt are both AGPL-3.0, and Passbolt states that even its Pro edition is distributed under AGPL V3, so the subscription buys updates and support rather than code access. The Psono server is Apache License 2.0. Bitwarden's server is AGPL-3.0 too, but its own licensing documentation says self-hosting is free while some features must be unlocked with a registered licence file. 1Password itself is proprietary and has no self-hosted edition at any price.
Can I self-host a team password manager for free?
Vaultwarden is the closest thing to genuinely free: AGPL-3.0, no licence file, and it supports organizations, collections, groups, policies, event logs, admin password reset, Directory Connector and OIDC SSO. It does not support SCIM, and a master password is still required alongside SSO. Psono's On-Premise Enterprise edition is free for up to 10 users with the complete feature set, then jumps to EUR 2.5 per user per month billed annually with a 25 user minimum. Passbolt Community Edition is free for unlimited users but keeps SSO, SCIM and the activity log in Pro.
Does the audit log always come with the plan?
Not always. Keeper is the exception worth knowing about: SSO and SCIM appear only in its Enterprise tier, and the audit log is not a plan feature at all. Advanced Reporting and Alerts is sold as a paid add-on on every tier, so an organisation can buy the most expensive Keeper plan and still have no reporting until it buys the module. Everywhere else on this page the log travels with the plan, whether that plan costs $1.99, $4, $4.49 or nothing.
How do I migrate a team off 1Password?
Export from 1Password in its 1pux format and import it into the destination. Bitwarden, Proton Pass, Enpass, Psono and Passbolt all accept either 1pux or a 1Password CSV. What does not travel is everything outside the item records: shared vault permissions, group structure, your identity provider mapping, and any Secrets Automation or CLI plumbing that reads from 1Password in CI. Plan to run both managers in parallel for a billing cycle, rebuild the vault and group structure by hand in the new tool, and only then cancel.