Sold by: 1Password
Deployed on AWS
1Password Device Trust Connect requires a device to be known, trusted, and compliant before granting access to protected applications, whether managed or unmanaged. Enforce custom compliance Checks, discover AI tools running on endpoints, and let employees self-remediate, all via an IdP integration and the 1Password browser extension.
4.6
Overview
Secure Every Device Before It Reaches Your Applications
1Password Device Trust Connect helps organizations establish device trust and enforce compliance requirements by empowering employees to self-remediate issues before accessing work applications. Available in two versions - Device Trust Core and Device Trust Connect - the solution fits the security needs of organizations at every stage of their zero trust journey.
How It Works
1Password Device Trust Connect sits between your identity provider and your protected applications, ensuring that only healthy, known devices can authenticate through SSO. When a device fails a health check, the employee is guided through a self-remediation workflow to resolve the issue independently - reducing the burden on IT teams and minimizing access disruptions.
Key Capabilities
Block Unknown and Unregistered Devices
Only devices registered to known users can log in via SSO, protecting your data even if attackers manage to steal valid credentials. This closes a critical gap that traditional identity solutions leave open - ensuring that a compromised password alone is not enough to gain access.
Enforce Compliance Requirements
Define what a healthy device looks like for your organization, then enforce it at every authentication. Device Trust includes a library of prebuilt Checks covering common requirements such as disk encryption, OS and browser updates, screen lock, and endpoint protection, and self-service templates let admins create custom Checks for their own policies and target them to specific people or device groups. MDM enrollment and management state are verified as part of this, making MDM one signal in a broader compliance picture rather than the only control.
Checks run continuously and are evaluated at the point of access across macOS, Windows, and Linux, on both managed and unmanaged devices. That gives security teams enforcement where it matters and gives auditors evidence that only compliant devices reached protected applications
Discover and Govern AI Tools on Your Endpoints
AI Insights shows which AI applications, browser tools, CLIs, IDE extensions, and MCP servers are running on employee devices, including tools adopted before IT has reviewed them. Admins can see who is using what, flag misconfigured or unsanctioned tools, and apply policy so AI usage is governed rather than invisible.
Device Trust also surfaces related risk on the endpoint, such as plaintext secrets that AI tools and agents could reach, giving security teams a path from discovery to remediation. Collection stays at the metadata level: which tool, which surface, how often. Prompt and conversation content is never inspected.
Employee Self-Remediation
When a device falls out of compliance, employees receive clear, actionable guidance to resolve the issue themselves. This approach reduces IT support tickets, accelerates time-to-compliance, and keeps employees productive without waiting for helpdesk intervention.
Seamless IdP Integration
Works alongside Okta, Google, and Entra to enforce device trust and device health policies before allowing access to managed applications. Device trust decisions are evaluated at the point of authentication, adding a layer of security without disrupting existing SSO workflows.
Use Cases
- Preventing credential-based attacks: Even when valid SSO credentials are compromised, Device Trust Connect blocks authentication from unrecognized or unhealthy devices, stopping access before it starts.
- Securing access from unmanaged endpoints: For organizations with contractors, Linux devices, remote workers, or BYOD policies, Device Trust Connect verifies device posture before granting access to sensitive web applications.
- Simplifying compliance posture: By continuously enforcing device health checks at the point of authentication, organizations can demonstrate that only compliant devices access protected resources - supporting audit and compliance objectives.
Get Started on AWS Marketplace
Deploy 1Password Device Trust Connect through AWS Marketplace to streamline procurement and consolidate billing. To learn more about implementation, supported configurations, or to discuss your organization's requirements, contact the 1Password team through the support channel provided in this listing.
Highlights
- Block Unregistered and Non-Compliant Devices at Login. Only devices registered to known users can authenticate via SSO, protecting your data even if attackers steal valid credentials from providers like Okta, Google, or Entra. Device Trust Connect performs real-time health checks before granting access, ensuring every device meets your organization's compliance policies before reaching managed applications.
- See and Govern AI Tools Running on Employee Devices. AI Insights discovers AI applications, agents, and MCP servers across macOS, Windows, and Linux, including shadow AI adopted outside procurement. Security teams can flag misconfigured or unsanctioned tools, surface plaintext secrets exposed to them, and enforce policy at login, without inspecting prompt content.
- Empower Employees to Self-Remediate Device Issues. When a device fails a compliance check, employees receive guided instructions to resolve the issue themselves - such as enabling disk encryption or updating their OS - without filing an IT ticket. This self-remediation workflow reduces IT support burden while respecting employee privacy on personal and BYOD devices.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
1Password Device Trust | Please reach out to 1Password Directly for Device Trust pricing, available only via Private Offer. Can be purchased at a minimum of 20 seats. | $2,640.00 |
The following dimensions are not included in the contract terms, which will be charged based on your usage.
Dimension | Description | Cost/unit |
|---|---|---|
True Up | True Ups/Overuse | $0.01 |
Dimensions summary
You buy this product through a contract, and pricing comes only through a Private Offer arranged with the vendor. The main dimension, 1Password Device Trust, is priced per seat, with a minimum purchase of 20 seats. The True Up dimension handles overuse. If you exceed your committed seat count during the term, you pay for the extra usage through True Ups. This keeps your base commitment fixed while letting your seat count grow. Contact the vendor directly to set your seat-based price, since it is not published on the listing.
Top-of-mind questions for buyers
A seat maps to one device you protect and verify before it accesses your systems. Device Trust installs an agent on each device, covering company-owned machines, personal (BYOD) devices, and contractor devices across Windows, macOS, Linux, iOS, and Android. You must purchase at least 20 seats to start.
Extra usage beyond your committed seat count is billed through the True Up dimension. This means your base commitment stays fixed while your protected device count can grow. You pay for the overage rather than resetting your original contract.
The Connect version enforces device checks before access to SSO-protected apps. It needs integration with a supported identity provider. The optional Extended Device Compliance feature for non-SSO web apps also requires 1Password Enterprise Password Manager Business and the browser extension. Those are separate requirements, not part of this seat price.
1password.com
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Support URL: https://support.1password.com Support email: support@1password.com Sales / Enterprise inquiries: sales@1password.com
1Password provides business support for Device Trust Connect customers. For assistance with setup, troubleshooting, or account inquiries, contact the 1Password support team at https://support.1password.com .
For questions about refunds or billing, reach out through the same support portal and reference your AWS Marketplace subscription.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
1Password Device Trust Core enforces device health and compliance policies in real time by blocking unhealthy devices from accessing web apps via the browser extension. Device Trust Core walks users through resolving issues at the moment of access, enabling previously unattainable levels of compliance amid an ever-changing security environment.
1Password Unified Access secures credentials for your workforce, AI agents, and machines in one platform. Discover shadow AI, govern secrets, and audit all access with end-to-end encryption.
1Password Business is an enterprise password manager that extends identity security beyond SSO, secures logins, reduces shadow IT, and protects infrastructure secrets to keep your team safe and productive.
Veri FIDO is a passwordless authentication SaaS solution built on the FIDO2 standard. With cross-device passkeys, patented device intelligence, and real-time risk monitoring, it helps enterprises strengthen security while simplifying the user experience.
Customer reviews
Philip L.
Secure, Easy Password Sharing Across the Company
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
1Password lets us securely share passwords and provide access to other colleagues within the company.
What do you dislike about the product?
If you forget your password, you have to ask the 1password administrator to reset your account, and then you’re issued new credentials. It works, but it can be pretty frustrating—especially during busy times when you need access quickly.
What problems is the product solving and how is that benefiting you?
1Password helps our company share passwords securely, instead of sending them by email, for example. This better protects company data and keeps access more secure.
Tarun S.
Easy-to-Use Password Manager with a Simple, Clear UI
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
It’s easy to use, and the UI is simple and clear. Saving passwords is very smooth, so I don’t miss any of my secrets. The onboarding process is also easy and straightforward.
What do you dislike about the product?
It got locked, so I needed to unlock it with a password. That was just a setting, though—I’ve sorted it out now and increased the lock time to something more suitable.
What problems is the product solving and how is that benefiting you?
Before, I used to save passwords in Notes or somewhere else, and then whenever I needed them, I had to juggle between different files. With 1Password, it automatically prompts me to save a password, and when I need it later, I can autofill it with a single click.
Oil & Energy
The worst integration in a very, very, ... very long time.
Reviewed on Oct 30, 2026
Review provided by G2
What do you like best about the product?
Nothing? Nothing. Really nothing. Regardless how many characters you require me to type.
What do you dislike about the product?
I've been trying for TWO WHOLE HOURS to connect my phone. Failing. Every. Single. Time.
What problems is the product solving and how is that benefiting you?
None.
Haizol M.
Seamless 1Password Integration and Fast, Accurate Autofill
Reviewed on Oct 19, 2026
Review provided by G2
What do you like best about the product?
I really like how well 1Password integrates with different apps and automates the login process. Having used it for almost a year, I’ve noticed a significant reduction in the time and manual effort needed to log in to my accounts. I’m also impressed by how quickly and accurately it identifies and autofills the correct password for each app. The interface is intuitive and user-friendly, making the overall experience smooth and convenient.
What do you dislike about the product?
Currently, there is nothing that I dislike.
What problems is the product solving and how is that benefiting you?
Having used it for almost a year, I’ve noticed a significant reduction in the time and manual effort needed to log in to my accounts. I’m also impressed by how quickly and accurately it identifies and autofills the correct password for each app.
Verified User in Retail
Fast, Lightweight Windows App—But Vault Access Management Is Painfully Cumbersome
Reviewed on Oct 09, 2026
Review provided by G2
What do you like best about the product?
The application on Windows makes work run much smoother. Especially when it comes to needing quick access to credentials on short notice and such. It’s simple to add new items to an existing vault and to edit existing items as needed (for example, updating or deleting them). You can also add favourites and create duplicates, which makes it very useful for sharing the same access across different vaults0 There is a variety of 'types' you can add, from server specific info to websites to one time use passwords etc.
Performance wise, the app is light and does not slow down my PC at all. I can have it running in the background without causing stuttering or lag with other softwares.
Performance wise, the app is light and does not slow down my PC at all. I can have it running in the background without causing stuttering or lag with other softwares.
What do you dislike about the product?
Limited access within in the Windows application makes editing access to vaults etc an absolute nightmare.
Why do I need to use the browser in order to manage which users/groups have access to which vault. Especially as the web based model doesn't allow you to edit multiple vaults at once.
So you need to navigate to each vault individually in it's own window, then sign in again, then manage access. Additionally, the 'access' setup doesn't list existing groups or users. So you need to manually type out every single group/user, instead of a simple checkbox or checklist.
Why do I need to use the browser in order to manage which users/groups have access to which vault. Especially as the web based model doesn't allow you to edit multiple vaults at once.
So you need to navigate to each vault individually in it's own window, then sign in again, then manage access. Additionally, the 'access' setup doesn't list existing groups or users. So you need to manually type out every single group/user, instead of a simple checkbox or checklist.
What problems is the product solving and how is that benefiting you?
Security wise 1Password is great for sharing temporary limited access credentials.
As well as just general maintenance of saved credentials etc. It's simple enough to open a vault and then copy-paste as needed.
As well as just general maintenance of saved credentials etc. It's simple enough to open a vault and then copy-paste as needed.