1Password Device Trust Core enforces device health and compliance policies in real time by blocking unhealthy devices from accessing web apps via the browser extension. Device Trust Core walks users through resolving issues at the moment of access, enabling previously unattainable levels of compliance amid an ever-changing security environment.
1Password Device Trust Core helps organizations enforce device compliance and reduce security risk by ensuring every device meets your health requirements before accessing work applications. Rather than relying solely on IT teams to chase down non-compliant endpoints, Device Trust Core empowers employees to self-remediate issues - reducing IT burden while strengthening your security posture.
1Password Device Trust is available in two versions to fit the needs of your business: Device Trust Core and Device Trust Connect.
Note: This product requires 1Password EPM Business.
Key Capabilities
Device Compliance Enforcement
Block access to web applications at the domain level when a device fails a health check. Ensure that only devices meeting your organization's security policies can reach sensitive SaaS applications and internal tools.
125+ Pre-Built Health Checks
Validate critical device attributes including OS version, disk encryption status, firewall configuration, antivirus presence, and more. Need something specific to your environment? Create custom policies using OSquery for full flexibility over your compliance criteria.
Shadow IT and App Visibility
Identify SaaS applications in use across your organization - including unauthorized or unmanaged tools - so administrators can enforce device security policies consistently across every application employees access.
Guided Self-Remediation
When a device fails a health check, employees receive clear, step-by-step guidance to resolve the issue themselves before accessing apps. This reduces the volume of IT support tickets and accelerates time-to-compliance without requiring manual IT intervention.
End-User Privacy Center
Give employees full transparency into what checks are running on their devices and who has access to the resulting data. Build trust with your workforce by making device compliance a collaborative process rather than a surveillance exercise.
Integrations With Your Existing Stack
Device Trust Core works alongside the identity and security tools your organization already relies on. 1Password integrates with SSO providers such as Azure AD, Google Workspace, and Okta, and can stream events to SIEM tools including Splunk, Elastic, Sumo Logic, and Panther. Custom policies leverage OSquery, giving your team the flexibility to define compliance criteria tailored to your environment.
How It Works:
Define Policies: Set device health requirements using pre-built checks or custom OSquery policies tailored to your organization's security standards.
Enforce Compliance: Domain-based enforcement blocks access to web applications when devices do not meet your defined health criteria.
Empower Employees: Non-compliant users receive guided remediation instructions so they can resolve issues independently.
Gain Visibility: Monitor device health status and SaaS application usage across your organization from a centralized dashboard.
Who Is This For?
Device Trust Core is designed for security and IT teams at organizations that need to enforce endpoint compliance across their workforce - particularly those managing distributed or remote teams where direct device management is challenging. It is well-suited for organizations looking to layer device trust into their existing access controls without deploying a full endpoint detection platform.
Get Started
To evaluate 1Password Device Trust Core for your organization, subscribe through AWS Marketplace. Contact the 1Password sales team to discuss deployment planning, proof-of-concept options, or to learn how Device Trust Core fits alongside your existing security stack.
Highlights
Simplify Compliance: Enforce device compliance with 125+ pre-built health checks covering OS updates, encryption, firewall status, and more. Build custom checks using Osquery to match your organization's specific security policies. Device Trust Core continuously evaluates every device attempting to access protected web applications, ensuring only compliant endpoints connect to corporate resources.
Enable Employees With Self-Remediation: When a device fails a health check, employees receive clear, step-by-step guidance to resolve issues on their own before accessing apps. This self-service approach reduces IT support ticket volume and accelerates time to compliance, keeping employees productive while maintaining your security posture without manual IT intervention.
Discover Shadow IT With App Visibility: Gain visibility into unauthorized and unmanaged applications across your organization. The App Visibility feature surfaces shadow IT so security teams can identify risk, enforce access policies, and maintain a complete inventory of applications in use. Combined with the End-user Privacy Center, employees understand what data is collected while your organization stays protected.
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
This contract prices around two dimensions billed per unit. The 1Password Device Trust Core unit is the base license, sold by seat. You must buy it alongside 1Password Business, with a minimum of 20 seats. Your cost scales with the number of seats you enroll. The True Up unit handles overuse. If you exceed your committed seat count during the term, you pay for the extra usage through True Ups. So the base unit sets your committed capacity, and True Ups cover any seats added beyond that commitment.
Top-of-mind questions for buyers
What counts as one seat for the Device Trust Core unit?
A seat maps to one enrolled user in your organization. You must license every user whose devices you want checked. Billing starts at a minimum of 20 seats. Device Trust works across company-owned and personal devices running Windows, macOS, Linux, iOS, and Android, but the count is by user, not by device.
When do True Up charges apply, and how are they measured?
True Up charges apply when your active usage passes the seat count you committed to at purchase. You pay for the extra seats added beyond that commitment during the term. The base Device Trust Core unit sets your committed capacity; True Ups cover overuse above it. Charges accrue only for the seats that exceed your commitment.
Do I need another 1Password product to use Device Trust Core?
Yes. Device Trust Core must be purchased alongside 1Password Business. The core license also relies on the 1Password browser extension and the Device Trust agent to run its compliance checks. The extension enforces posture checks on web apps, so both components must be in place for the license to function.
1password.com+1
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
1Password offers 24/7 support via email, forum, and social media. Organizations with 101 or more users receive personalized training and a dedicated Customer Success Manager.
For questions specific to your AWS Marketplace subscription, including subscription management or refund requests, please reach out through the support portal at https://support.1password.com or email support@1password.com.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
1Password Device Trust Connect requires a device to be known, trusted, and compliant before granting access to protected applications, whether managed or unmanaged. Enforce custom compliance Checks, discover AI tools running on endpoints, and let employees self-remediate, all via an IdP integration and the 1Password browser extension.
1Password Business is an enterprise password manager that extends identity security beyond SSO, secures logins, reduces shadow IT, and protects infrastructure secrets to keep your team safe and productive.
1Password Unified Access secures credentials for your workforce, AI agents, and machines in one platform. Discover shadow AI, govern secrets, and audit all access with end-to-end encryption.
1Password SaaS Manager unifies AI and SaaS discovery, access governance, and spend optimization to help IT and security teams reduce risk and control costs.
Fast, Lightweight Windows App—But Vault Access Management Is Painfully Cumbersome
Reviewed on Oct 09, 2026
Review provided by G2
What do you like best about the product?
The application on Windows makes work run much smoother. Especially when it comes to needing quick access to credentials on short notice and such. It’s simple to add new items to an existing vault and to edit existing items as needed (for example, updating or deleting them). You can also add favourites and create duplicates, which makes it very useful for sharing the same access across different vaults0 There is a variety of 'types' you can add, from server specific info to websites to one time use passwords etc.
Performance wise, the app is light and does not slow down my PC at all. I can have it running in the background without causing stuttering or lag with other softwares.
What do you dislike about the product?
Limited access within in the Windows application makes editing access to vaults etc an absolute nightmare.
Why do I need to use the browser in order to manage which users/groups have access to which vault. Especially as the web based model doesn't allow you to edit multiple vaults at once.
So you need to navigate to each vault individually in it's own window, then sign in again, then manage access. Additionally, the 'access' setup doesn't list existing groups or users. So you need to manually type out every single group/user, instead of a simple checkbox or checklist.
What problems is the product solving and how is that benefiting you?
Security wise 1Password is great for sharing temporary limited access credentials.
As well as just general maintenance of saved credentials etc. It's simple enough to open a vault and then copy-paste as needed.
Brad M.
Easy, Secure, and Reliable—Seamless Deployment at a Fair Price
Reviewed on Oct 08, 2026
Review provided by G2
What do you like best about the product?
Easy to use and very secure. It integrates well within my organization, and it’s quick and reliable in day-to-day use. The pricing feels fair and competitive, and the deployment process is fairly seamless overall.
What do you dislike about the product?
It would be helpful if the mobile app improved its real-time communication features.
What problems is the product solving and how is that benefiting you?
It has been phenomenal at helping with password storage, both personal and shared.
Gary L.
A Secure, Time-Saving Password Vault That’s Easy for Staff to Use
Reviewed on Oct 07, 2026
Review provided by G2
What do you like best about the product?
I find having a single, secure repository for hundreds of passwords is a huge time saver. The ease of use also makes it far more likely that our staff will use secure passwords, creating a more secure environment.
What do you dislike about the product?
A small percentage of websites seem to block pasting passwords, which can prevent 1Password from filling in the username and password automatically. That’s especially frustrating when you’re using secure passwords, since they can be clunky and time-consuming to type out by hand.
What problems is the product solving and how is that benefiting you?
1Password eliminates the need to store passwords in spreadsheets and reduces the temptation to reuse the same common password across multiple logins.
Shauna D.
Fast, Secure Logins with Excellent Browser Integration and Built-In One-Time Passwords
Reviewed on Oct 05, 2026
Review provided by G2
What do you like best about the product?
1Password has become one of the tools I use constantly throughout the workday. The browser integration is probably the feature I value most. It makes signing into websites and applications extremely quick because credentials are available directly where I need them without having to open a separate application, search for the account, and copy and paste passwords.
I also really like the built-in one-time password functionality. Having 1Password store and generate one-time passwords alongside the associated login makes MFA much more convenient. Instead of switching between a password manager and a separate authenticator app, I can complete the entire login process from one place. This is especially valuable when you work with a large number of systems and accounts throughout the day.
From a UI/UX perspective, 1Password is clean, intuitive, and easy to navigate. The browser extension integrates naturally into my workflow, and searching for credentials is fast. Performance has also been reliable; I rarely have to think about the application itself because it is simply there when I need it.
The biggest benefit for me is the combination of security and efficiency. It makes it practical to use unique, complex passwords and MFA across many accounts without adding a lot of friction to everyday work. That saves time while encouraging better security practices, which provides good value and ROI.
Onboarding and day-to-day use have been straightforward, and I haven't needed significant support to use the product effectively. I also don't currently consider AI or intelligent features a major reason I use 1Password. Its value to me comes primarily from doing its core job extremely well: securely managing credentials, integrating with the browser, and making MFA and one-time passwords much easier to use.
What do you dislike about the product?
There isn't much I dislike about 1Password overall. One area that could be improved is the initial onboarding experience, especially for users who are new to password managers. There are a lot of features available, and understanding things like vault organization, browser integration, one-time passwords, and the different ways credentials can be managed can take some time.
The browser integration is excellent overall, but occasionally the autofill suggestions can appear when they aren't needed or it may not immediately select the login I want when multiple accounts are associated with the same site.
I also think some of the more advanced functionality could be surfaced or explained better within the interface. I've discovered useful features simply through continued use rather than knowing they were available from the beginning.
These are relatively minor issues for me and haven't significantly affected the value I get from the product. The performance and reliability have been very good, and the time saved through the browser integration and built-in one-time password functionality outweighs these small inconveniences.
What problems is the product solving and how is that benefiting you?
1Password solves the challenge of securely managing a large number of unique credentials across different systems, applications, and customer environments. This is especially valuable in an MSP environment, where we work with many different customers and need to keep credentials organized, secure, and easily accessible to the appropriate team members.
The browser integration saves a significant amount of time when moving between customer systems, and the built-in one-time password functionality makes MFA much easier by keeping the login and verification code together rather than requiring a separate authenticator application.
It also helps us maintain better security practices by making it practical to use strong, unique passwords instead of reusing or manually managing credentials. Overall, 1Password reduces the administrative burden of credential management, improves efficiency when supporting multiple customers, and makes secure access much easier to manage in an MSP environment.
Mohammed H.
Easy and Secure Password Management without the Hassle
Reviewed on Oct 01, 2026
Review provided by G2
What do you like best about the product?
I really like how 1Password makes managing passwords and creating strong, unique passwords so easy. Having my login information organized securely in one place saves me the hassle of remembering multiple passwords. The autofill feature is also a great time saver when signing in. I also use 1Password to securely store important links, passwords, and login details, and to help manage accounts such as Gmail. The setup was straightforward, and I didn't need much technical knowledge to get started. Overall, I find it useful for both personal and work account management.
What do you dislike about the product?
One thing I would improve is that it can take a little time to get used to all the features, especially when you are using a password manager for the first time. The interface is generally easy to use, but setting an option could be more clearly explained for new users. Apart from that, I haven't experienced any major issues with 1Password, which is great.
What problems is the product solving and how is that benefiting you?
I haven't had any major problems with 1Password so far. For me, its main benefit is making password and account management easier and more organized. I don't have to remember every password or keep login details scattered in different places. I can securely store my information, generate strong passwords, and use autofill when signing in. It saves time and makes managing my personal and work accounts more convenient.