1Password

There's no known case of anyone breaking into 1Password vaults. The design makes it exceptionally hard: vaults are encrypted on your device with both your master password and a 128-bit Secret Key that's stored only on your own devices — so even a stolen master password isn't enough on its own. Add two-factor authentication and a break-in would need control of your physical device itself, not just your credentials.

See in the comparison →

Zero times in terms of customer vaults or passwords. The one notable incident: in 2023, attackers who had compromised Okta's support systems briefly probed 1Password's internal Okta instance — 1Password detected it, confirmed no user data was accessed, and published the details transparently. Its bug-bounty program and repeated independent security audits are part of why that record stays clean.

See in the comparison →

Yes — 1Password is built by AgileBits Inc., founded in 2005 and headquartered in Toronto, Ontario. It's one of Canada's most successful software companies, now protecting millions of users and over 100,000 businesses worldwide. For Canadians who prefer a domestic security vendor, this is the one — and it happens to be our best-overall pick on merit too.

See in the comparison →

1Password's Individual plan costs US$3.99/mo billed annually — and notably it's a single, flat rate with no promotional first-year discount that later jumps at renewal, which is unusual in this field. The Families plan covers up to five people and works out as the best per-person value here, with shared vaults between members. There's no permanent free tier — the one real gap versus Bitwarden or Proton Pass — but a 14-day trial lets you test every feature, including the Secret Key setup, before you pay. Business tiers exist too if you outgrow personal use.

See in the comparison →

Yes, clearly, in our assessment. LastPass suffered a major 2022 breach in which encrypted customer vaults were stolen; 1Password has no comparable incident, and its Secret Key model means stolen server data alone can't be cracked the same way. Add more polished apps and Canadian roots, and there's little reason to prefer LastPass today — which is why it isn't in our ranking.

See in the comparison →

For polish and family use, yes — 1Password's apps, onboarding and the master-password-plus-Secret-Key model lead the field, and it's the Canadian option, built by AgileBits in Toronto. Bitwarden wins on price and transparency: it's fully open source, its free tier is the best available anywhere, and its Premium costs a good deal less than 1Password's US$3.99/mo Individual plan. So the honest split is: pick Bitwarden if you're budget-conscious or want auditable open-source code; pick 1Password for the smoothest overall experience and the strongest consumer security design. Both have clean breach records.

See in the comparison →