Is 1Password Nightly – Password Manager safe?

Clean risk

Provides a nightly version of 1Password’s browser password manager for 1Password members.

This extension is the frequently updated nightly channel of 1Password’s password manager and is intended to be used alongside the nightly 1Password desktop app. It requires a 1Password membership, with sign-up available during installation.

0Risk
Who publishes it

AgileBits Inc - 3 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
1Password
Declared legal entity
AgileBits Inc
Registered address
4711 Yonge Street, 10th Floor, Toronto, ON M2N 6K8, CA
Registered contact
AgileBits Inc. dba 1Password

Same store account

2 other listings published from this account, 7.1M+ users between them, none of them carrying a finding.

Same operator - 1 listing

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 21 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

downloads.1password.com
Also called by 1 other listing
kolide.com
Also called by 1 other listing
1password.community
Also called by 2 other listings
1password.dev
Also called by 2 other listings, including 1Password: Password Manager
a.1passwordentusercontent.com
Also called by 2 other listings
a.1passwordusercontent.ca
Also called by 2 other listings
a.1passwordusercontent.com
Also called by 2 other listings
a.1passwordusercontent.eu
Also called by 2 other listings
api.kolide.com
Also called by 2 other listings
api.kolide.eu
Also called by 2 other listings, including 1Password: Password Manager
app.kolide.com
Also called by 2 other listings
app.kolide.eu
Also called by 2 other listings
assets1.kolide.com
Also called by 2 other listings
assets1.kolide.eu
Also called by 2 other listings, including 1Password: Password Manager
auth.kolide.com
Also called by 2 other listings
auth.kolide.eu
Also called by 2 other listings, including 1Password: Password Manager
blog.1password.com
Also called by 2 other listings
c.1password.com
Also called by 2 other listings, including StayFree
cache.agilebits.com
Also called by 2 other listings
op8.agilebits.com
Also called by 2 other listings
releases.1password.com
Also called by 2 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed 1Password contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 1Password

    1Password sends data to 1Password. Named as a recipient by 2 other extensions we have analysed.

Updated 30 September 2026gejiddohjgogedgjnonbofjigllpkmbf