Apply for access
Extended Access Management

Every identity travels.
This is the document it carries.

People, devices, and AI agents cross into your systems thousands of times a day. 1Password is the passport: verified at every border, stamped at every entry, honored everywhere.

Identity · Page 01
HolderM. OKAFOR
TypeHUMAN / EMPLOYEE
Issued by1PASSWORD EAM
DeviceMACBOOK · HEALTHY
StatusIN GOOD STANDING
Entries · Page 02
ADMITTEDPROD DATABASE · READ
09:41 · EXP 18:00
ADMITTEDGITHUB · SSO
09:44 · SCOPED
REFUSEDBILLING CONSOLE
10:02 · OUT OF SCOPE
ADMITTEDAWS · ROLE: DEPLOY
11:17 · EXP 60 MIN
P<1PASSWORD<<EVERY<IDENTITY<VERIFIED<<<<<<<<<<<<<<2026<EAM<<<<<<<<
Start free trial How border control works
The checkpoint

Border control for every sign-in, on every device.

A password manager checks one document. Extended Access Management runs the whole border: who is crossing, on what device, into which system, for how long.

Checkpoint 01

The traveler

Passwords, passkeys, and SSO in one identity document. Employees carry one credential set that works at every crossing, so nobody writes the door code on a sticky note.

Checkpoint 02

The vehicle

Device trust at the border. Unhealthy, unknown, or unmanaged machines get pulled into secondary screening before they touch company data.

Checkpoint 03

The stamp

Every admission and refusal is stamped and kept. When the auditor asks who entered production in March, you hand them the passport, not a shrug.

New in 2026

AI agents are travelers now. Issue them visas, not master keys.

Your agents book meetings, file tickets, and touch production. Each one gets a scoped visa: named purpose, limited territory, hard expiry. Overstays are refused at the border.

Visa · Class A

Work authorization

An agent gets credentials for exactly the systems its job requires. Nothing inherited, nothing implied, nothing shared from a human's vault.

Expires: on schedule, every time
Visa · Class B

Territory limits

Read here, write there, never over there. Scope is stamped into the visa itself, so a compromised agent hits a border, not a blast radius.

Refused: anything out of scope
Visa · Class C

Full travel record

Every credential an agent uses is logged against its identity. When something goes wrong at 3 AM, you know which traveler, which border, which minute.

Retained: complete history
150,000+
Businesses carrying the document
$400M
Annual recurring revenue
Millions
Borders crossed daily
Consular fees

Plain fees. No visa lottery.

Individual
$2.99
per month, billed annually

One traveler, unlimited documents, every device.

Start trial
Families
$4.99
per month · 5 travelers

Shared vaults for the household, separate pages for each person.

Start trial
Business
$7.99
per user per month

The full border: SSO, device trust, agent visas, and the complete stamp record.

Talk to sales
Enterprise
Custom
volume terms

Dedicated onboarding and controls for organizations with many borders.

Contact us

Your systems have borders.
Start stamping passports.

Fourteen days free. Every identity documented, every crossing on record.

Apply for access