1Password

May 24, 2026

Connect 1Password to verify that your team uses a managed password manager — a key control for SOC 2, ISO 27001, and similar frameworks.

What is 1Password?

1Password is a team password manager that helps organizations store, share, and manage credentials securely. Many compliance frameworks require organizations to use a managed password manager to ensure credentials are not shared over chat or email. Connecting 1Password gives Imara auditable proof that your team is using one.

What Imara collects from 1Password

  • Team members enrolled in 1Password (active user count)
  • User roles and vault access levels
  • Account-level security policy settings — master password requirements, 2FA enforcement

Required permissions

Imara connects via the 1Password Events API using a read-only token. Generate one in 1Password → Settings → Integrations → Events Reporting. Imara does not read the contents of any vault — only metadata about users and policies is accessed.

How to connect

  1. In 1Password, go to Settings → Integrations and create a new Events API token.
  2. In Imara, go to Integrations and select 1Password.
  3. Paste the token and click Connect.

Frameworks supported

SOC 2, ISO 27001, NIST CSF.

What to expect

Imara confirms that a password manager is in active use and collects member enrollment data. This directly satisfies credential management controls in most frameworks — evidence that every team member is using a managed vault instead of storing passwords insecurely.

1Password | Imara Documentation