1Password vs Bitwarden for the company vault at the border and in code

An engineer clears customs with a laptop that still holds every shared production login, then opens a pull request that needs an API token the team left in a chat thread. The failure mode is not missing a password field. It is choosing a vault that cannot remove travel data from devices, or that cannot prove how secrets leave the vendor cloud.

Buy 1Password when SSO unlock, Travel Mode, and built-in developer secrets matter more than price. Buy Bitwarden Enterprise when open-source auditability and self-hosting are non-negotiable.

Overview

	1Password	Bitwarden
Primary use case	Business password manager with Unlock with SSO, Travel Mode vault removal, and developer CLI / SSH workflows on the same encrypted vaults	Enterprise password manager with open-source clients and server, SSO, enterprise policies, and an included self-host option
Day-to-day workflow	Unlock with the identity provider, share items through role-based vaults, turn Travel Mode on before trips, and pull secrets into terminals or CI with 1Password CLI and related developer tools	Log in with SSO where configured, organize credentials in collections with policies and event logs, and run Bitwarden cloud or a self-hosted Docker deployment under an Enterprise license
Main buying consideration	Business is listed at USD 8.99 per user per month billed yearly on 1password.com; Teams Starter Pack is a lower per-user yearly rate with a 10-user minimum and a 20-user cap	Enterprise is listed at USD 6 per user per month billed annually on bitwarden.com; Teams is USD 4 per user per month billed annually without the Enterprise-only SSO and self-host controls

We reviewed 1Password’s Business pricing page for per-user rates and included integrations, the Unlock with SSO and Travel Mode support articles, the JetBrains customer story for Unlock with SSO and CLI use, and the 1Password Developer docs for CLI and secrets workflows, and Bitwarden’s business pricing page for Teams and Enterprise rates, the password manager plans help article for Enterprise-only controls, and the self-host Bitwarden help article for the Enterprise self-host fee statement.

1Password

Bitwarden

Editions and pricing

Both vendors publish per-user annual list prices for business password management. 1Password separates Teams Starter Pack from Business. Bitwarden separates Teams from Enterprise, and puts self-host and SSO on Enterprise.

	1Password	Bitwarden
How it is sold	Teams Starter Pack for small teams; Business for Unlock with SSO, provisioning, Watchtower, and the broader admin and developer feature set listed on the Business card; Enterprise and MSP paths are offered separately from the Business public card	Teams for centralized ownership, sharing, and event logs; Enterprise for SSO, enterprise policies, account recovery, self-host, Access Intelligence, and Families sponsorship. Secrets Manager is documented as an add-on with its own user and machine-account metering
Figure on the public page	USD 8.99 per user per month for 1Password Business billed yearly on the Business pricing page checked 7 Oct 2026. The same page lists Teams Starter Pack at USD 2.49 per user per month billed yearly with a 10-user minimum and a 20-user maximum. Monthly Business billing is listed at USD 10.99 per user	USD 6 per user per month for Bitwarden Enterprise billed annually on the business pricing page checked 7 Oct 2026. Teams is listed at USD 4 per user per month billed annually. The page states prices are in USD on an annual subscription and that taxes are not included
What the listing adds about payment	14-day trials are offered on the Business cards. Buy with AWS is named as an additional procurement path for Business. Larger Enterprise commercial terms are not printed as a public per-user dollar on that Business page	Free trials are offered on the Teams and Enterprise cards. Large organizations can request a custom quote. Self-hosting on Enterprise does not add a separate self-host line item on the help article reviewed

SSO, Travel Mode, and developer secrets

Shared surface starts with encrypted vaults, browser clients, and team sharing. The documented split is how unlock ties to the identity provider, whether vaults can leave the device before travel, and how developer secrets enter CLI and CI workflows.

	1Password	Bitwarden
Identity unlock	Unlock with SSO on 1Password Business uses OpenID Connect so members unlock with the identity provider instead of the account password and Secret Key. Automated provisioning is documented as a separate setup from unlock	Login with SSO is an Enterprise organization control on the plans table, with Key Connector and trusted-device flows documented in Bitwarden SSO help for passwordless enterprise unlock patterns
Travel and device exposure	Travel Mode removes vaults that are not marked Safe for Travel from apps, the browser extension, and 1Password.com. Support documents that Business admins can turn Travel Mode on or off for team members	Bitwarden’s Enterprise materials reviewed for this page document policies, SSO, and self-host data control. They do not document a Travel Mode equivalent that deletes non-travel vaults from devices before a border crossing
Developer secrets	Business pricing lists SSH key signing, Git commit signing, CLI, and SDKs, plus IDE, CI/CD, and IaC integrations. Developer docs describe Environments and Credential Broker workflows for keeping secrets out of plaintext local files and short-lived machine access	Password Manager Enterprise covers human vault credentials, API access, and directory tooling. Secrets Manager is sold as a separate developer/DevOps add-on with machine accounts on the same business pricing page

Open source and self-hosting

Both products encrypt vault data end to end for cloud customers. The documented difference is whether you can run the server yourself on an open-source stack under the enterprise license you already buy.

	1Password	Bitwarden
Source and audits	Business pricing lists end-to-end AES-256 encryption, Two-Key Derivation with password and Secret Key, SOC 2 Type II, and independent third-party audits. A customer-operated open-source server is not shown on that page	Bitwarden documents an open-source foundation with regular third-party audits and names SOC 2 Type II, SOC 3, ISO 27001, GDPR, CCPA, HIPAA, and DPF on the business pricing FAQ materials reviewed
Self-host path	1Password Business and consumer memberships run on 1Password-hosted infrastructure in the materials reviewed. No Docker self-host install guide equivalent to Bitwarden’s Enterprise self-host article was found on 1password.com for this page	The self-host Bitwarden help article states the Enterprise plan includes self-hosting for no additional cost, with Docker images from GitHub Container Registry and license files to unlock paid organization features
Admin recovery and policy	Business lists account recovery for locked-out users, custom policies, groups, usage reports, and SIEM event streaming to tools such as Splunk, Elastic, Sumo Logic, and Panther	Enterprise adds account recovery, enterprise policies, custom management roles, Access Intelligence, SCIM, and event logs on top of Teams operational controls

Favor 1Password when the documented requirement is Unlock with SSO on Business, Travel Mode vault removal before travel, and developer CLI / SSH / Environments tooling on the same vault. Favor Bitwarden Enterprise when the documented requirement is open-source auditability plus Enterprise self-hosting with no additional self-host fee.