Skip to content
Head to head

1Password vs NordPass

1Password publishes its cryptographic parameters; NordPass does not publish its Argon2 configuration, which makes independent comparison impossible. NordPass does have a free tier, but it permits only one active device session at a time — a limit most people hit on day one.

Facts reviewed 2026-08-01. Every row below is sourced, and anything a vendor does not publish is marked as such rather than estimated.

The question that decides it

Can you live with a free tier that only works on one device at a time?

Choose 1Password if

you want published parameters, the Secret Key model, and no device-session limit.

Choose NordPass if

you want a free starting point and mainly use one device.

Side by side

Comparison of 1Password and NordPass by security and account features
 1PasswordNordPass
Storage modelCloud-synced encrypted vaultCloud-synced encrypted vault
Key derivationKey derivation sets how expensive each attacker guess is. A vendor that does not publish its parameters cannot be independently compared on this.PBKDF2-HMAC-SHA256, 650,000 iterationsArgon2 — the exact variant and cost parameters are not published
Source codeProprietaryProprietary
Independent auditsPublishes independent assessments, including a 2020 ISE code review, plus ongoing penetration testing via its Trust Center.Reports independent Cure53 audits of its consumer and business products; the business audit found 15 issues including one high-severity.
Free tierNo permanent free tierYes
Main free-tier limitNo free tierOnly one active device session at a time
Account recoveryReusable recovery codes for individual and family accounts; family organisers and business admins can recover other members.A 24-symbol recovery code can reset the master password. Without it, the account may need a destructive reset.
PasskeysSaves, syncs, shares and uses website passkeys.Stores, syncs, uses and shares website passkeys.
PlatformsmacOS, Windows, Linux, iOS, Android, plus major browser extensions.Desktop apps, browser extensions and mobile apps.
Documented incidents“None found” means no authoritative report surfaced during research. It is not a claim that no incident has ever occurred.September 2023: an attacker used a session tied to the Okta support breach to reach 1Password's employee Okta tenant. 1Password reported no compromise of user data.None found in published sources

How 1Password works

A cloud-synced vault encrypted and decrypted on your device with AES-GCM-256. Uniquely, it is protected by two secrets: your account password and a randomly generated 128-bit Secret Key, which means a stolen vault cannot be attacked with the password alone.

Key derivation
PBKDF2-HMAC-SHA256, 650,000 iterations
If you forget the master password
Recovery is possible — Reusable recovery codes for individual and family accounts; family organisers and business admins can recover other members.

How NordPass works

A cloud-synced zero-knowledge vault encrypted on the device before it syncs, using XChaCha20 rather than the more common AES.

Key derivation
Argon2 — the exact variant and cost parameters are not published
If you forget the master password
Recovery is possible — A 24-symbol recovery code can reset the master password. Without it, the account may need a destructive reset.
A third option

Both 1Password and NordPass store your passwords. MoolKey does not.

1Password and NordPass differ in how well they protect a stored copy of your passwords. MoolKey answers a different question: it recalculates each password from your private phrase and the site name whenever you need it, so no copy exists to protect. A breach would expose masked account names and integers, not credentials.

That is a real trade, not a free win. There is no autofill, no import of your existing passwords, and no recovery if you forget your phrase — none, by design. your private phrase never reaches the service, so nobody can reset it or reproduce a password derived from it.

How it worksFull comparison

1Password vs NordPass FAQ

What is the main difference between 1Password and NordPass?
1Password uses cloud-synced encrypted vault, while NordPass uses cloud-synced encrypted vault. 1Password publishes its cryptographic parameters; NordPass does not publish its Argon2 configuration, which makes independent comparison impossible. NordPass does have a free tier, but it permits only one active device session at a time — a limit most people hit on day one.
Is 1Password or NordPass more secure?
Security here is mostly about verifiable design rather than marketing. 1Password uses pbkdf2-hmac-sha256, 650,000 iterations. NordPass uses argon2 — the exact variant and cost parameters are not published, which it does not publish in full. Can you live with a free tier that only works on one device at a time?
Can I recover my account if I forget the master password?
1Password: Reusable recovery codes for individual and family accounts; family organisers and business admins can recover other members. NordPass: A 24-symbol recovery code can reset the master password. Without it, the account may need a destructive reset.
Does 1Password or NordPass have a free plan?
1Password: No permanent free tier. NordPass: Yes, though only one active device session at a time.
Has 1Password or NordPass ever been breached?
1Password: September 2023: an attacker used a session tied to the Okta support breach to reach 1Password's employee Okta tenant. 1Password reported no compromise of user data.. NordPass: no authoritative breach report was found during research, which is not the same as a guarantee that none has occurred.

Sources

Every factual claim above traces to vendor documentation or published reporting. Where a vendor does not publish a figure, this page says so instead of repeating a number from a comparison table we cannot verify.

Make one account easier today.

Start with the password you keep reusing or the bank card that still shares a PIN. MoolKey is free, and you do not need to move everything at once.

Open MoolKey freeRead how it works
Free forever Works offline Phone or computer