Join Transform 2021 this July 12-16. Register for the AI event of the year.

Password-management platform 1Password is expanding into the “secrets management” space, helping developer teams across the enterprise safeguard private credentials, such as API tokens, keys, certificates, passwords, and anything used to protect access to companies’ internal applications and infrastructure.

Alongside the launch, 1Password has also announced its first acquisition with the purchase of SecretHub, a Dutch startup founded in 2018 that claims to protect “nearly 5 million enterprise secrets” each month. Following the acquisition, SecretHub will be shuttered entirely, with its whole team — including CEO Marc Mackenbach — joining 1Password.

1Password Deepens Integrations with Slack and Rippling to Speed Hassle-Free Adoption of Most Loved Enterprise Password Manager Article FREE Breaking News Alerts from StreetInsider.com! 1Password vs bitwarden: What are the differences? Developers describe 1Password as 'A password manager and secure wallet for Mac, Windows, iOS, and Android'. 1Password is the best password manager and secure wallet for Mac, Windows, iOS, and Android. Securely generate, store, and fill passwords and much more.

Secret sauce

Recent data from GitGuardian, a cybersecurity platform that helps companies find sensitive data hidden in public codebases, revealed a 20% rise in secrets inadvertently making their way into GitHub repositories. If this data falls into the wrong hands, it can be used to gain access to private internal systems. By way of example, Uber revealed a major breach back in 2017 that exposed millions of users’ personal data. The root cause was an AWS access key hackers discovered in a personal GitHub repository belonging to an Uber developer.

There has been a flurry of activity across the secrets management space of late. Israeli startup Spectral recently exited stealth with $6.2 million in funding to serve developer operations (DevOps) teams with an automated scanner that finds potentially costly security mistakes buried in code. San Francisco-based Doppler, meanwhile, last month raised $6.5 million in a round of funding led by Alphabet’s venture capital arm GV and launched a bunch of new enterprise-focused features.

1Password has built a solid reputation over its 16-year history, thanks to a platform that can store passwords securely and simplify log-in. Download altair lte network interface driver. It allows consumers and businesses to log into all their online services with a single click (rather than having to manually input passwords) and can also be used to store other private digital data, such as credit cards and software licenses. The Toronto-based company raised its first (and only) round of funding back in 2019, securing $200 million to help it push further beyond the consumer sphere and cement itself as an integral security tool for the enterprise.

Machine secrets

Today, 1Password claims some 80,000 business customers, including enterprise heavyweights such as IBM, Slack, Dropbox, PagerDuty, and GitLab. With its latest “secrets automation” product, the company is striving to make its platform stickier for existing and potential clients searching for an all-in-one platform that protects all their credentials — from employees’ email passwords to core backend business systems.

While 1Password’s existing password-management toolset helps people securely access accounts without having to remember dozens of passwords, the “automation” facet of its new product name refers to machine-based system workflows that, for example, enable an application to securely “talk” to a database. “This means being able to roll secrets into your infrastructure directly from within 1Password,” chief product officer Akshay Bhargava told VentureBeat. “We are the first company encompassing human and machine secrets.”

Typically, infrastructure secrets can be splayed across countless cloud providers and services, but according to 1Password, it’s not uncommon for companies to cut corners or use a dubious combination of hacks and homegrown tools to manage the security around this issue.

According to Bhargava, 1Password was working on a secrets management solution before it acquired SecretHub. In fact, many of 1Password’s customers were already storing their infrastructure secrets in its vaults.

“Our customers have raised this workflow as something they’d like 1Password to solve,” Bhargava said. “It’s fair to say our first version is homegrown, and we’ve been focused on solving this problem for a while.”

Slack Passwordless Login

Secrets automation allows admins to define which people and services have access to secrets, as well as what level of access is granted. At launch, it integrates with HashiCorp Vault, Terraform, Kubernetes, and Ansible, with “more on the way.” However, 1Password is also announcing a deeper partnership with GitHub, which will see the duo collaborate to “solve problems for our shared customers and users,” according to Bhargava. “We plan to build a workflow to support customers in delivering secrets and configuration into their CI/CD pipelines on GitHub,” he said.

As for costs, all companies will receive three credits for free. The cost then rises to $29 per month for 25 credits, $99 for 100 credits, and $299 for 500 credits. “We prorate based on usage,” Bhargava added. “We will work with companies needing more than 500 credits a month on an individual basis.”

In terms of how credit is consumed, companies configure the 1Password vaults they want secrets automation to access and then stipulate the permissions for a development environment with tokens. “If an API client needs read and write access to data stored in a 1Password vault, that access is defined using a token,” Bhargava explained. “One token, accessing one vault, is what defines a credit. If that same API client needs to access two vaults, that then becomes two credits. And similarly, if a single token is created for read access to vault A and another for write access to vault B, that becomes two credits.”

VentureBeat

VentureBeat's mission is to be a digital town square for technical decision-makers to gain knowledge about transformative technology and transact.Our site delivers essential information on data technologies and strategies to guide you as you lead your organizations. We invite you to become a member of our community, to access:

• up-to-date information on the subjects of interest to you
• our newsletters
• gated thought-leader content and discounted access to our prized events, such as Transform 2021: Learn More
• networking features, and more

Become a member

StreetInsider.com Top Tickers, 4/26/2021

New deployments help administrators defend against Shadow IT, put powerful security tools at employees' fingertips

December 1, 2020 9:30 AM EST
Get instant alerts when news breaks on your stocks. Claim your 1-week free trial to StreetInsider Premiumhere.

TORONTO, Dec. 1, 2020 /PRNewswire/ -- Demonstrating that it continues to be an essential piece of the enterprise security playbook, 1Password is now the first security app integrated with Slack's new org-wide deployment. In addition, Rippling, which earlier this year announced an integration with 1Password is now offering its customers SCIM Bridge Auto-Hosting so they can get up and running on 1Password within minutes. Together, these enhancements make it easier than ever for IT departments to deploy the world's most loved enterprise password manager to secure the enterprise and defend against Shadow IT.

According to 1Password research, 89% of IT departments using a password manager say it's had a measurable impact on security at their company. However, this same research also found that employees are twice as likely to say that convenience is more important than security, and almost 50% are more likely to say strict password requirements aren't worth the hassle. Both of these integrations alleviate the concerns of employees and support security initiatives by enabling companies to deploy and manage 1Password more easily.

'Our integrations with Slack and Rippling align with our mission to make it as easy as possible to secure business at scale,' said Jeff Shiner, chief executive officer of 1Password. 'Both Slack and Rippling work seamlessly with cloud apps like 1Password, making it easy for businesses to stay productive and embrace security best practices.'

Slack Puts EPM at Workers' FingertipsSlack is the leading channel-based messaging platform, used by millions to align their teams, unify their systems, and drive their businesses forward. 1Password's Enterprise Password Manager (EPM) is the first enterprise security app to be included in Slack's new org-wide deployment, which provides a centralized way for Slack Enterprise Grid administrators to provide instant access to essential apps across an enterprise. Enterprise administrators often manage numerous requests for apps while troubleshooting complex installations across workspaces - a time-consuming effort that has gotten more complex and laborious during the work-from-home revolution. Slack's org-wide deployment enables administrators to easily and quickly install, manage and maintain those apps.

Slack Password Change

This integration also allows enterprises to proactively deploy 1Password on employee Slack workspaces, rather than wait for employees to do so.

Once enterprises have rolled out 1Password, they can access an overview of their team's activity with configurable notifications and alerts that can be sent to any Slack channel. Alerts will let them know when they might need to take action, like confirming new team members or approving pending account recoveries. Once an action is completed the alert message is automatically updated so everyone in the channel will know the alert has been resolved.

Rippling Accelerates 1Password EPM DeploymentAs part of its integration with 1Password, Rippling has upgraded to 1Password SCIM Bridge Auto-Hosting on its employee management platform. The 1Password SCIM bridge easily and securely automates provisioning of 1Password accounts, with the automated hosting solution enabling customers to deploy 1Password in less than 10 minutes. Provisioning at this speed reduces demands on busy IT departments, which are straining as a whopping 89% of employees have shifted into working from home according to 1Password research.

About 1Password1Password is the world's most-loved password manager. By combining industry-leading security and award-winning design, the company provides private, secure and user-friendly password management to businesses and consumers globally. 1Password's Enterprise Password Manager is trusted by more than 70,000 business customers, including IBM, Slack, PagerDuty, Dropbox, Gitlab and Roche. Learn more at 1Password.com.

Slack 1password Download

View original content to download multimedia:http://www.prnewswire.com/news-releases/1password-deepens-integrations-with-slack-and-rippling-to-speed-hassle-free-adoption-of--most-loved-enterprise-password-manager-301182680.html

SOURCE 1Password

Create E-mail Alert Related Categories

PRNewswire, Press Releases

Sign up for StreetInsider Free!

Slack 1password Extension

Receive full access to all new and archived articles, unlimited portfolio tracking, e-mail alerts, custom newswires and RSS feeds - and more!

Slack Password Recovery