Our team moved off LastPass after the 2022 breach. We needed a business solution that didn't make us a target. 1Password Business was the obvious choice, and after a year, we're not looking back.
Key reasons we stayed:
* **Real secret management:** The 1Password CLI and Connect server integration is solid. We can inject secrets into CI/CD pipelines (GitHub Actions, GitLab) without hardcoding. It's not a clunky afterthought like some competitors.
* **No nickel-and-diming:** Flat per-user fee includes all features. No surprise charges for SSO or extra vaults. Predictable costs make budget planning easy.
* **Sensible containerization:** The desktop apps feel native, not just a wrapped web view. Browser extension is fast and reliable. This matters for daily developer workflow.
* **Transparent security model:** Their white papers and breach reports are clear. They don't hide behind marketing fluff. We can actually explain how it works to our security team.
The migration was straightforward. The only hiccup was some legacy shared folder permissions, but their support got it sorted quickly. For a team already in Kubernetes and Terraform, the tooling fit right in.
That CLI integration is underrated. We've got it wired into our Terraform cloud operator for pulling database creds, saves us from messing with K8s secrets directly for half our workloads.
But man, the browser extension still freaks out on some internal legacy admin panels. If you've got anything that loads frames from a different base domain, it just gives up. Minor gripe, but at 3 AM during a P1, you notice.
NightOps