Is 1password.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Why: Main reasons: domain registered 23+ years ago; not flagged by Google Safe Browsing; no impersonation patterns detected. Minor issues: page has no <title>; large response served uncompressed.
Positive highlights
- Domain registered 23+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Valid SSL / TLS certificate activeIssued by C=US, O=Amazon, CN=Amazon RSA 2048 M04, valid for 150 remaining days.
- Site responded with 200Final URL: https://1password.com/. Response time 80ms.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Fast response (80ms)
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
Negative highlights
- Page has no <title>Well-maintained sites always set a page title.
- Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.
Note: Registered via Tucows Domains Inc..
Note: 6 technologies detected. Next.js, Svelte, Tailwind CSS, Google Analytics, Cloudflare, Vercel
Key facts about 1password.com
- Website
- 1password.com
- Popularity
- Not checked
- Domain created
- Nov 30, 2003 (23.0 years old)
- Domain expires
- Mar 28, 2027
- Registrar
- Tucows Domains Inc.
- Owner details
- Public in WHOIS
- IP address
- 64.239.109.1
- Hosting / CDN
- Cloudflare
- SSL certificate
- Amazon · valid until Apr 12, 2027
- Email security
- SPF ✓ · DMARC ✓ (quarantine)
- Threat blocklists
- Not listed (clean)
- Technology
- Next.js, Svelte, Tailwind CSS, Google Analytics, Cloudflare, Vercel
Summary
99/100 — trusted. Long-established domain (23.0 years old), clean threat reputation, no impersonation patterns.
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
- Registrar Name
- Tucows Domains Inc.
- Creation Date
- November 30, 2003 (23.0 years ago)
- Last Updated
- December 5, 2017
- Registry Expiry Date
- March 28, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited, client update prohibited
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
age: 1350
cache-control: public, max-age=0, must-revalidate
cf-cache-status: DYNAMIC
cf-ray: a59edc2d9d07b86e-CMH
connection: close
content-security-policy: default-src 'none'; media-src 'self' https://videos.ctfassets.net:* https://assets.qualified.com https://js.qualified.com; script-src-elem 'self' 'nonce-d79ae435-9bcf-4a4d-b4b3-d416fb3e1890' https://transcend-cdn.com/cm/fa619274-3c15-4155-bbec-c0cb75733259/airgap.js https://transcend-cdn.com/cm/fa619274-3c15-4155-bbec-c0cb75733259/ui.js https://transcend-cdn.com/cm/fa619274-3c15-4155-bbec-c0cb75733259/xdi.js 'unsafe-hashes' 'sha256-cdFvGnPvdeavqCupE0X1iKxDb2jmBXXTGmE6AcHOk+c=' 'sha256-ep0lyBO1i+WpsX2W3CxFRXjI+Hxg1zdLj+K4nN4Yzdk=' 'sha256-4oZHWXlD1CxPvT8wgkm3WHUpJ/ywMPHPB88gaPqIWak=' 'sha256-013vXU/GPsW1pY4eYpRTI4yOUa7i0F3+gAeV8YiJeI8=' 'sha256-L+uPL9EFQ001JTBerq6Emgr+dGNFjYmEKsAiLjmZ8iU=' 'sha256-TS3QDaf5hBbxZ5c2CUOFJTHeI5BshT2SVba8ez1r6Rc=' 'sha256-wSGTrzhz6pfHVymBKpslj6dh0Yfw6FLQSU1tkScIdak='; script-src 'self' 'wasm-unsafe-eval' 'nonce-d79ae435-9bcf-4a4d-b4b3-d416fb3e1890' https://transcend-cdn.com/cm/fa619274-3c15-4155-bbec-c0cb75733259/airgap.js https://transcend-cdn.com/cm/fa619274-3c15-4155-bbec-c0cb75733259/ui.js https://transcend-cdn.com/cm/fa619274-3c15-4155-bbec-c0cb75733259/xdi.js; style-src 'self' 'nonce-d79ae435-9bcf-4a4d-b4b3-d416fb3e1890' https://transcend-cdn.com 'unsafe-hashes' 'sha256-oV3jdqk8GO/BUZSwos543OlGzhzxD3uMNE23EaxYMEQ=' 'sha256-/4tktfVAle+8ojynlFnhze1lbgwtFnndScvcHIucgqc=' 'sha256-zlqnbDt84zf1iSefLU/ImC54isoprH/MRiVZGskwexk=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-7JyL1A8Kywti3E1sWTTspFukJsEOqlNFJPIxVimWbAQ=' 'sha256-ctkCoEVA29++pFSHJTSibl/hZptNpNCnDIKVUoM0bkg='; style-src-elem 'self' 'nonce-d79ae435-9bcf-4a4d-b4b3-d416fb3e1890' https://transcend-cdn.com 'unsafe-hashes' 'sha256-oV3jdqk8GO/BUZSwos543OlGzhzxD3uMNE23EaxYMEQ=' 'sha256-/4tktfVAle+8ojynlFnhze1lbgwtFnndScvcHIucgqc=' 'sha256-zlqnbDt84zf1iSefLU/ImC54isoprH/MRiVZGskwexk=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-7JyL1A8Kywti3E1sWTTspFukJsEOqlNFJPIxVimWbAQ=' 'sha256-ctkCoEVA29++pFSHJTSibl/hZptNpNCnDIKVUoM0bkg='; style-src-attr 'unsafe-inline'; connect-src 'self' https://experience.ninetailed.co https://ingest.insights.ninetailed.co https://assets.ctfassets.net:* https://start.1password.com https://start.1password.ca https://start.1password.eu https://www.google-analytics.com https://us.app.unleash-hosted.com https://flow.1passwordservices.com https://integrations.1passwordservices.com https://telemetry.transcend.io/collect https://browser-intake-datadoghq.com https://sst.1passwordservices.com https://c.6sc.co https://ipv6.6sc.co https://b.6sc.co https://epsilon.6sense.com https://transcend-cdn.com https://1password.zendesk.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://www.facebook.com https://www.instagram.com https://pixel-config.reddit.com https://*.qualified.com wss://*.qualified.com https://googleads.g.doubleclick.net https://www.google.com; manifest-src 'self'; font-src 'self'; object-src 'self'; img-src 'self' blob: https://images.ctfassets.net:* https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://www.google-analytics.com https://sst.1passwordservices.com https://cm.g.doubleclick.net https://stats.g.doubleclick.net https://insight.adsrvr.org https://px.mountain.com https://b.6sc.co https://px.ads.linkedin.com/ https://px4.ads.linkedin.com/ https://www.facebook.com https://www.instagram.com https://alb.reddit.com https://messenger-assets.qualified.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com; child-src https://www.youtube-nocookie.com https://secure.livechatinc.com; frame-src https://www.youtube-nocookie.com https://www.youtube-nocookie.com/embed https://secure.livechatinc.com https://player.vimeo.com https://insight.adsrvr.org https://match.adsrvr.org https://sync-transcend-cdn.com https://www.figma.com https://app.getreprise.com/ https://player.simplecast.com https://integrations.1passwordservices.com; form-action 'self' https://start.1password.com https://flow.1passwordservices.com; frame-ancestors https://*.1passwordservices.com https://*.1password.com https://*.1password.ca https://*.1password.eu https://main.1pstage.com; report-uri https://csp.1passwordservices.com/report?tags=1pw_prd; report-to csp-endpoint
content-type: text/html; charset=utf-8
date: Fri, 13 Nov 2026 15:37:51 GMT
etag: W/"wzrzy80see3rzu"
referrer-policy: no-referrer-when-downgrade
report-to: {"endpoints":[{"https://csp.1passwordservices.com/report?tags=1pw_prd"}],"group":"csp-endpoint","max_age":604800}
reporting-endpoints: csp-endpoint="https://csp.1passwordservices.com/report?tags=1pw_prd"
server: cloudflare
set-cookie: _ct=y; Path=/; Expires=Fri, 13 Nov 2026 16:37:51 GMT
strict-transport-security: max-age=31536000; includeSubdomains; preload
transfer-encoding: chunked
vary: accept-encoding
x-content-type-options: nosniff
x-matched-path: /[[...slug]]
x-powered-by: Next.js
x-vercel-cache: HIT
x-vercel-id: cle1::iad1::k7gqg-1794584271018-2d8c65253a36DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
- IPv4 Addresses (A)
- 64.239.109.1
- IPv6 Addresses (AAAA)
- None
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), aspmx2.googlemail.com (Priority: 10), aspmx3.googlemail.com (Priority: 10)
- Authoritative Nameservers (NS)
- ns-109.awsdns-13.com, ns-1527.awsdns-62.org, ns-1850.awsdns-39.co.uk, ns-671.awsdns-19.net
- TXT Records Found
- 13 TXT verification records
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
- Registrable Domain
- 1password.com
- Registrar Organization
- Tucows Domains Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited, client update prohibited
- Delegated Authoritative Nameservers
- ns-109.awsdns-13.com, ns-1527.awsdns-62.org, ns-1850.awsdns-39.co.uk, ns-671.awsdns-19.net
- Registration Lifecycle
- Registered: 2003 → Expires: 2027
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
- SPF Record
- v=spf1 include:_spf.google.com include:_spf.qualtrics.com include:_spf.sendergen.com include:amazonses.com include:mail.zendesk.com include:md02.com include:stspg-customer.com ~all
- DMARC Policy Mode
- Policy: QUARANTINE
- DMARC Raw Record
- v=DMARC1; p=quarantine; sp=reject; rua=mailto:dmarc-reports@1password.com; ruf=mailto:dmarc-reports@1password.com; rf=afrf; adkim=r; aspf=r; pct=100; ri=86400;fo=1;
- DKIM Selectors Detected
- google, s1, s2
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
- Root Domain Label
- 1password
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
- HTML Title
- —
- Meta Description
- Protect passwords and secrets, manage app access, and secure AI tools with 1Password. Easy to adopt from growing teams to enterprise.
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1, maximum-scale=5.0, user-scalable=yes
- Generator Software
- —
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
- HTTP Response Time
- 80 ms
- Payload Body Size
- 172.2 KB
- Compression Status
- Uncompressed
- Cache Directives
- public, max-age=0, must-revalidate
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
99/100 — trusted. Long-established domain (23.0 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 23+ years ago; not flagged by Google Safe Browsing; no impersonation patterns detected. Minor issues: page has no <title>; large response served uncompressed.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 3,442 characters verified
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 64.239.109.1
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://1password.com/
- Redirect Hop Count
- 0 hops
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
- Certificate Authority (Issuer)
- C=US, O=Amazon, CN=Amazon RSA 2048 M04
- Subject Common Name (CN)
- support.1password.com
- Validity Period
- 150 days remaining (Expires: 2027-04-12T23:59:59)
- Subject Alternative Names (SANs)
- 40 domains protected
- Certificates Logged (CT)
- 1473 certs recorded
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
- Published Contact Emails
- privacy@1password.com
- Published Phone Numbers
- 1511601750, 55585418645, 2026-01-29, 2964-23998, 5916143774442, 5519-3483
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://1password.com/sitemap.xml
- Disallow Rules Count
- 2 rules
View Raw robots.txt
User-agent: * Disallow: /en/site-monitoring-pages.xml Disallow: /files/1password-white-paper.pdf sitemap: https://1password.com/sitemap.xml
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
User reviews of 1password.com
No reviews yet. Be the first to share your experience.