1Password

Password reset guide · Work & Tools

How to reset your 1Password password

Q: What is 1Password's password reset page?

https://start.1password.com/recover/request. Go there directly rather than through a link in an email, since reset pages are widely impersonated.

Do it by hand with the steps below, checked against 1Password's own documentation. Or connect Gmail once and Repass runs the same flow for you and seals the new password in your vault.

Reset 1Password for Me Show manual steps

~2 minutes · email recovery · 3-day free trial

At a glance

1Password password reset, in one table

Verified facts about resetting a 1Password password
Reset by email	Yes
Reset by phone	No
Old password required	No
What the email contains	a reset code
Works with Repass	Yes

Checked against 1Password's own documentation. Sources.

The manual way

Reset your 1Password password in 5 steps

Open 1Password's password reset page
Go straight to start.1password.com/recover/request. This is the same place the “Forgot password?” link on the sign-in screen sends you, so starting here saves a step and, more importantly, means you are typing your details into 1Password's own domain rather than whatever a search result offered you.

That matters more than it sounds. Password reset pages are the single most impersonated page on the internet, because a convincing copy collects exactly what an attacker needs. Check the address bar reads start.1password.com/recover/request before you type anything.
Enter the email or phone number on the account
Type the email address or the username the account uses. If you are not certain which address that is, search every inbox you own for old mail from 1password.eu: receipts, sign-in alerts, notification digests. The inbox holding those is the account email, whatever you assumed it was.

This is where most resets quietly fail. People request a reset for the address they use today, get nothing, and conclude the account is gone, when in fact the reset went to an address they stopped checking years ago.
Enter the verification code
1Password sends a verification code. Type it on the reset page to prove the request came from you.

Codes expire quickly, usually within minutes. If yours is rejected, request a fresh one rather than retyping the old one, and check you are not reading a code from an earlier attempt still sitting further up the inbox.
Choose a strong new password
Use 16 or more random characters, and never one you have used anywhere else. A reused password turns one company's breach into a break-in everywhere you reused it.
Store it somewhere sealed
Save it in a password manager or encrypted vault. Not a note, not a screenshot, and not “the usual one with a 2 on the end”, which is the same password as far as anyone attacking it is concerned.

The Repass way

Watch Repass reset 1Password.

Finding your 1Password account
Opening password recovery
Waiting for the reset email
Reset email found
Generating a 20-character password
Sealing it in your vault

You never give Repass your current 1Password password. It uses 1Password's ordinary account-recovery process to replace it, the same flow you would click through yourself.

An illustration of the agent's phases. Timings shown are not measured.

Get Started

Pick a route

Which 1Password recovery method should you use?

Start with what you still have access to, not with what you would prefer. Every route below verifies you through a contact method already on the account, which is why the answer is decided before you begin.

Still signed in somewhere?

Then change the password in settings instead. You will not need any of this.

You can still open the email on the account

Use the email reset. 1Password sends a code there and you are done in a couple of minutes. This is also the only route Repass can drive for you.

You have neither any more

This stops being a password problem and becomes an account-recovery one. Recover the email account or the phone number first.

When it goes wrong

Trouble resetting 1Password?

1Password cannot reset forgotten account password - recovery via email only

Because vaults are encrypted on your devices and 1Password's servers never see the keys, those servers cannot reset your password. "No one can reset your password." Account recovery requires access to the email address associated with your account to verify identity and request a recovery code or family/team administrator recovery. Source

Recovery code is essential for individual and family accounts without family organizer

For individual and family accounts without a family organizer, a pre-generated recovery code is the only means to regain access if you forget your password. Recovery codes are optional but critical for account security and recovery options. Source

Recovery process requires new Secret Key and password creation

When you recover your account through any method (recovery code, family organizer, or administrator), you receive a new Secret Key and must create a new account password. You must re-sign in on all devices after recovery is complete. Source

Two-factor authentication persists after recovery via recovery code

If you previously enabled 2FA, it will remain turned on after recovery via recovery code. However, recovery initiated by family or team administrators resets 2FA. Source

The reset email never arrived

Check spam and promotions, confirm the address you entered is the one the account uses, then request one more. Repeated requests can rate-limit you, so wait a few minutes between attempts rather than hammering the button.

Your phone number changed

Use the email route instead, as long as that inbox is still yours. Update the number as soon as you are back in, or the next reset has the same problem.

You think someone else is in the account

Reset first, then change the same password everywhere else you used it.

There is no password to reset

If you originally signed up with Google, Apple or Facebook, the account has no password of its own. Sign in the way you did the first time.

After the reset

Your password was not the only thing to fix.

1Check the recovery email on the account

The next reset goes to whatever address is on file today. If that is an inbox you no longer open, you are one forgotten password away from being locked out for good.

2Check the recovery phone number

Same reasoning. An old number is worse than no number, because it can end up reassigned to a stranger.

3Change it anywhere you reused it

If this password was used elsewhere, those accounts are as exposed as this one was. That is the job Repass exists to do in bulk.

Context

Why are you resetting your 1Password password?

I just forgot it

The ordinary case, and what the steps above are for. Nothing is wrong with the account.

I think someone else knows it

Reset it, then change the same password anywhere else you used it, since that is usually how they got it.

I reused it somewhere else

Change it here and everywhere else. Until you do, the weakest site holding that password decides the security of all of them.

It showed up in a breach

Rotate it even if 1Password was never breached. Passwords travel between sites in your head, not in theirs.

I have not changed it in years

Age alone is not a reason. Being reused, guessable or exposed is. Unique and random can be left alone.

Side by side

Repass, or 1Password by hand

Step	Repass	By hand
Find the right account	Automatic	You
Open the reset flow	Automatic	You
Search the inbox	Automatic	You
Open the reset link	Automatic	You
Generate a strong password	Automatic	You
Save it somewhere safe	Automatic	You
CAPTCHA	You approve	You
Texted code	You approve	You
Repeat for 50 accounts	Automatic	An afternoon

Get Started

Straight from the source

Official 1Password password and account links

Every fact on this page was checked against these pages. If 1Password changes something, they are right and we are stale, so go to them first.

Questions

1Password password reset FAQ

How do I reset my 1Password password?

Open start.1password.com/recover/request, enter the email on the account, type the code you are sent, and set a new password. It usually takes a couple of minutes.

What is 1Password's password reset page?

start.1password.com/recover/request. Go there directly rather than through a link in an email, since reset pages are widely impersonated.

Can I reset my 1Password password using email?

Yes. 1Password sends a reset code to the email address on the account.

Can I reset my 1Password password using my phone number?

1Password's documentation does not describe a phone-based password reset.

Can I reset my 1Password password without knowing the old one?

Yes. The reset flow exists for exactly that case: it verifies you through the email or phone number on the account instead of through the password you have forgotten.

Why isn't my 1Password reset email arriving?

Check spam and promotions first, then check whether you requested the reset for the address the account actually uses. Most “no email” cases are a reset sent correctly to an inbox the person no longer opens. Searching your inboxes for older mail from 1password.eu tells you which account is the real one.

What should I do if my 1Password account was hacked?

Reset the password immediately. Then change it anywhere else you used the same password, because that is usually how they got in.

Can Repass reset my 1Password password for me?

Yes. Connect Gmail once and Repass walks 1Password's forgot-password flow itself: it requests the reset, reads only its own reset email, sets a strong 20-character password and seals it in your vault. If 1Password asks for a CAPTCHA or a texted code, Repass stops, shows you the page, and asks you for that one step.

Does Repass need to know my current 1Password password?

No, and it never asks for one. Repass uses 1Password's ordinary account-recovery flow to replace the password, which is why it works on accounts whose password you have already forgotten.

Is it safe to let software reset my 1Password password?

Repass generates and encrypts passwords on your own device, and the model that drives the reset is never shown a password, a reset link or a verification code. Those stay local to your browser. Repass does hold a key that can unwrap your vault, so that signing in is enough to open it on any device; you can revoke that key, after which your master password is the only way in.

Beyond 1Password