Skip to content

Bug bounty program · HackerOne

1Password - Enterprise Password Manager

Open on HackerOne See this on the Atlas

Yespays bounties

4assets in scope

2disclosed reports

Most upvoted reports2

#3042984Informative#**CSV Injection in shared passwords leads to complete Private Vault Exfiltration**1Password - Enterprise Password Manager · Injection and Smuggling · 2025 · None–75votes
#2923061N/AAPI Key Exposed in JavaScript File on 1Password Developer Site1Password - Enterprise Password Manager · Information Disclosure · 2025 · None–62votes

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.