A friend of mine had her freelance business email hacked last year. Nothing dramatic, just a brute-force attack on a password she’d used since university. In the time it took to notice and regain access, three clients had received emails from “her” asking to change payment details. Two of them almost complied. The damage wasn’t the hack. It was what almost happened after it.

The Password Problem Nobody Takes Seriously Until It’s Too Late

Here’s what cybersecurity professionals will tell you, and what most people ignore until something goes wrong: the biggest security vulnerability for most individuals and small businesses isn’t sophisticated hacking. It’s reused, weak, or stolen passwords.

81% of data breaches involve stolen or weak credentials. Not social engineering, not zero-day exploits, just someone using a password that appeared in a previous breach and working through accounts until something opens.

The uncomfortable maths: if you’ve been online since before 2018, your email address has almost certainly appeared in at least one data breach. If the password attached to that breach is one you still use, or a variation of one you still use, you have an open door that you’re probably not aware of.

A password manager closes that door. Not partially, completely.

What 1Password Actually Does

1Password generates a unique, genuinely random password for every account you have, long, complex, impossible to guess, and impossible to remember. Which is fine, because you don’t have to remember any of them. 1Password remembers them all and autofills them when you need them.

You remember one password. Your 1Password master password. Everything else is handled.

What this means in practice: every account you own has a different password. None of those passwords are based on anything guessable. If one site gets breached, only that site’s account is exposed, the rest are untouched. You stop wasting time hunting for “wait, which password did I use for this?” You get alerts if any of your accounts appear in a breach database.

The security improvement is significant. The day-to-day friction disappears. And for anyone running an online business, with clients, payment systems, email marketing tools, hosting accounts, the idea of all of that being protected by variations of “password2014!” should feel genuinely frightening.

Try 1Password free for 14 days →

Why 1Password Specifically

Several good password managers exist. Here’s why 1Password is the one worth recommending:

Zero-knowledge architecture. 1Password cannot see your passwords. Even if 1Password’s servers were breached, your data would be encrypted in a way they cannot decrypt. Your passwords exist only in decrypted form on your own devices.

The Secret Key. 1Password uses a two-layer system, your master password plus a unique Secret Key generated on your device. Even if someone got your master password, they’d still need your Secret Key to access your vault. This is a meaningful security advantage over most competitors.

Cross-platform. iPhone, Android, Windows, Mac, Chrome, Safari, Firefox, Edge, 1Password works everywhere, autofills seamlessly, and syncs across all your devices instantly.

Business features. For freelancers and solopreneurs who occasionally share access with a team member or contractor, 1Password’s sharing features let you share specific credentials without sharing your entire vault, and without ever sending a password via email or Slack.

Travel Mode. You can hide sensitive vaults when crossing borders, then restore them afterwards. Niche, but worth knowing about if you travel internationally for work.

The Pricing

Individual: $2.99/month (billed annually), 1 user, unlimited passwords, all devices
Families: $4.99/month for up to 5 users, best value if you’re covering a household
Business: $7.99/user/month, team sharing, admin controls, activity logs

14-day free trial, no credit card required. The individual plan works out at $36/year, less than the cost of recovering from one compromised account.

The affiliate programme pays 25% recurring commission on every referral. Password managers have some of the highest retention rates in software, once someone’s vault has hundreds of passwords in it, they are not switching tools. That makes 1Password referrals some of the most durable recurring commissions available.

Start your 14-day free trial here →

Who Should Read No Further and Just Sign Up

You run any kind of online business, hosting, email tools, client portals, payment systems, social accounts. These are targets. Protect them like targets.

You work remotely and your laptop is your office. One compromised password on a public network = one compromised business.

You’ve ever typed your email into “haveibeenpwned.com” and not liked what came back. (If you haven’t, do it now. Then come back here.)

You have team members or contractors who occasionally need access to business accounts. Sharing passwords via WhatsApp message is not a security strategy.

The Bottom Line

“I’ll just remember it” is not a password strategy. It’s a waiting game with a predictable end. 1Password costs $36 a year. The alternative, one hacked account, one invoice fraud attempt, one locked-out client portal, costs significantly more than that in time, money, and the particular flavour of panic that only comes from realizing someone else has access to your business.

Set it up this week. Future you will not regret it.

Try 1Password free for 14 days, no credit card →

This post contains affiliate links. I earn a commission if you sign up through them, at no extra cost to you.