1Password

1Password is the rare consumer security brand that has successfully carried its trust into the enterprise: the password manager millions of individuals already run is the wedge, and Extended Access Management (XAM) is the land-and-expand motion built on top of it. The insight is real — traditional IAM tools like Okta secure the managed devices and sanctioned apps IT knows about, but the modern breach vector is the unmanaged laptop, the personal device, and the shadow SaaS app employees adopt without approval, exactly the surface 1Password sees because employees already store credentials there. That gives it a distribution advantage no pure enterprise IAM vendor can replicate: bottoms-up adoption that converts into top-down contracts. The $620M Series C in January 2022 at roughly $6.8B, led by ICONIQ Growth and Tiger Global, capitalized the pivot, and the company reported reaching around $400M in ARR by late 2025 on strong retention and a passwordless/passkey tailwind that plays directly to its strengths. Its 2024 acquisition of Kolide gave it native device-trust posture-checking, the missing piece for the XAM story. As passkeys and phishing-resistant authentication go mainstream, the vendor that already owns the credential vault at the individual level is positioned to own the access layer at the company level — a durable franchise in a category enterprises must buy.

1Password's core business is a commoditizing one: password management is increasingly a free feature bundled into browsers (Chrome, Safari), operating systems (Apple Passwords, now a standalone app), and the very identity suites it hopes to sell against — Microsoft and Google give credential storage away, and the passwordless transition it champions structurally shrinks the reason a consumer pays for a vault at all. The Extended Access Management pitch is compelling but unproven at scale; it puts a beloved consumer brand into direct competition with Okta, CyberArk, Microsoft Entra, and a field of device-trust and ZTNA vendors that sell to CISOs through established enterprise channels 1Password is still building. The $6.8B mark was set in the 2022 zero-rate peak, and a roughly $400M ARR at that valuation implies a ~17x multiple that the 2025-2026 market no longer awards to a security-software company growing off a maturing base. No new primary round has been announced since 2022, which can read as discipline or as an inability to raise up. The company must prove that XAM is a genuine platform expansion and not a repackaging of the password manager — because if enterprises treat it as a nice-to-have vault rather than a control plane, 1Password is a great consumer product wearing an enterprise valuation.