1Password can do more than store passwords: it can also generate and autofill one-time codes for two-factor authentication.
This guide explains how to set up 1Password authenticator, where it works best, and what to do when a site or app does not cooperate.
What 1Password Authenticator Does
1Password’s authenticator feature stores time-based one-time passwords, or TOTP codes, alongside your login details.
Instead of using a separate app for every account, you keep your password and verification code in one encrypted vault.
This is useful because it reduces app switching, speeds up sign-ins, and keeps recovery simpler when you change devices.
It is also a strong fit for people who use 1Password across Apple, Windows, Android, Linux, and browser extensions.
Before You Start
To set up 1Password authenticator, make sure you have:
- A 1Password account with the app installed on your device
- An account or service that supports two-factor authentication with an authenticator app
- Access to the website or app where you are enabling 2FA
- Your 1Password account password and Secret Key, if required for sign-in
It helps to decide whether you want 1Password to be your primary authenticator or only a backup.
If you already use Google Authenticator, Authy, Microsoft Authenticator, or a hardware security key such as a YubiKey, you can still add 1Password to selected accounts.
How to Set Up 1Password Authenticator
The exact buttons vary by website, but the setup flow is usually the same.
You enable two-factor authentication on the service, then scan or enter the shared secret into 1Password.
Step 1: Open the account security settings
Sign in to the website or app you want to protect.
Find the security, privacy, login, or account settings area, then locate the section for two-factor authentication, MFA, or authenticator apps.
Step 2: Choose an authenticator app option
Select the method that says authenticator app, time-based codes, or TOTP.
Many services will display a QR code and a manual setup key.
Keep this page open until you finish the next step.
Step 3: Add the code to 1Password
In 1Password, open the login item for that account or create a new one if it does not exist yet.
Look for the option to set up one-time password or verification code, then either scan the QR code with your device or paste the setup key manually.
On desktop, browser extensions, and mobile apps, 1Password usually offers a way to add the one-time password field directly to the item.
Once saved, the app begins generating six-digit codes that refresh every 30 seconds.
Step 4: Verify the code
Return to the website or app and enter the current code from 1Password.
If the code is accepted, save the setup and, if prompted, confirm recovery codes or backup methods.
Step 5: Store recovery information safely
Many services provide backup codes after 2FA is enabled.
Save these in 1Password as well, ideally in the same login item notes or in a secure document field.
Recovery codes are important if you lose access to your devices.
How 1Password Handles One-Time Passwords
1Password uses the same standard most authenticator apps use: TOTP, or time-based one-time passwords.
The generated code depends on a shared secret and the current time, which is why the code changes frequently and expires quickly.
Because the code lives in the same encrypted vault as your password, you can autofill both credentials on supported devices.
This can make sign-in faster without removing the protection offered by two-factor authentication.
- Codes are stored encrypted in your vault
- Most codes refresh every 30 seconds
- Autofill support is available in many browsers and apps
- Vault syncing keeps codes available on connected devices
Where 1Password Authenticator Works Best
1Password works especially well for personal accounts, freelance workflows, small businesses, and people who need a clean login process across multiple devices.
It is also useful when you want fewer apps to manage.
Common services that support authenticator app setup include:
- Email providers such as Gmail and Outlook
- Cloud platforms such as Dropbox and Microsoft 365
- Financial services that support TOTP-based 2FA
- Developer tools such as GitHub, GitLab, and cloud consoles
- Social platforms and shopping accounts that offer authenticator app verification
Some services, especially banks and regulated financial institutions, may prefer SMS, push approval, in-app confirmation, or hardware keys instead of standard TOTP codes.
In those cases, 1Password may not be supported as the primary method.
Common Problems and Fixes
The QR code will not scan
Try increasing your screen brightness, zooming the page, or entering the setup key manually.
On desktop, manual entry is often the fastest workaround.
The code is rejected
Make sure your device time is set automatically.
TOTP depends on accurate time synchronization, so incorrect clock settings can cause valid codes to fail.
You cannot find the one-time password field in 1Password
Update the app or browser extension, then open the login item again.
If the account entry was created without a code field, you may need to edit the item and add one manually.
You already set up 2FA somewhere else
If a service already has an authenticator registered, adding 1Password may require disabling the old method first or adding a second authenticator.
Be careful not to lock yourself out before confirming a backup method.
Security Best Practices
Using 1Password as an authenticator is secure, but strong setup habits matter.
Treat your vault as the central place for passwords, codes, and recovery data, and protect access to the vault itself.
- Use a strong 1Password account password
- Keep your Secret Key available in a secure location
- Enable 1Password on multiple trusted devices if possible
- Save backup codes for every critical account
- Consider a hardware security key for high-risk accounts
If you share a family or team vault, limit access to only the people who need each account.
For business environments, combine 1Password with role-based access controls, audit-friendly account policies, and device management.
Should You Use 1Password as Your Only Authenticator?
For many people, the answer is yes for convenience, but not always for risk management.
A separate authenticator app or a hardware security key can be a useful backup if your primary device is lost or your vault access is interrupted.
A balanced approach is to use 1Password for most accounts, then reserve hardware-based authentication for critical services such as primary email, financial platforms, and account recovery portals.
That way you keep the workflow simple without relying on one method for everything.
What to Check After Setup
After you finish setup, sign out and sign back in to confirm the code works end to end.
Also verify that 1Password syncs the item to your other devices and that the login entry is complete with the website, username, password, one-time code, and backup details.
If you manage many accounts, naming items consistently helps.
Use recognizable labels for the service, account type, and any notes about recovery or special login requirements.
This makes it much easier to find the correct code when you need it quickly.