Your business runs on credentials IT did not provision

Right now, in one of your employee's personal vaults, there's a login for a vendor portal your team has been using for three years. Whoever set it up no longer works at the company. The password has never been rotated. And until today, you didn't know it existed.

That credential was created outside your systems, became essential to a business workflow, and went invisible. Every organization has hundreds like it: break-glass accounts copied into multiple vaults as a precaution, contractor logins that outlasted the contract, apps that don't support SAML so someone signed up and shared the password in Slack. Nobody in IT provisioned any of them, and all of them grant access to real systems.

These are your highest-risk credentials: unrotated, unaccountable, and largely invisible. Attackers go after exactly these accounts: the ones with no rotation schedule, no owner, and no audit history. And credentials are the way in: 88% of attacks against web applications involve stolen credentials, according to Verizon's Data Breach Investigations Report (2025). Every unmanaged credential expands your organization's attack surface.

These credentials persist because the alternatives are hard. The SSO tax makes federation too costly for some apps. Others simply don't support SAML or OIDC. So the credentials keep accumulating, untracked and unrotated, while auditors ask for evidence you can't produce.

Credential Governance gives admins a repeatable way to find those accounts, take ownership of them, and govern access over time, all inside 1Password Enterprise Password Manager.

How Credential Governance works

Credential Governance gives IT and security admins a repeatable workflow to discover unmanaged credentials, reclaim them as company-managed credentials, and govern access over time.

• Discover: Build a complete inventory of unmanaged credentials. 1Password finds Login items across all employee and shared vaults and filters by domain to surface company-owned accounts. With every…