Book a demo
Products

One platform for every sign-in your workforce makes.

My1Login brings single sign-on, enterprise password management, multi-factor authentication and user provisioning together, connected to your directory and run by IT. Use the parts you need: they share one sign-in, one set of policies and one audit trail.

Book a 5-minute demoSee pricing

Products

  1. 01

    Enterprise password manager

    Stores, creates and fills in passwords for every work app, and hides them from your workforce, so there's nothing to reuse or phish.

    • Hidden passwords
    • Password sharing
    • Policies on external apps
    • Audit trail
    Learn more →
  2. 02

    Single sign-on for web

    One sign-in for web, cloud and mobile apps, including the ones that don't support SAML, with the iOS and Android mobile app included.

    • SAML and OpenID Connect
    • Password-only apps
    • Mobile app
    • App discovery
    Learn more →
  3. 03

    Single sign-on for desktopAdd-on

    Extends single sign-on for web to Windows desktop apps: legacy executables, Remote Desktop programs, Citrix and mainframe emulators.

    • Desktop agent
    • App templates
    • Windows 10 and later
    • No APIs needed
    Learn more →
  4. 04

    MFA and one-time codesAdd-on

    A second factor where your policy says, using authenticator apps and the biometrics on people's phones, and authenticator codes filled in automatically.

    • Step-up policies
    • Authenticator apps and biometrics
    • Code auto-fill
    Learn more →
  5. 05

    User provisioningAdd-on

    Give people access to the apps they need when they join, and remove it when they leave, straight from your directory.

    • Joiners and leavers
    • Directory sync
    • App accounts
    Learn more →
  6. 06

    App catalogue

    20,000+ apps ready to connect, from SAML cloud apps to password-only portals and old desktop software, and a way in for the rest.

    • 20,000+ apps
    • Every kind of sign-in
    • Bespoke apps too
    Check your apps →

One lifecycle, from the first app to the last day.

Every product covers part of the same journey, so the pieces fit together without gaps. IT sets the rules at every step, and your workforce just finds itself signed in.

  1. ConnectedDirectory sync and Zero Login
  2. DiscoveredNew and unknown apps found
  3. CreatedStrong passwords to your policy
  4. SharedAccess without the password
  5. Signed inWeb, mobile and desktop, codes included
  6. LoggedEvery access in one audit trail
  7. RevokedLeavers lose every sign-in at once

Not sure where to start?

Start with the problem you want to solve. Each product works on its own and adds to the others.

Built into every product.

Whichever products you choose, these come with them.

  • Zero Login

    Signing in to Active Directory or Microsoft Entra ID signs people in to My1Login automatically.

  • Zero UI

    Nothing for your workforce to learn. My1Login can run entirely in the background.

  • Zero-knowledge encryption

    The keys stay inside your network, so nobody outside it can read your passwords, including us.

  • One audit trail

    Every access to every app, web or desktop, in one log, with ready-made and custom reports.

  • Policies that know context

    Rules by user, group, app, location and network, on or off your premises.

  • Hidden passwords

    Passwords filled in at sign-in and never seen, so there's nothing to phish or take away.

  • Your choice of coverage

    IT can choose the apps for everyone, let people add their own, or do both.

  • 100% adoption, guaranteed

    With Zero Login deployed, every provisioned user is covered. How the guarantee works

Zero-knowledge encryption

We can't read your passwords. Nobody outside your organisation can.

The keys that unlock your stored passwords are only available inside your organisation's own network. What My1Login stores is encrypted and unreadable to anyone outside it, and that includes us.

Where the encryption keys are kept Your organisation's network holds the encryption keys and your workforce's sign-ins. Only encrypted passwords travel to and are stored in the My1Login service, which has no keys and cannot read them. YOUR ORGANISATION'S NETWORK Encryption keys Only ever here Your workforce Signed in to their apps encrypted MY1LOGIN SERVICE Encrypted passwords No keys here, so nobody at My1Login can read them

Independently recognised

  • KuppingerCole Leadership Compass 2025My1Login featured in the Privileged Access Management report
  • SC Awards Europe 2025, winnerBest Identity and Access Management Solution
  • Cyber Essentials PlusCertified. Penetration tested by CREST-approved testers: rated A+ and suitable for use in defence
Trust centreSecurity overview (PDF)

Choosing an identity platform

Questions about the platform

Can we buy the products separately?

Single sign-on (for SAML and OpenID Connect apps) and the enterprise password manager can be bought separately, but we generally recommend them together. The enterprise password manager uses password vaulting and forwarding single sign-on to sign people in, so the two work as one. Single sign-on for desktop, MFA and one-time codes, and user provisioning are optional add-ons.

Does it replace Microsoft Entra ID?

No. My1Login works alongside Microsoft Entra ID. Entra ID remains your directory: people sign in to it as normal and Zero Login signs them in to My1Login. My1Login then extends single sign-on to the apps Entra ID can't reach, such as password-only web apps, apps that ask for one-time codes and Windows desktop apps. It can also handle your SAML and OpenID Connect apps itself, so every app can sit under one set of policies and one audit trail.

Who decides which apps are covered?

You do. IT can choose the apps that are covered for everyone, let people add their own apps and logins, or combine the two. For example, IT can set up the core business apps while people add the other work apps they use.

Can My1Login see our passwords?

No. With zero-knowledge encryption the keys are only available inside your organisation's network, so nobody outside it can read your stored passwords, including My1Login.

What does the adoption guarantee cover?

Adoption is guaranteed wherever the zero-login configuration has been deployed. Every provisioned user who signs in to your corporate directory, such as Microsoft Entra ID or Active Directory, during the contract term counts as adopted. Signing in to the directory signs them in to My1Login automatically, so your workforce doesn't have to enrol in or open My1Login.

How much does it cost?

Our pricing page has current prices and plans. See pricing

Not sure which parts you need? Ask us in a 5-minute demo.

Tell us about your apps and your directory, and we'll show you the products that fit, and what your workforce will notice, which is nothing.

  • 5 minutes, on your own apps
  • A specialist replies within one working day
  • No obligation
Book a 5-minute demoStart a 14-day free trialThe full product, on your own apps.
Book a 5-minute demoFree trial