Phishing

Phishing is one of the most common online threats. These scams impersonate trusted services — sometimes even 1Password — to trick you into revealing sensitive information or installing malicious software (malware) on your device.

This guide explains how phishing works, how to recognize it, and what to do if you think you’ve been targeted.

What is phishing?

Phishing is a form of social engineering where attackers pose as a trusted contact or legitimate company. The goal is to steal things like your passwords, account credentials, or payment information, or to trick you into installing malware on your device. Phishing messages often create a false sense of urgency so you’ll act without thinking.

They usually arrive by email, but may also come through text messages, calls, or social media.

How to spot a phishing attempt

Phishing messages often:

• Claim there’s been suspicious activity on your account.
• Ask you to “verify” or “secure” your information.
• Use urgent, threatening, or alarming language.
• Contain links that look real but lead to fake websites.
• Claim you owe money on an invoice or account.

ℹ️ Tip:
Hover over links before clicking to reveal where they actually point. If they don’t lead to a reputable domain, don’t click.

What to do if you receive a suspicious message

If you think a message might be a phishing attempt:

• Don’t click any links or buttons, or download attachments.
• Don’t reply or provide any information.
• Report it as phishing/spam.

ℹ️ Tip:
Many email providers and messaging platforms offer ways to report fraudulent messages. Reporting phishing attempts helps make the internet a little safer for everyone.

How to validate emails from 1Password

If you’re not sure whether an email came from 1Password, take a close look at the sender’s email address. 1Password only sends emails from addresses with specific domains. If the sender’s address doesn’t match one of these domains, it may be fraudulent: