● 1Password Enterprise — Magasin du Nord Employee Onboarding

Welcome to 1Password.
Let's get you set up.

Magasin already connected 1Password to single sign-on (your PC password), so getting started takes minutes — no new password to memorize. This guide walks you through everything, step by step.

🔐 Sign in with company SSO 📱 Works on every device 🎁 Free family plan included

✅ Quick-start checklist

Keep this page open — check items off as you go by clicking them. Most people finish in around 55 minutes, but can take longer, depending on how many logins you have. This guide is not necessarily meant to be completed in one sitting. It is meant to be here for you to revisit as needed.

Auto-check while scrolling When on, tasks are checked off as you reach the end of each section
🎉 All done — you've completed every onboarding step. Nice work!
1
Getting in

Accept your invitation and sign in with SSO

IT has already connected 1Password to Magasin Du Nord's identity provider (Microsoft Entra ID). That means you'll sign in with the same username and password you already use for your PC, email and other work apps — not a new password to remember.

Step-by-step

  1. Look for an email from 1Password titled something like "You've been invited to join Magasin Du Nord on 1Password."
  2. Open the email and select Create Account or Sign In.
  3. Enter your work email address when prompted.
  4. You'll be redirected to Magasin Du Nord's sign-in page. Select Sign in with SSO with Microsoft and enter your usual work credentials.
  5. If you're already signed in to your identity provider elsewhere on your device, this step may complete automatically with no typing at all.
Sign in to Magasin Du Nord
Use your work email to continue
employeenumber@magasin.dk
Illustrative example — Magasin Du Nord's logo and name will appear here.

If it asks for an account password and Secret Key instead

Occasionally, if you're accepting the invite right after IT sets things up, 1Password may briefly show the old-style sign-in screen (asking for an account password and a Secret Key) instead of the SSO button.

!
Important — don't panic, just wait This is normal and simply means the connection between 1Password and your identity provider hasn't fully activated yet. Wait about 30 minutes, then reopen the invitation link. You should now see the "Sign in with Microsoft SSO" button instead. You do not need a Secret Key when SSO is set up correctly — don't try to generate or save one.
Pro tip Accept your invitation in a normal browser window, not an incognito or private one. Private windows can interrupt the sign-in handshake and temporarily lock you out, requiring IT to step in.
2
Get the apps

Download and install 1Password everywhere you work

1Password works best when it's installed on every device and browser you use — that's what makes autofill and password saving feel effortless.

Desktop apps

The badge shows which download matches the computer you're on right now.

Mobile apps

Browser extensions

Each button below links straight to that browser's own official store. The badge shows which one matches the browser you're using right now.

Important — official sources only Always install 1Password from the 1Password Download Page, the Apple App Store, or the Google Play Store — never from a third-party download site, a random search result ad, or a link in an unsolicited email or text. Look-alike "password manager" apps and fake extensions are a common phishing tactic. When in doubt, ask IT before installing.
Pro tip Install the browser extension for every browser you actually use — even a secondary one. 1Password can't autofill or offer to save logins in a browser where the extension isn't installed.
3
Connect everything

Sign in to each app and extension with SSO

Once 1Password is installed, open it and sign in the same way you did in Step 1 — with your company SSO. The first app or browser you sign into becomes your "linked" device, which you'll use to approve any new ones.

Adding a new device after your first sign-in

  1. Open 1Password on the new device and select Sign In.
  2. Enter your work email and sign in with your identity provider again.
  3. On your original device (the one you signed into first), you'll see a prompt: "New app or browser found." Select Transfer Key.
  4. A short verification code appears on your original device. Type that code into the new device to finish linking it.
!
Never share your verification code This code proves the new device is really you. 1Password employees and IT will never ask you for it over phone, chat, or email. If someone does, treat it as a phishing attempt and report it.
Pro tip Turn on notifications when your device prompts you to. That way, approving a new sign-in later is a single tap instead of a search through settings.
Pro tip — set up your phone first After you've created your profile at magasindunord.1password.eu, download the mobile app and sign in there before you touch the desktop app. Then, when you install 1Password on your computer, choose Sign in with QR code and scan it with your phone — you'll approve it with Face ID, Touch ID, or your fingerprint instead of typing your SSO details all over again. It's the fastest way to get signed in on a new computer, and it's how you'll want to add any future device too.
4
Avoid the double pop-up

Turn off your browser's built-in password manager

Chrome, Edge, Brave, Firefox, and Safari all have their own free, built-in password manager — and it doesn't know 1Password exists. Left running side-by-side, both will try to save and autofill the same login at the same time, so you end up with two competing pop-ups fighting for the same field.

!
Important — the setting alone won't fix it Turning off "Offer to save passwords" in your browser's settings stops it from prompting you to save new logins, but it will keep autofilling and re-suggesting any passwords it already has saved. The only way to fully stop the double pop-up on a site is to remove that site's saved password from the browser itself.

Step 1: turn off the setting (do this first, on every browser you use)

  1. Chrome, Edge, or Brave: open SettingsAutofill and passwords → Google Password Manager (Chrome) or Passwords (Edge/Brave) → Settings → turn off Offer to save passwords and passkeys.
  2. Firefox: open SettingsPrivacy & Security → scroll to Logins and Passwords → uncheck Ask to save logins and passwords for websites.
  3. Safari: open Safari → Settings → AutoFill → turn off Usernames and passwords.

This clears the way for new logins going forward. Now deal with the passwords the browser already has saved, using one of the three methods below.

Three ways to move your existing browser passwords out

Pick one. They all end with the browser's saved passwords deleted and 1Password as your single source of truth — they just differ in how much manual clean-up you're willing to do.

Method Effort Result
1 · Clean slate (recommended) Low Cleanest vault — only logins you actually still use
2 · Gradual migration Medium, spread over time Clean vault, but takes days/weeks to finish
3 · Bulk import (not recommended) Fast upfront, slow after Brings over everything, including clutter you'll need to prune manually

Method 1 — Clean slate: back up, then start fresh ★ Recommended

  1. Export your browser's saved passwords as a one-time backup. In Chrome: Settings → Autofill and passwords → Google Password Manager → Settings → Download file (under "Export passwords"), then confirm with your computer password. Edge and Firefox have an equivalent "Export Passwords" option in their password settings.
  2. Save that exported file somewhere private and temporary — it's unencrypted, plain-text, readable by anyone who opens it. Keep it only as an emergency backup.
  3. Delete all saved passwords from the browser's password manager (there's usually a "Delete all" or select-all option, or you can remove them individually).
  4. From now on, just use the web normally. When you land on a site you used to have saved, select Forgot password, reset it, and let 1Password generate a new strong password and save it automatically. Done — that login now lives only in 1Password.
Pro tip You don't need to reset every site on day one — only the ones you actually revisit. Accounts you never end up resetting simply age out, which means your 1Password vault only ever fills up with logins you genuinely use, not years of digital clutter.
Important Delete the exported backup file once you're confident 1Password has what you need. An unattended plain-text file full of passwords is a real risk if your computer is ever lost, stolen, or shared.

Method 2 — Gradual manual migration

  1. Open your browser's password manager in its own tab (in Chrome, go to chrome://password-manager/passwords) and keep it pinned or nearby while you work.
  2. Go about your day as normal. When you log in to a site, let 1Password fill or save the login as usual.
  3. Once you can see 1Password has it saved, switch to that password-manager tab, find the same site, and delete it from the browser.
  4. Repeat each time you run into a "leftover" saved site, until the browser's list is empty.
i
Good to know Until you delete a specific site's entry, that site will keep showing both pop-ups — that's expected. It's exactly why deleting each one is the only real fix; the settings toggle in Step 1 can't do this part for you.

Method 3 — Bulk export and import Not recommended unless you'll clean up after

  1. Export all saved passwords from your browser to a CSV file (same as Method 1, step 1).
  2. In the 1Password app, select File → Import (Mac/Windows) or the ⋯ menu → Import (1Password.com), choose your browser (Chrome, Edge, Firefox, etc.), select the CSV file, choose the destination vault, and select Import.
  3. Delete the CSV file immediately afterward — it's unencrypted plain text.
  4. Still go back and delete the saved passwords from the browser (Method 1, step 3). Importing into 1Password does not remove them from the browser or stop the double pop-up on its own.
  5. Set aside time to go through your newly-imported items and delete anything you don't actually use — old accounts, duplicates, long-abandoned trials, and weak or reused passwords.
!
Important This method brings over everything, including passwords you haven't touched in years and accounts you may have forgotten you had. Unless you're genuinely going to sit down and prune the result, it just moves your clutter from one app to another — Method 1 gets most people to a cleaner vault with less effort.
5
Everyday habits

Core daily use: saving, updating, and organizing logins

Saving a new login (the easy way)

The simplest way to save a login is to just log in to a website normally — 1Password does the rest.

  1. Go to a site and enter your username and password like you normally would.
  2. Select Sign In on the website.
  3. 1Password's browser extension will pop up and ask "Save login for this website?"
  4. Choose the right vault (see Step 8 for which one), then select Save.
Browser extension
💾 Save login for salesforce.com?
Username
u42069@magasin.dk
Password
••••••••••••
Save in
📁 Sales Team — Shared Vault ▾
Illustrative example of the browser extension's save prompt

Saving a login manually (inside the app)

Useful for accounts you already have, or ones you're not signing into from a browser right now (like an app-only service).

  1. Open the 1Password app and select + New Item.
  2. Choose Login.
  3. Fill in the website, username, and password (or select the key icon to generate a strong one).
  4. Choose the correct vault, then select Save.

Updating an existing login

  1. Change your password on the actual website first, the way you normally would.
  2. 1Password will usually detect the change and prompt "Update login?" — select Update.
  3. If it doesn't prompt automatically, open the item in 1Password, select Edit, update the password field, then Save.

Moving or copying items between vaults

  1. Open the item you want to move.
  2. Select the (more options) menu.
  3. Choose Move to Another Vault (moves it) or Duplicate and then move the copy (keeps the original in place too).
  4. Pick the destination vault and confirm.
Pro tip If you accidentally saved a work login to your Employee vault but your whole team needs it, move it into the right shared vault the moment you notice — nobody else can see it until you do.

Beyond logins: other item types worth using

1Password stores far more than passwords. Three item types are especially useful for day-to-day work:

  • 💳 Credit cards — save a company card once and autofill the card number, expiry date, and security code at checkout instead of digging through a wallet or a group chat for the numbers. Useful for shared team subscriptions, travel bookings, or ad accounts. Select + New Item → Credit Card to add one.
  • 📝 Secure notes — a private, encrypted place for text that doesn't fit a login: Wi-Fi setup instructions, a server's root access procedure, license keys, or a passphrase for an encrypted drive. Anything you'd hesitate to paste into a chat message is a good candidate for a note. Select + New Item → Secure Note.
  • 📎 Documents and files — attach a file directly to any item, or save a standalone document. Great for a scanned ID, a signed contract, a software license PDF, or an SSH key file. It stays encrypted alongside everything else, and — like every item — it can be shared with someone outside your account if needed (see Step 9). Select + New Item → Document, or drag a file onto an existing item to attach it.
i
Good to know Credit cards, notes, and documents follow the same vault rules as logins — a company card the whole team books travel with belongs in a shared vault; a personal card or your own scanned passport belongs in your free Families account, never in your work vaults.
6
Extra protection

Adding two-factor authentication (2FA) to your logins

1Password can also act as your authenticator app — generating the six-digit one-time codes that many websites ask for as a second factor, right alongside the saved password. This means one app for both, and codes that fill in automatically instead of being copied from your phone by hand.

i
Good to know This adds 2FA to your individual logins (like Salesforce or a vendor portal) — it's different from your 1Password account's own sign-in method, which is already handled by your company's SSO.

Add 2FA in the desktop app (Mac, Windows, or Linux)

  1. On the website you want to protect, go to its security settings and turn on two-factor authentication / an authenticator app. It will show you a QR code (or a text-based setup key if it can't display one).
  2. Open 1Password and find (or create) the Login item for that website.
  3. Select Edit.
  4. Select Add More, then choose One-Time Password.
  5. Select the QR code icon, then choose From My Screen and drag the scanner over the QR code shown on the website. (You can also choose From Image File or From Clipboard if that's where the code lives — or paste in the setup key by hand if there's no QR code at all.)
  6. 1Password will immediately start generating a live six-digit code. Select Save.
  7. Return to the website and enter the current code from 1Password to confirm the setup.

Add 2FA in the mobile app (iOS or Android)

  1. On the website, start turning on two-factor authentication and get to the screen showing a QR code.
  2. Open the 1Password app and find (or create) the Login item for that site.
  3. Tap the item, then tap the pencil / Edit icon.
  4. Tap Add More (or the field labeled One-Time Password).
  5. Tap the QR code icon to scan the code with your camera — point your phone at the code shown on your other device or screen. If only a text setup key is offered, paste that instead.
  6. Tap Save once the six-digit code appears.
  7. Enter the code back on the website to confirm.
Edit login item
✏️ Editing: Salesforce
Username
j.rivera@magasin.dk
Password
••••••••••••
One-Time Password
482 019 ⧉ Scan QR
Refreshes every 30 seconds
Illustrative example — once saved, 1Password fills the code automatically and copies it to your clipboard on sign-in
Pro tip You don't have to hunt for sites to protect one by one — the missing 2FA alerts in Watchtower (see the next step) point you straight to the logins that support it but don't have it turned on yet.
!
Important — keep your 1Password account's own 2FA separate If your account ever needs a backup authenticator (for example, outside of SSO), don't store that code inside 1Password itself — that's like keeping the key to a safe inside the safe. Use a separate authenticator app for anything that protects your 1Password account directly.

See it in action

Once a login has a one-time password saved, signing in takes seconds — 1Password fills your email, your password, and finally your 2FA code, one after another, with no typing at all.

Illustrative demo — email, password, and 2FA code all filled automatically, then signed in
7
Stay secure

Watchtower: your built-in security check-up

Watchtower quietly scans everything saved in 1Password and flags anything risky — all checks run locally on your device, so your actual passwords are never sent anywhere to be scanned.

Watchtower
2
Compromised websites
3
Reused passwords
1
Weak passwords
5
Two-factor available
Illustrative example of a Watchtower dashboard — categories only appear when you have items in them

What each category means

  • Compromised websites — a site you use had a known data breach, and you haven't changed the password since. Change it now.
  • Vulnerable / breached passwords — your exact password has appeared in a leaked-password database somewhere. Change it, even if you don't recognize the source.
  • Reused passwords — the same password is protecting more than one login. If one account is compromised, all of them are at risk. Give each a unique password.
  • Weak passwords — short or easily-guessed passwords. Let 1Password generate a strong replacement.
  • Missing two-factor authentication (2FA) — the site supports an extra layer of login security, but you haven't turned it on yet.
  • Unsecured websites — the site doesn't use a secure (HTTPS) connection, so data you type could be intercepted.

How to act on an alert

  1. Open Watchtower in the sidebar of the app.
  2. Select a category to see the affected items.
  3. Select an item, then Change Password on Website (or Set Up 2FA) and follow the prompts.
  4. Save the new password back into 1Password when asked.
Pro tip Make checking Watchtower a five-minute monthly habit — most people can clear their entire list in one sitting.
8
Stay organized

Understanding your vaults

Every item in 1Password lives in a vault — think of vaults as labeled folders that control who can see what. As a 1Password Enterprise user, you'll typically see two kinds:

1Password — Magasin Du Nord
Vaults
🔒 Employee Vault
👥 Marketing Team
👥 Engineering
👥 Shared
PW
Personal work notes login
BP
Benefits portal (Employee only)
AD
Adyen Login
BR
Brevo Login
Illustrative example — your sidebar will show your own Employee vault plus whichever shared vaults you've been added to

Employee vault (formerly called "Private vault")

  • Every team member automatically gets one — it can't be renamed or deleted.
  • Only you can normally see the items in it. Even your manager and coworkers cannot.
  • In rare cases — like an account recovery, an offboarding process, or a security investigation — 1Password administrators can access or run reports on Employee vault items. This is a company account, not a personal one, so treat it accordingly.
  • What belongs here: logins and items that relate to your job, but that only you personally need — things like a personal bookmark of an internal tool, a one-off vendor portal only you use, or notes tied to a work task.

Shared vaults

  • Created and managed by your team or IT, and shared with everyone who needs access.
  • Anyone added to the vault can see (and, depending on permissions, edit) everything inside it.
  • What belongs here: team or department logins — a shared social media account, a SaaS tool your whole team uses, a shared service account, Wi-Fi credentials for the office, and so on.
Important — keep personal accounts out entirely Your 1Password Business account belongs to your employer. Never save personal logins — banking, personal email, streaming services, social media, or family accounts — anywhere in your work account, including your Employee vault. Use your free personal Families account instead (see Step 10).

"Where should I save this?" — quick decision guide

Example itemSave it inWhy
Your work email / Microsoft 365 Employee Vault Only you use it day to day
A vendor portal only you personally deal with Employee Vault Job-related, but not shared with teammates
Team's shared Salesforce, Slack, or Figma login Shared Vault Multiple teammates need access to the same account
Office Wi-Fi password or shared social media account Shared Vault Whole team or department relies on it
Personal Netflix, Spotify, or streaming logins Use Family Account Personal, unrelated to work
Personal banking, credit cards, or tax documents Use Family Account Sensitive personal financial data
Family member logins, home Wi-Fi, kids' school portal Use Family Account Has nothing to do with your job
9
Working with outsiders

Sharing a login or file with a supplier or partner

Sometimes a supplier, contractor, or partner needs a password or a file from you — and they don't use 1Password at all. Instead of emailing it in plain text or pasting it into a chat, use item sharing to send a secure, expiring link. It works for any item type, including logins, credit cards, secure notes, and documents.

  1. Open and unlock 1Password. Find the item you want to share — for example, a login or an attached file — and select it.
  2. Select Share.
  3. Choose when the link expires: 1 hour, 1 day, 7 days, 14 days, 30 days, or set it to expire the moment it's viewed once.
  4. Choose who can open the link: anyone with the link, or only specific people. For the latter, add their email address(es) — they'll need to verify their email with a one-time code before they can view the item.
  5. Select Copy Link (or Share Link to send it directly through email, chat, or another app).
  6. Send the link to your supplier or partner through whatever channel you'd normally use — the link itself is what's secure, not the channel.
Share item
🔗 Share: Printer Vendor Portal
Link expires
7 days ▾
Share with
supplier@partnerco.com ✕
Illustrative example — the recipient doesn't need a 1Password account to view the shared item
i
Good to know Sharing a link sends a copy of the item as it looked at that moment — not the live item. If you later change the password, the recipient's copy won't update automatically. Update the item and share a fresh link if that happens. Every shared link also shows up in the account's Activity Log, so admins have visibility into what was shared and with whom.
Pro tip If a supplier or partner needs ongoing access to several shared items rather than a one-time link, ask IT about a guest account for that shared vault instead — it saves you from re-sharing links every time something changes.
!
Important Only share items with people and organizations you actually trust — a share link works even for people without a 1Password account, so treat it with the same care as handing over the password directly. When the engagement ends, stop the share (or let the link expire) and rotate the password if it protects anything sensitive.
10
A perk, not a policy

Your free 1Password Families account

Because Magasin uses 1Password Business, you personally get a free 1Password Families membership — a completely separate, personal account for you and your household, at no cost to you, for as long as you're with the company.

  • Covers up to 5 people total — you plus up to 4 family members or trusted people.
  • It's entirely separate from your work account. Your employer cannot see anything stored in it — not your items, not your vaults, not even how many you have. Only whether the linked subscription is active is shared with your work account.
  • Use it for everything personal: banking, personal email, streaming, shopping, family Wi-Fi, kids' accounts, and more.

How to redeem it

  1. Sign in to your work 1Password account on https://magasindunord.1password.eu/
  2. Select your name in the top-right corner, then Manage Account (or your profile page).
  3. Look for the "Claim your free Families account" section and select Redeem Now.
  4. Create your Families account using your personal email address — not your work email.
  5. If you already have a personal 1Password account, you can link that existing account instead of creating a new one.
  6. Invite up to 4 family members from within your new Families account.
Switch account
MDN
Magasin Du Nord
Work · u42069@magasin.dk
RF
The Rivera Family
Personal · anders.rivera@gmail.com
Illustrative example — both accounts live side by side in the same app

Using both accounts side by side

You don't need two separate apps. Add both accounts to the same 1Password app and browser extension, and switch between them with the account picker. When saving or filling a login, just double check which account is selected — work items stay in Magasin Du Nord, personal items stay in your Families account.

Pro tip Set up your family members' invites right after redeeming — it takes two minutes and means everyone in your household gets the same protection you now have at work.
i
Good to know If you ever leave the Magasin Du Nord, your Families account keeps working — it simply unlinks from your work account and moves into its own billing (often with a grace/trial period), so your family's data is never at risk of disappearing.
11
Wrap-up

Best practices and where to get help

Good habits worth building

  • Let 1Password generate passwords instead of making up your own — longer and more random is safer, and you'll never need to remember it.
  • Keep the browser extension turned on so you're prompted to save new logins as you create them, rather than leaving them out of 1Password entirely.
  • Keep your browser's built-in password manager turned off (Step 4) — a browser update or a reset can quietly turn it back on, which is the most common reason the double pop-up creeps back in later.
  • Review Watchtower monthly, not just when something breaks.
  • Double-check the destination vault every time you save a new item — a five-second habit that keeps work and personal life cleanly separated.
  • Turn on biometric unlock (Face ID, Touch ID, Windows Hello) on your devices for faster day-to-day access.
  • Never share your verification codes, Emergency Kit, or account details with anyone — including people claiming to be from IT or 1Password support.

Where to get help

SituationWho to contact
Can't sign in, locked out, or a new device won't link Your IT / Help Desk team — they administer Magasin's 1Password account
Questions about company policy on shared vaults or vault access Your IT / Security team
General "how do I…" questions about using the app support.1password.com (official 1Password Support)
Suspicious verification code request or phishing attempt Report immediately to IT / Security — never respond with the code
Questions about your personal Families account support.1password.com — this is your personal account, separate from IT

You're all set!

You now have 1Password on your devices, a clear picture of where things belong, and a free account to keep your family secure too. If anything feels unclear along the way, your IT team and 1Password Support are both one click away.

Language / Sprog
Your checklist 0/14
Auto-check while scrolling When on, tasks are checked off as you reach the end of each section
Step 1 of 3

Title

Body

Jump to a section
1 Accept your invite 2 Install the apps 3 Sign in everywhere 4 Turn off browser passwords 5 Daily use 6 Add two-factor (2FA) 7 Watchtower 8 Vaults & where to save what 9 Share externally 10 Free Families plan 11 Best practices & help