One identity. Every app, every agent — yours.

1Profile is the private, verified home for your personal data — and the sign-in your apps and AI agents can trust. Verify once. Use it everywhere.

Prove who you are once.

Verification, sign-in and account protection that follow you into every app you connect.

1Profile Verify — Government ID and selfie checks through Stripe Identity. Share a verified result with another app in one step, and revoke it any time.
KYC verification — Document OCR, face match and screening, attached to your profile so no app has to ask twice.
Phone verification — Confirm a number with a texted code — 3 credits, against the 20 a full document check costs.
OAuth 2.0 / SSO — Add “Sign in with 1Profile” to your apps with OAuth 2.0 and OpenID Connect, including PKCE for browser and mobile apps.
Hosted sign-in portals — A brandable sign-in page for every OAuth client, with Google, Microsoft, Apple, GitHub and crypto wallet buttons.
Passkeys & passwordless — Sign in with a passkey on your device, or a six-digit code sent to your email. No password to phish or reuse.
Phone & wallet sign-in — Start a session with a texted code, or by signing a message with a crypto wallet. Both land in the same profile.
Enterprise SSO & SCIM — Point an organization at its own IdP over SAML 2.0 or OpenID Connect, and provision or remove members automatically with SCIM.
Two-factor authentication — Codes from any authenticator app — Google Authenticator, Authy, Duo Mobile — with backup codes, plus Duo Push for organizations that bring their own Duo account.

Your data, encrypted and portable.

A private store for credentials, documents and profile data, with an API that only shares what you approve.

Password vault — Credentials encrypted in your browser with AES-256-GCM, plus generation and strength checks.
Knowledge base — Keep PDFs, docs, spreadsheets and images in one private library. Your agent finds them by name and description — file contents are never indexed.
Profile API — REST endpoints to read and manage profile data programmatically, scoped per grant.
Client SDKs — @1profile/js, @1profile/react and @1profile/node — drop-in sign-in, token refresh and server-side token and webhook verification.
Export & deletion — Download everything you've stored, review your consent history, or delete your account for good.
Credit-based pricing — API calls are free. Credits pay for AI actions, sign-ins through your apps and identity verifications. No seats, no subscriptions.

Agents that sound like you.

An assistant, personas, voice and automations built on your profile, with access you can scope and revoke.

AI agent — Ask about your profile, look up knowledge base files by name, run automations, generate images and reply in your cloned voice.
AI persona creation — Generate an AI representation of you that can respond in your voice.
Voice clones — Clone your voice with ElevenLabs and generate speech for narration, agents or content.
Intelligent automation — Draft emails, social posts, replies and summaries from triggers you define.
MCP server — Connect Claude, Cursor or any MCP client to 96 tools, authorized with your API key.

Credit packs

Every account starts with 100 free credits. Packs are one-time purchases: no subscriptions, no seats, and API calls are free.

Pack	Credits	Price	Credits expire	Includes
Starter	50	$9.99	30 days	50 credits for AI, sign-ins and verifications; Basic analytics; Email support; 30-day credit expiry
Popular	200	$29.99	60 days	200 credits for AI, sign-ins and verifications; Advanced analytics; Priority support; 60-day credit expiry; 25% savings
Professional	500	$59.99	90 days	500 credits for AI, sign-ins and verifications; Full analytics suite; Priority support; 90-day credit expiry; 40% savings
Enterprise	2000	$179.99	Never	2000 credits for AI, sign-ins and verifications; Full analytics suite; Dedicated support; No credit expiry; 55% savings; Custom integrations

Recent releases

1.11.0 — Duo Push for Organizations

Oct 5, 2026 · Bring your own Duo account for push-based two-factor approvals.

feature: Organization admins can connect a Duo Web SDK application under Organization → Security → Duo Push; details are checked with Duo before saving and the secret is stored encrypted
feature: Require Duo Push separately for signing in to 1Profile, unlocking the Password Vault, and approving apps via Sign in with 1Profile
improvement: App sign-in Duo requirement is enforced server-side: the authorize endpoint returns duo_required until a push is approved

1.10.0 — App Management API, Vault Upgrades & New Navigation

Oct 4, 2026 · Configure Sign in with 1Profile without the dashboard, richer vault tools, and a two-tier sidebar.

feature: New manage:apps scope — create, update and delete OAuth apps, rotate client secrets, and configure hosted portals and your own Google, Microsoft, GitHub or OpenID Connect provider credentials through the API
improvement: Apps registered over the API start pending approval like any other, and every app, portal and credential change is written to the audit log
feature: Password generator with length 8–64, character-class and look-alike options, from the vault toolbar or while adding a password
feature: Pick an icon for each saved password, from thirty to choose from
improvement: Two-tier sidebar — a rail of sections with a panel for each section's pages; collapsing keeps the rail
fix: Continue with GitHub works again on the sign-in page, on 1Profile's own GitHub app
improvement: Linked accounts under Security now lists the social accounts you have actually signed in with

1.9.0 — Phone, Wallet Sign-in & Embedded Sign-in

Sep 21, 2026 · New ways to sign in, phone checks for Verify, and key rotation.

feature: Sign in with a texted code on /auth, and verify your number on Profile
feature: Sign in with a crypto wallet — whichever browser wallet you have installed, proved with a SIWE signature, including smart accounts such as a Safe; on /auth, and on hosted portals that enable it
improvement: Link several wallets under Security and choose a primary; a new wallet scope lets apps ask for your address on the consent screen
feature: 1Profile Verify templates can require a phone number check; phone-only verifications cost 3 credits
improvement: Verification codes can be read out over a phone call instead, with a resend cooldown and an expiry countdown
feature: Embedded sign-in — @1profile/react <SignIn /> renders your portal's social, SSO and email buttons on your own page, while passwords and codes stay on 1Profile
feature: Rotate an API key — the replacement keeps its name, scopes and limits, and the old key stops working immediately
improvement: Portal settings say when a provider runs on 1Profile's shared OAuth app
improvement: "Ask 1Profile" button opens the AI agent, with a ⌘J / Ctrl+J shortcut

1.8.0 — OpenID Connect, Passkeys & Enterprise SSO

Sep 17, 2026 · Sign in with 1Profile grows into a full identity provider for apps and their organizations.

feature: Full OpenID Connect provider — discovery, JWKS, RS256-signed id_tokens, PKCE, public clients, token introspection and revocation
feature: Passkeys — add one under Security and sign in with Face ID, Touch ID or a security key
feature: "Continue with 1Profile" — sign in with an emailed 6-digit code on /auth and hosted portals
feature: Enterprise SSO for hosted portals over SAML 2.0 or OpenID Connect (Okta, Entra ID, Google Workspace), several connections per app by email domain; "Sign in with SSO" on /auth
feature: SCIM 2.0 user and group provisioning from your identity provider, with per-app provisioning tokens
feature: App-owned organizations, roles and invites, with an organizations claim in id_tokens and /userinfo
feature: Users & sign-in log per app — revoke or ban users; user.* and session.revoked webhooks
feature: Settings › Connected apps — see and remove apps you've signed in to
feature: SDKs for the browser, React and Node — @1profile/js, @1profile/react and @1profile/node
feature: MCP server accepts OAuth sign-in, with dynamic client registration
improvement: The developer API enforces each key's hourly rate limit, with X-RateLimit headers and Retry-After on a 429
improvement: Per-app custom token claims and email-domain allow/block lists
improvement: See and revoke your active sessions, or sign out other devices
improvement: Sign-up forms turn away known disposable email addresses
fix: Scheduled and webhook-triggered automations now run
fix: Organization pages load and invitations can be accepted

From the blog

That Six-Digit Text Code Won't Save You Anymore — SIM swaps, SMS-intercepting malware and real-time phishing kits have turned text-message codes into the weakest link in your login. Here is what replaces them. Sep 24, 2026
You Just Handed Your AI Assistant the Keys to Your Life. Now What? — AI agents now book travel, answer email and log into apps on our behalf. Most of them are doing it with far more access than they need. Sep 23, 2026
Hackers Are Already Preparing for Your Holiday Shopping — Account takeover attempts climb every autumn as attackers stockpile stolen logins before the holiday rush. Here is how to lock things down before November. Sep 22, 2026
Your Face Is a Password Now—and AI Just Learned How to Steal It — Deepfakes can pass visual checks, clone voices, and weaponize leaked identity data. Here is why a selfie alone no longer proves who anyone is. Sep 17, 2026
Your Enterprise Login Is One Acquisition Away From Total Chaos — One customer uses Okta, another uses Entra, and the company you just acquired uses something else. One-login-per-app stops working faster than most teams expect. Sep 16, 2026
Your Identity Was Probably Leaked This Month (Here's How to Check in 60 Seconds) — September 2026 has already been a brutal month for credential leaks. Here is the fastest way to find out if you are in one, and what to do in the next hour. Sep 15, 2026

Frequently asked questions

What exactly is 1Profile?

A private, encrypted home for your personal data — identity, documents, credentials, preferences — plus a verified sign-in (OAuth 2.0) that apps and AI agents can use with your consent.

Can 1Profile read my data?

No. Vault contents are encrypted on your device with AES-256-GCM using keys derived from your master password. We store ciphertext only.

How does verification work?

You scan a government ID and take a selfie, and we check that they match and run sanctions screening. The verified result is saved to your profile, so you don't start over for every app.

Can apps reuse my verification?

Yes, with your say-so. When an app asks you to verify through 1Profile Verify and you already have, you see exactly which details it will receive and share them in one step. Every share is recorded, and you can revoke it from Security at any time.

What do developers get?

A hosted, brandable sign-in portal, identity verification through 1Profile Verify, a REST API, webhooks, an MCP server for agents, and a dashboard for keys, SSO and usage. API calls are free; credits cover AI actions, sign-ins through your app and identity verifications.

How do AI agents fit in?

Agents connect through the 1Profile MCP server, either by signing in with 1Profile (OAuth, the mcp scope) or with an API key you create. Each key carries only the scopes you choose — say, reading your profile and personas — its calls show up in your API usage, and you can revoke it any time.

Can I export or delete my data?

Yes. Settings lets you download your profile, preferences and activity at any time, and you can file access or erasure requests. Deleting your account removes your profile, stored files and connected data for good.

Is there a free tier?

Yes — creating and managing your profile is free. Credits are only needed for developer API calls and authentications through your own apps.