How to Completely Uninstall 1Password From Your Mac

1Password is one of the more invasive apps on macOS — by design, since it has to integrate with browsers, the system-wide autofill, Touch ID, the menu bar, and (if you use SSH) your terminal. That integration scatters files across user Library, system Library, and per-browser extension folders.

If you’re switching to a different password manager, or just cleaning up after upgrading from 1Password 7 to 1Password 8 (these were two separate apps with different bundle IDs), here’s the full uninstall on macOS Sonoma 14 and Sequoia 15.

Important: export your data first

Before you remove anything, export your vault. If you sign out of 1Password and uninstall without exporting, you risk losing access if your account password isn’t somewhere recoverable.

1. Open 1Password and unlock with your master password.
2. File → Export → All Items.
3. Choose 1PIF format (1Password’s interchange format) or CSV.
4. Save somewhere safe — outside iCloud Drive ideally, since you may not want plaintext password backup syncing to the cloud.

You should also confirm you can sign in to 1password.com in a browser. The cloud account is the source of truth; the desktop app is a client.

Sign out and quit

In 1Password: Settings → Accounts → click your account → Sign Out. This invalidates the local encryption keys for that account.

Then quit: Cmd+Q from inside the app, or right-click the menu bar icon and choose Quit.

In Activity Monitor, search “1Password” — you’ll likely see:

• 1Password 8 (or 2BUA8C4S2C.com.1password.1password on newer builds)
• 1Password Extension Helper — communicates with browser extensions
• 1Password Launcher — keyboard shortcut handler
• 1Password CLI — command-line tool, if you’ve used it

Force-quit anything still running.

Drag 1Password to the Trash

Open Finder → Applications. Drag “1Password” to the Trash. The app bundle is around 350 MB.

If you also have “1Password 7” in Applications (the older standalone app), drag that to the Trash too. They’re separate bundles with separate data.

Where 1Password 8 stores data

1Password 8’s bundle ID is com.1password.1password, but most data lives under the team identifier prefix 2BUA8C4S2C because of code signing requirements.

• ~/Library/Group Containers/2BUA8C4S2C.com.1password/ — encrypted vault data, settings, sync state
• ~/Library/Containers/com.1password.1password/ — sandboxed app container
• ~/Library/Containers/com.1password.1password-launcher/ — keyboard shortcut handler container
• ~/Library/Application Support/1Password/ — additional app data
• ~/Library/Caches/com.1password.1password/ — image cache (favicons, etc.)
• ~/Library/Preferences/com.1password.1password.plist — preferences
• ~/Library/Logs/1Password/ — diagnostic logs

Open Finder, Shift+Cmd+G, paste each path, and clear what’s there.

The Group Containers folder is the largest — it holds your encrypted vault. Even though it’s encrypted, deleting it ensures nothing is recoverable from this machine.

Where 1Password 7 stores data (legacy)

If you also need to clean up 1Password 7:

• ~/Library/Application Support/1Password 4/ — yes, “4” is correct; 1Password 7 reused the older path
• ~/Library/Containers/2BUA8C4S2C.com.agilebits.onepassword7-helper/ — helper container
• ~/Library/Group Containers/2BUA8C4S2C.com.agilebits/ — shared data
• ~/Library/Preferences/com.agilebits.onepassword7.plist — preferences

The bundle ID for 1Password 7 was com.agilebits.onepassword7, which is why the prefs file uses that name.

Let Sweep uninstall properlyDrag-to-trash leaves traces. Sweep wipes the app + support files + prefs + caches + helpers all at once. Get Sweep free →

Browser extensions

1Password’s autofill works via browser extensions that communicate with the desktop app over a local socket. Removing the desktop app breaks the extension, but the extension itself stays installed.

Remove the extension from each browser:

• Safari: Settings → Extensions → uncheck 1Password → click Uninstall to fully remove.
• Chrome / Brave / Arc / Edge: chrome://extensions → 1Password → Remove.
• Firefox: about:addons → Extensions → 1Password → Remove.

If you only had 1Password 7’s extension (the older one called “1Password X”), it has its own listing — remove that too.

The 1Password CLI

If you ever ran op from Terminal, you have the CLI installed. Check:

which op

If it returns a path (typically /usr/local/bin/op for Intel or /opt/homebrew/bin/op for Apple Silicon), remove it:

brew uninstall 1password-cli   # if installed via Homebrew

Or for a manual install:

sudo rm /usr/local/bin/op

The CLI also stores config:

• ~/.config/op/ — CLI config and session state
• ~/.config/1Password/ — sometimes used; remove if present

SSH agent integration

If you used 1Password as your SSH key store, your ~/.ssh/config likely has a line referencing the 1Password agent:

IdentityAgent "~/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock"

Remove that line from ~/.ssh/config, or replace it with a different SSH agent setup. If you skip this, SSH will fail with “no such file” until you fix the config — your other identity files (in ~/.ssh/) are still there, just not auto-loaded.

Login items and Touch ID

1Password adds itself as a login item by default.

1. System Settings → General → Login Items & Extensions.
2. Remove 1Password entries from “Open at Login” and toggle off “Allow in the Background.”
3. While you’re there, System Settings → Touch ID & Password — 1Password used to register here as a Touch ID consumer. After uninstall, the entry should clear automatically.

Keychain cleanup

1Password stores encryption keys in the Keychain. Search Keychain Access for “1Password” and “AgileBits” (the older name). Delete what’s there.

If you reinstall later, fresh keychain entries will be created.

Empty the Trash and verify

Empty the Trash. Recovered space is typically 400 MB to 1 GB depending on vault size and number of accounts.

To verify:

ls ~/Library/Group\ Containers/ | grep -i 1password
ls ~/Library/Containers/ | grep -i 1password
ls /Applications/ | grep -i 1password

All three should return empty.

Skip the manual huntSweep finds every leftover preference, cache, and support file in seconds. Download Sweep free →

Why 1Password is harder than most

1Password’s footprint spans:

1. The user-level app and its caches
2. The Group Containers (shared between the app and its launcher/helper)
3. The browser extensions (per browser)
4. The CLI binary and config (if installed)
5. SSH config integration (if used)
6. Login items and Touch ID registration

Manual removal works but takes 15+ minutes if you’re thorough. Sweep’s app uninstaller catches the main app, the Group Containers, the helper containers, and the prefs/caches in one pass — but the browser extensions, CLI, and SSH config are still manual cleanups (because they’re outside the app’s normal scope).

In other words: even with Sweep, the browser extension and CLI cleanup are on you. But the ~/Library part is one click instead of fifteen minutes.

Reinstalling

If you ever go back to 1Password, install only from 1password.com. Sign in with your existing account, and your vault will sync down. The clean install creates fresh Group Containers and prefs — none of the old data is needed.

That’s 1Password fully out. Your passwords are still in your account at 1password.com (and in your export, if you took one); your Mac is just one less app heavy.