
With compromised websites and merchants becoming more and more common, people with bad password practices may find themselves significantly compromised if they, for example, use the same password across numerous websites including their financial institutions. Using a password manager, like 1Password, is one of the smartest things you can do to protect yourself online. Please email us at if you have any questions related to our programs.Using 1Password keeps all your different logins safe Please use an account you own for general bug bounty program research. If you want to participate in the CTF challenge, please see additional details in the CTF program brief.Ĭan I use my CTF account for the core program research?Īccess to the Bug Bounty CTF account is intentionally limited to the scope of the CTF competition. This account was formerly but was updated to coincide with the program changes. The CTF competition target (or flag) is a secure note that lives in a vault on the account. The CTF competition remains the same, however we moved the specific details into a separate BugCrowd program to help researchers differentiate between the two programs. Some of you may also be aware of our $1 million bug bounty Capture The Flag (CTF) Competition launched in 2022. New BugCrowd Program for the Existing CTF Competition You are welcome to create as many trial accounts as needed under this program. The most important change to note is that you may only conduct testing on an account you own.

We've recently made some updates to the existing program brief to bring clarity to the target list and scope of the program. But please note that you’ll need to access your account by navigating to a new URL ( ) moving forward.


If you previously emailed our team and were given an account on, you have the appropriate access to participate in the CTF competition. Our main program page will be used solely for security research and bug hunting related to our full suite of products, while the CTF Competition has been moved to a new BugCrowd program page.

As of today, AgileBits ( DBA 1Password) made a change to the structure of our bug bounty program within the BugCrowd platform.
