1Password's $300,000 patron badge ties its brand to DHH's Omarchy

The person who has to answer for this on Friday is the admin who standardised a few hundred seats on 1Password last year and now has a link to a foundation's patron page sitting in their inbox, forwarded by someone in legal. Nothing about the vaults changed this week. What changed is that a public, searchable page carries the company's name under a foundation associated with a man whose July 21st blog post, quoted by The Verge, said that when gypsies take over public spaces, you deport them ^[11].

The listing is cheap, which is part of the problem. Omacom has 12 founding patrons at $1 million each, DHH among them ^[13]. Against a $12 million founding pool, $300,000 is about 2.5 percent ^[15], and roughly 30 percent of what one founding patron wrote ^[16]. For that, 1Password's name now sits on a page alongside Michael Dell and Jack Dorsey, among others ^[13].

The internal justification was a usage claim: Omarchy has grown to be the second most used Linux distribution among 1Password users, and CEO David Faugno told staff the scale and growth of that use is significant ^[8]. A rank describes position, not size. Second place inside a vendor's Linux population says nothing about how many seats those accounts hold or what they renew at, and the quoted message supplies a position with no count attached ^[17].

Paying into an upstream project your customers actually run is ordinary supplier hygiene when the money buys work, such as a maintainer's time or packaging you were going to need anyway. A distinguished corporate patron badge buys placement ^[1]. The two spends serve different purposes, and the fallout from this second kind was foreseeable: Duke University Libraries dropped Basecamp back in 2023, citing harms it attributed to the leadership of parent company 37signals ^[14].

When a vendor's politics surface, most users do nothing at all. A handful post about it, and occasionally one forwards the page to procurement. Teams tell themselves that the loud accounts are a small minority and that renewals will hold. Both readings can be true at the same time, but neither one tells you what churn will actually look like. The reported evidence is people on social media asking for password manager alternatives ^[4] and one viral post accusing the company outright ^[4], plus employees pushing back inside the company ^[5]. The costs already banked are two executives writing internal memos ^[6] and a search result that will outlive the news cycle.

What a buyer escalating this will notice is that the two memos do not agree. Faugno wrote that 1Password does not endorse hateful, dehumanizing, or exclusionary views, including those shared publicly by DHH ^[7], and that the donation went to the foundation, not an individual, and endorses nothing ^[9]. Cofounder Roustem Karimov told staff that people hold different personal opinions and that it is not fair to claim a monopoly and ostracize team members who disagree ^[10]. One of those describes a mistake being managed. The other describes a disagreement about taste.

The check worth keeping has two axes: does the money buy work your users can use, or placement, and is the recipient separable from a person. Work plus institution is a supplier decision, and someone in engineering can sign it. Placement plus a person is a brand decision that belongs wherever your press releases get approved. Buyers can run the same grid in reverse. Your vendor's sponsorship page is now a place your own procurement questions come from.