1Password Funding Row Shows Open Source Is Political

1Password has found itself in an uncomfortable open-source argument after pledging money to Omarchy, a Linux distribution associated with David Heinemeier Hansson, better known as DHH. The Verge reported that the password-manager company faced customer and internal employee backlash after becoming a corporate patron of the Omacom Foundation.

The foundation announced that 1Password and 37signals would each contribute $100,000 a year for three years, taking its funding to $12.6 million. On paper, that looks like normal open-source sponsorship. The controversy comes from DHH’s divisive political writings and the fear among critics that corporate support gives social legitimacy to more than the software project itself.

This is a difficult story because two things can be true at once. Open-source projects need sustainable funding, and companies that rely on developer communities should contribute back. But sponsorship is never just a bank transfer. It says something about what a company is willing to stand beside, especially when the sponsored project is closely identified with a public figure.

For 1Password, the trust issue is even sharper because it is a security company. People do not treat password managers like ordinary apps. They store the keys to personal lives, businesses, financial accounts and sensitive systems. When a trust-based company makes a public funding decision, customers naturally read it through the lens of values and judgment.

The company has reportedly tried to frame the support as funding for a foundation and a Linux project, not an endorsement of DHH’s views. That distinction may be technically correct, but users often do not separate infrastructure, leadership and public identity so neatly. Open source has always been social, not just technical.

This is also part of a wider shift. Open source is becoming more important to AI, developer tools, operating systems and security infrastructure. Nvidia’s open AI push through Hugging Face shows how strategic open ecosystems have become. When more money enters these communities, questions about governance, influence and values become harder to avoid.

There is a practical lesson for technology companies. Sponsorship decisions need due diligence beyond download numbers and developer enthusiasm. Who controls the project? What governance exists? How are funds allocated? What public risks come with the association? Those questions are now part of brand risk management.

The 1Password row does not mean companies should stop funding open source. That would be the wrong lesson. The better lesson is that open-source funding has matured into public infrastructure politics. Money can strengthen projects, but it can also test the trust between companies, employees and users.