1Password launches 1Password for Agents so AI agents can log in without seeing passwords
Password manager 1Password on Thursday launched 1Password for Agents, a tool that lets users allow AI agents to log into their personal accounts on their behalf, without the agent ever having access to the user's credentials. TechCrunch frames it as security services trying to catch up with the access consumers are increasingly entrusting to AI agents.
The tool works by setting up communication between the agent, the user and the password manager. When an agent tries to log in for a user, a unique digital key is sent to 1Password to confirm the agent's digital identity. The user then gets an alert about the login attempt and can personally confirm the request. Once that happens, 1Password signs the agent in, filling in the credentials on the assistant's behalf, so the agent can finish whatever task it was given.
Users can pick the agent they want. TechCrunch lists Claude Duet from Anthropic, OpenAI's Dots or ChatGPT Work, Grok Bot, Meta's Muse, and agents from Town, an AI assistant startup. The company says it is working with other companies to expand the service.
In a blog post, 1Password argued: "Handing over a password, secret, or credential is a common shortcut to an agent, but can leave people with sensitive information in places they can no longer control as a copy gets saved for the next time." It added that 1Password for Agents "gives people a trusted way to delegate tasks to personal AI agents while keeping control of the passwords, secrets, and credentials those tasks require."
The launch landed on the same day Axios reported that U.S. banks have begun to detect agentic activity inside user accounts. TechCrunch says this is not necessarily a case of rogue agents pilfering accounts. It is more an example of consumers increasingly letting automated services act for them, including on financial matters. Still, the potential for agent-related problems is large, and the big issue appears to be that most banks cannot tell whether the agentic activity is tied to user requests. Bankers interviewed by Axios described the situation as "horrifying," and a Chase spokesperson told the outlet that customers "should not give their usernames and passwords to anyone."
Key facts
- 1Password launched 1Password for Agents on Thursday; it lets AI agents log into a user's personal accounts without ever having access to the user's credentials.
- The flow: the agent's digital identity is confirmed with a unique digital key sent to 1Password, the user gets an alert and confirms, and 1Password fills in the credentials to sign the agent in.
- Listed agents include Claude Duet from Anthropic, OpenAI's Dots or ChatGPT Work, Grok Bot, Meta's Muse, and agents from the startup Town; 1Password says it is working with other companies to expand the service.
- The launch came the same day Axios reported that U.S. banks have begun to detect agentic activity inside user accounts, and that most banks cannot tell if it is tied to user requests.
- A Chase spokesperson told Axios that customers "should not give their usernames and passwords to anyone."
Why it matters
People are handing AI agents more access to their accounts, and the common shortcut is to give the agent a password. 1Password argues this can leave sensitive information in places users can no longer control, because a copy gets saved for next time. 1Password for Agents is an attempt to keep the credentials with the password manager while the agent still gets the job done. The timing sharpens the point: the same day, Axios reported that U.S. banks are starting to see agentic activity inside user accounts.
Who it affects
Consumers who use personal AI agents for tasks that need logins, and who want to keep their passwords, secrets and credentials out of the agent's hands. It also touches the makers of the supported agents (Anthropic, OpenAI, Meta and Town, plus Grok Bot) and banks, which according to Axios often cannot tell whether agent activity in an account reflects a user's request.
How to use it
The user chooses the agent, such as Claude Duet, Dots, ChatGPT Work, Grok Bot, Muse or an agent from Town. When the agent tries to log in, the user receives an alert about the attempt and can personally confirm it. After confirmation, 1Password signs the agent in and fills in the credentials. No pricing, plan tiers or availability and region details for 1Password for Agents are given.
How solid is it
The account of how the tool works comes from TechCrunch's description and 1Password's own blog post, so it is the company's design as described, not an independent test. No technical detail on the unique digital key (protocol, standard, cryptography) is given. The Axios details are secondhand: which banks, how many accounts and any figures are not given beyond the stated claims and quotes. The source does not say the 1Password launch is a response to the Axios report; it says only that both happened on the same day.
Risks and caveats
The protection depends on the user confirming each login alert; the source does not describe what happens beyond that flow. Support is limited to the agents listed, with expansion to other companies described only as work in progress and no timescale or named additional partners. On the banking side, TechCrunch says the potential for agent-related problems is still large, mainly because most banks cannot tell whether agentic activity matches user requests, and Chase's advice to Axios is that customers should not share usernames and passwords with anyone.
“1Password for Agents gives people a trusted way to delegate tasks to personal AI agents while keeping control of the passwords, secrets, and credentials those tasks require.”
— 1Password, in a blog post