A growing number of AI agents can now book trips, pay bills and fill in expense reports for you. To do that, they need to get into your accounts, which raises the security question nobody has answered well yet. 1Password thinks it has the answer. Its new platform, 1Password for Agents, lets personal AI agents log into websites without ever seeing the password they’re using.
Here’s how it works. When an agent reaches a login page, it proves who it is to 1Password using a unique digital key. You then get a request on your own device showing which login the agent wants and why. If you approve, 1Password types the credential straight into the login form, and the agent never receives it. The agent carries on with its task, and the password stays in your vault.
The problem it targets is real, if not very glamorous. Today, the easiest way to give an agent access is to paste in your password, and that password can end up stored somewhere you don’t control. 1Password’s approach replaces that with approval for each request. It’s closer to how companies already grant temporary, limited access to their own systems than to the habit of copying logins into chat windows.
The list of partners is the bigger story. 1Password says it is working with Meta on its Muse assistant, with Anthropic on Claude Duet, with OpenAI on ChatGPT Work, with SpaceXSI on Grok Bot, and with Town on its Townie assistant. A second group includes Perplexity, Ramp, Browserbase, Browser Use and KERNEL. When rival AI companies all agree to use one company’s credential system, that system starts to look like an industry standard before any official standard exists.
Questions remain. 1Password hasn’t said when each integration goes live, what it will cost, or whether you’ll need a paid 1Password subscription to use it. Anthropic’s own comments suggest its integration is still coming, not already available. The approval step protects the password, but it doesn’t limit what an agent does once it’s logged in. An agent on your banking site still has all the access your account allows.
Passkeys are another factor. As more sites drop passwords for device-based login, filling in passwords for an agent may matter less than deciding who can approve that agent’s access at all. 1Password seems to be betting on the second problem, and it’s the one worth watching.
