1Password launches a way for AI agents to log in on your behalf without seeing your password

Concerns have swirled over the access that consumers are increasingly entrusting to AI agents. Now, security services are trying to catch up.

Password manager 1Password on Thursday launched a new tool by which users can allow agents to log into their personal accounts on their behalf, without the agent ever having access to a user’s credentials.

The new platform, dubbed 1Password for Agents, accomplishes this by creating a system of communication between the agent, the user, and the password manager. When an agent attempts to log in on a user’s behalf, a unique digital key is sent to 1Password to confirm the agent’s digital identity. The user is then sent an alert about the login attempt and can personally confirm the request. 1Password then signs in the agent, filling in the credentials on the digital assistant’s behalf, which allows it to log in and complete whatever task is at hand.

1Password for Agents allows users to choose their agent of choice — whether that’s Claude Duet from Anthropic, OpenAI’s Dots or ChatGPT Work, Grok Bot, Meta’s Muse, or agents from Town, which is an AI assistant startup. The company says it is working with other companies to expand the service.

“Handing over a password, secret, or credential is a common shortcut to an agent, but can leave people with sensitive information in places they can no longer control as a copy gets saved for the next time,” the company said in a blog post. “1Password for Agents gives people a trusted way to delegate tasks to personal AI agents while keeping control of the passwords, secrets, and credentials those tasks require.”

Online agentic activity has increasingly unsettled major institutions. Indeed, 1Password’s new platform is launching on the same day that Axios reports that U.S. banks have begun to detect agentic activity inside user accounts.

This isn’t necessarily a case of rogue agents pilfering accounts but, rather, an example of how consumers are increasingly allowing automated services to act on their behalf, including on financial matters. However, the potential for agent-related problems is still large. The big issue appears to be that most banks cannot tell if the agentic activity is tied to user requests or not.

Bankers interviewed by the outlet described the situation as “horrifying,” and a Chase spokesperson interviewed by Axios additionally told the outlet that customers “should not give their usernames and passwords to anyone.”

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Lucas Ropek

Senior Writer, TechCrunch

November 4

Boston

Buy One Pass, Get a Second Free

Cover more ground at TechCrunch’s ultimate founder bootcamp of the year by bringing your co-founder or partner for free

Book before the BOGO deal expires

Airbnb limits chores for guests, sparking backlash from hosts

Lauren Forristal

Tesla starts Optimus robot production in California as profit falls 43%

Kirsten Korosec

Sean O'Kane

The internet is having a very bad cybersecurity day

Sarah Perez

People are using AI to make their smart TVs dumb again

Sarah Perez

Anthropic says its workforce has become less junior and is spending more time in meetings

Anthony Ha

Replit makes OpenAI its default over Anthropic, CEO says

Kirsten Korosec

Lucas Ropek

Rebecca Bellan

Mark Wahlberg wants to take on the longevity-startup crowd with an affordable gym concept

Connie Loizos