Personal AI agents are getting good at errands. They can turn a grocery list into an order, chase RSVPs for a party or file your expense receipts. Then they hit a login page and stop dead, waiting for you to either take over the keyboard or paste your password into a chat window. Neither option is great, and the second one is the kind of shortcut security people lose sleep over.
1Password thinks it has a fix. As UNILAD Tech reports, the password manager has launched 1Password for Agents, a platform that lets an AI agent ask for a login, has you approve it, and then fills the credentials into the website itself. The agent gets in. It never gets the password.
The short version
- 1Password announced 1Password for Agents on October 22, 2026.
- When an agent reaches a sign-in page, it requests a specific login. You approve it in 1Password, and 1Password autofills the site directly.
- Meta’s Muse and SpaceXSI’s Grok Bot integrations are rolling out first. Anthropic’s Claude Duet, OpenAI’s ChatGPT Work and dots, and Town’s Townie are listed as coming soon.
- It costs nothing extra on 1Password Individual and Family plans, but only for accounts on 1Password.com. EU and Canadian accounts are not supported yet.
- Your password and one-time codes stay hidden. The logged-in session the agent gets afterward is still real access, so approvals matter.
The problem it is trying to solve
1Password’s announcement, written by John Torrey, lays out the dilemma plainly. “When an agent reaches a sign-in page, the agent stops and asks for the credential that would allow it to sign in on your behalf,” the company wrote. You can take over the session and type the password yourself, “which is slow and tedious,” or paste it into the prompt, “which means allowing the agent to have access to your credential, potentially beyond the task at hand.”
That second habit is more common than it should be. “Handing over a password, secret, or credential is a common shortcut to an agent, but can leave people with sensitive information in places they can no longer control as a copy gets saved for the next time,” 1Password said. Once a password lands in a chat log, you have no real idea how long it lives there or who else can reach it.
Banks are already feeling the effects. On the same day 1Password launched, TechCrunch noted an Axios report that U.S. banks have started detecting agent activity inside customer accounts, and that most cannot tell whether that activity was actually requested by the customer. Bankers described the situation as “horrifying.” A Chase spokesperson’s advice was blunt: customers “should not give their usernames and passwords to anyone.”
How the sign-in handoff works
The design is a three-way conversation between the agent, you and the password manager. According to TechCrunch, when an agent tries to log in, a unique digital key is sent to 1Password to confirm the agent’s identity. You get an alert describing the request. If you approve, 1Password fills in the username, password and any one-time code straight into the site.
1Password gives a concrete example using Meta’s Muse. Ask it to create a party invitation, track RSVPs and shop for supplies on a budget, and Muse will request access to sites like RSVPify and Oriental Trading as it goes. “You choose which 1Password login it can use, and Muse will be able to get your party started without seeing the credentials or accessing anything else in your 1Password vault,” the company wrote.
There is a practical bonus too. Because the credentials stay in one vault, changing a password does not mean updating it in five different agent apps. 1Password says connected agents simply keep using the current login.
Which agents work with it
The launch list reads like a roll call of this year’s agent boom. Not all of them are live yet, though, and some early coverage blurred that distinction.
| Agent | Company | Status |
|---|---|---|
| Muse | Meta | Rolling out now, all platforms |
| Grok Bot | SpaceXSI | Rolling out now, all platforms |
| Claude Duet | Anthropic | Coming soon |
| ChatGPT Work and dots | OpenAI | Coming soon |
| Townie | Town | Coming soon, web and iOS |
| Nine more | Instinct, Browserbase, Browser Use, Dana, KERNEL, Perplexity, Ramp, Tomo, Wajo | Announced |
Claude Duet is a notable name on that list. Anthropic’s proactive agent only opened its waitlist this week, and as we noted in our look at how Claude Duet asks before spending your money, approval prompts are central to how these agents are being sold. 1Password is betting that sign-ins become the next thing people want to approve rather than hand over. 9to5Mac points out that 1Password already shipped a Claude integration in July, so this is an expansion rather than a first step.
What it does not protect you from
Keeping the password out of the agent’s hands is a real improvement, but it is worth being clear about the limits. Once 1Password fills in the login, the agent is signed in. Whatever that account can do, the agent can now do for the length of the session. Hiding the password protects the credential. It does not limit what happens after the door opens.
That is why the approval step is the part that actually matters. A careless “approve” on your bank login gives an agent the same reach as a pasted password, just without leaving a copy in a chat log. 1Password also notes that “the safeguards and controls vary by integration,” which means the experience with Muse may not match the one with Grok Bot or Townie.
Who can use it, and what it costs
1Password for Agents is included at no additional cost on Individual and Family plans for accounts hosted on 1Password.com. Accounts on 1Password.eu and 1Password.ca are not supported yet, and 1Password says availability, platforms and capabilities vary by partner. 9to5Mac reports there is currently a waitlist to get in.
It is also a clear competitive move. 1Password’s own pitch takes a swipe at browser-saved passwords, saying people who rely on them “have discovered that their agents cannot use those passwords.” If agents become a normal part of how people shop and book things, the password manager that agents can talk to safely has a real advantage. For now, 1Password is the first big name to ship it, and the rest of the industry will have to decide fast whether to follow.
Sources and further reading
- UNILAD Tech: AI assistants can now log into your accounts without seeing your password
- 1Password: Introducing 1Password for Agents
- TechCrunch: 1Password launches a way for AI agents to log in on your behalf
- 9to5Mac: 1Password launches solution for safely using logins with AI agents
- PCWorld: 1Password opens the door to AI agents
About this article: GeekBlog covers U.S. technology news, AI, phones, smartwatches and gaming. Every story is written and checked under our Editorial Policy. Spotted a mistake or have a story tip? Contact our editors.
