Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

24.10.26

1Password for Agents: AI Logs In, Never Sees Client Passwords


1Password for Agents lets an AI agent log in to a website for you without ever seeing the password. The agent asks, you approve in 1Password, and 1Password types the login straight into the site.

If you've ever been tempted to paste a client's password into an AI chat so it can "just finish the task," this is the safer way. Here's how it works, who can use it today, and what I'd tell a client.

The Problem It Solves

An agent is an AI that does tasks on its own, like filling in a form or checking an order status, instead of only answering questions. Agents are getting good at this. But the moment one hits a login page, it stops.

1Password's announcement on October 22, 2026, describes the two bad options you have today. You take over and type the password in yourself every time, which is slow. Or you paste the password into the prompt, which gives the agent your login "potentially beyond the task at hand."

The post also points out that agents can't use passwords saved in your browser or written in notes. So without something like this, you keep getting pulled back in.


How 1Password for Agents Works

When the agent reaches a login, it asks for the credential it needs. You get the request in 1Password, check which login it wants, and approve it. Then 1Password fills in the username and password directly on the site. The agent never gets the password or the one-time code.

In 1Password's own example with Muse, you pick which login the agent can use, and it doesn't get anything else in your vault. You can also disconnect the integration at any time.

There's a nice side effect for anyone who changes passwords often. Your logins stay in one vault, so when a password changes, you update it once and every connected agent uses the new one.

Which AI Agents Work With It

Not all at once, and this is where I'd be careful with clients.

Two integrations are "rolling out over the coming days": Muse from Meta, and Grok Bot from SpaceXSI. Anthropic's Claude Duet, OpenAI's ChatGPT Work and dots, and Townie from Town are "coming soon." A longer list, including Perplexity, Browserbase, Browser Use and Ramp, is also marked "coming soon."

1Password adds that "the safeguards and controls vary by integration." So check each agent's own setup before you rely on it.

Is It Free?

For many people, yes. 1Password says it's available "at no additional cost" for Individual and Family accounts on 1Password.com.

Two limits. Accounts on 1Password.eu or 1Password.ca aren't currently supported. And the post only mentions Individual and Family accounts, so don't promise it to a client whose team uses a 1Password Business account.


What This Means for VAs

More clients are going to want an AI agent set up for them. Logins are the scary part of that job, and now there's a clear rule you can offer: the agent asks, a human approves, and nobody pastes a password anywhere.

Here's how I'd put it in practice. Write one line into your client SOP (standard operating procedure, your written how-we-do-things doc): "AI agents get logins through 1Password approval only, never a pasted password." Then list which agent the client uses and whether it's live yet or still "coming soon."

If your client is waiting on Claude Duet or ChatGPT Work, you have time to tidy their vault first. Remove old logins and name items clearly, so the right one is easy to spot when an approval request comes in.

You become the person who makes the AI safe to use. That's a skill clients will pay for.

If you're setting up agents for clients, tell me which one they picked.

1Password for Agents lets an AI agent log in to a website for you without ever seeing the password. The agent asks, you approve in 1Passwor...