1Password launched 1Password for Agents on Oct. 22, a way for an AI agent to sign in to your accounts without ever receiving the password. According to its announcement, approval happens on your own device, and 1Password fills the form directly.

How a sign-in works

1Password's product page and announcement describe three steps.

  • The agent asks. At a login screen, it uses a unique digital key to prove its identity to 1Password.
  • You decide. You see which credential it needs and why, then approve or deny on your own device.
  • 1Password fills. It enters the password or one-time code, and the agent only sees that access was granted.

Once the website accepts the login, 1Password says it removes the credential so the agent cannot read or reuse it.

What it does not cover

1Password's FAQ says connecting an agent does not open your whole vault. The agent requests one login for one task, and your other saved passwords stay protected by end-to-end encryption.

The limit is what happens after sign-in. The FAQ says an agent may see information or take actions in the account, depending on the agent and the site, and tells you to review the task and the account before approving. Our inference: a fast approval is the weak point, because the password is safe but the signed-in session is not.

Who gets it and what it costs

1Password states that 1Password for Agents is included in all Individual and Family plans. It gives no separate price.

  • Rolling out "over the coming days": Muse and SpaceXSI Grok Bot, across all platforms.
  • Named partners, not yet listed as available: Claude Duet, ChatGPT Work, dots and Town. The page offers a waitlist.
  • Varies by integration: setup, region, device, sign-in method and how often you are asked to approve.

Anthropic's Ami Vora said in the announcement that "soon 1Password will complete the sign-in" for Claude Duet, so that pairing is not live yet.

Why it matters

Pasting a password into an agent leaves a copy somewhere you cannot control, which 1Password's release names as the problem. This avoids creating that copy. It does not decide which sites an agent should be trusted with.

For accounts that support them, passkeys are a separate way to cut password risk. See also AI & Apps.