1Password Introduces Password‑Free Login for AI Agents Amid Growing Security Fears

How 1Password for Agents Works

On Thursday, password manager 1Password released a new service called 1Password for Agents. The platform creates a communication channel between an AI agent, the user, and the password manager. When an agent attempts to log in on a user’s behalf, a unique digital key is sent to 1Password to verify the agent’s identity. The user receives an alert about the login attempt and can approve it. After confirmation, 1Password fills in the credentials for the agent, allowing it to complete the task without ever exposing the password to the agent.

Supported Agents and Partnerships

Users can select from a range of AI assistants, including Claude Duet from Anthropic, OpenAI’s Dots or ChatGPT Work, Grok Bot, Meta’s Muse, and agents from Town, an AI assistant startup. 1Password says it is collaborating with additional companies to broaden the offering.

Security Rationale and Company Statement

“Handing over a password, secret, or credential is a common shortcut to an agent, but can leave people with sensitive information in places they can no longer control as a copy gets saved for the next time,” the company said in a blog post. “1Password for Agents gives people a trusted way to delegate tasks to personal AI agents while keeping control of the passwords, secrets, and credentials those tasks require.”

In a blog post, 1Password explained that sharing passwords directly with agents can result in credentials being stored beyond a user’s control, and that the new tool aims to let users delegate tasks while retaining ownership of their secrets.

Bank Detection of AI Activity and Industry Reaction

The launch coincides with a report from Axios that U.S. banks have begun detecting AI‑driven activity inside customer accounts. Bankers interviewed by Axios described the situation as “horrifying,” noting that most banks cannot determine whether the activity is tied to user requests or unauthorized actions.

A Chase spokesperson told Axios that customers “should not give their usernames and passwords to anyone.”

While the activity does not necessarily indicate rogue agents stealing accounts, it reflects a broader trend of consumers allowing automated services to act on their behalf, including in financial matters. The potential for agent‑related problems remains significant, and the industry is scrambling to keep pace with the growing delegation of sensitive tasks to AI.