1Password launches a way for AI agents to log in without seeing your password

Password manager 1Password on Thursday, October 22, introduced a new tool called 1Password for Agents. It lets users allow artificial intelligence (AI) agents, which are programs that carry out tasks on a person's behalf, to log in to their personal accounts without the agent ever having access to the user's credentials. The launch comes amid growing concern over the access consumers are increasingly entrusting to AI agents.

How it works

The system relies on communication between the agent, the user and the password manager. When an agent tries to log in for a user, a unique digital key is sent to 1Password to confirm the agent's digital identity. The user receives an alert about the attempt and can confirm it personally. 1Password then fills in the credentials on the agent's behalf, allowing it to sign in and complete the task.

Users can pick from several agents, including Anthropic's Claude Duet, OpenAI's Dots and ChatGPT Work, Grok Bot, Meta's Muse, and agents from Town, an AI assistant startup. The company says it is working with other firms to expand the service.

In a blog post, 1Password said that handing over a password is a common shortcut for agents, but it can leave sensitive information in places people can no longer control, since a copy is saved for next time.

Banks detect agent activity

On the same day, Axios reported that U.S. banks have begun to detect agent activity inside customer accounts. This is not necessarily a case of rogue agents raiding accounts; rather, it shows consumers increasingly letting automated services act for them, including on financial matters. Still, the potential for problems remains large, because most banks cannot tell whether such activity is tied to a user's request. Bankers interviewed by Axios described the situation as "horrifying," and a spokesperson for Chase told the outlet that customers should not give their usernames and passwords to anyone.