1Password Has a Plan to Let AI Agents Access Your Accounts Without Exposing Your Passwords - Numerama

August 27, 2024 | Source: Numerama IA
Published on October 23, 2026 at 6:08 p.m.

1Password has a plan to let AI agents access your accounts without exposing your passwords

AI vault

3 min
{"@context":"https:\/\/schema.org","@type":"Person","@id":"https:\/\/www.numerama.com\/#\/schema\/person\/66db15ee8d1210d96ceae8a348dd93d1","name":"Julien Lausson","url":"https:\/\/www.numerama.com\/author\/julienl\/","description":"A journalist concerned about the impact of technology and the digital world on society, Julien joined Numerama in 2009. Since then, he has covered topics related to copyright and piracy, as well as cyber issues, net neutrality, and privacy. He recently took an interest in space exploration and the rise of artificial intelligence.","sameAs":["https:\/\/x.com\/foxteh","https:\/\/www.numerama.com"],"image":{"@type":"ImageObject","url":"https:\/\/img.numerama.com\/www.numerama.com\/wp-content\/uploads\/2023\/12\/julien-l-1-120x120.jpg?resize=96,96\u0026key=ffa1cd20"}}
3 min
Source : Numerama avec ChatGPT
3 min
Don't see this ad anymore
Zen reading
Summarize the article
Article summary

AI-generated summary, verified by Numerama

?

We generate a summary of the article for you using AI and check it to make sure there are no errors, ensuring the authenticity of the information.

Learn more
  • 1Password unveils “1Password for Agents,” which enables AI assistants to log in without exposing passwords through an approval workflow in which 1Password fills in and then removes the credentials.
  • Deployment begins with Muse (Meta) and Grok Bot (SpaceXSI), with other integrations announced for later, with no date specified.
  • Even though passwords remain encrypted and hidden, the agent gains access to the targeted account, making it necessary to review every access in light of incidents such as the Muse vulnerability that was fixed.

Receive a summary of the important news every evening with Le Récap’

window._rmxd={theme:document.documentElement.getAttribute('data-scheme')||'light'};
1Password launched 1Password for Agents, a system that enables AI agents to connect to their users’ accounts without ever seeing the passwords. At first, only Muse, Meta’s agent, and Grok Bot, SpaceXSI’s, have access, with deployment planned in the coming days.

Password managers had to face their first major challenge with the emergence of passkeys. A second one arises today: how to harness the power of personal AI agents if they cannot access the password and username to get through a login page?

Imagine a simple scenario: you instruct your AI agent to book a flight or fill a shopping cart for you, based on criteria you have previously defined. Except that to buy either the plane ticket or the products, you need to… log in to your profile on the airline’s or e-commerce website.

1Password1PasswordWould you let an AI agent interact with your password manager? // Source: Numerama

To overcome this hurdle, password manager 1Password has introduced a solution, which was presented on October 22 in a blog post. The company also announced it on X, with a long list of partners: Muse (Meta), Grok Bot (SpaceXSI), Claude Duet (Anthropic), ChatGPT Work and dots (OpenAI), and Perplexity. Only Muse and Grok Bot benefit from it at first, with deployment planned in the coming days. The other integrations have been announced for later, with no date set.

“ Many customers have shared with us their desire to use these new personal AI assistants to become more productive, while also wanting greater control over the data the assistant has access to and enjoying the same level of trust and ease of use,” says 1Password.

To go further
1Password // Source : Numerama1Password // Source : Numerama
1Password: what is the most popular password manager worth?

A password filled in, then immediately removed

The challenge, obviously, is to open the digital vault in which the passwords are stored just enough for the AI agent to retrieve only what it needs, without jeopardizing all the other passwords. Above all, the borrowed password must be used only for a specific task, and everything must be erased afterward.

The system designed by 1Password works as follows: when the AI agent arrives at a login page, it identifies itself to the password manager using a unique digital key, to ensure that it is indeed the user’s legitimate tool. The user sees which credential the AI agent is requesting and for what purpose. It is then up to the user to approve or deny it.

Source : Capture d'écranSource : Capture d'écranSource: Screenshot

If approval is given, 1Password then fills in the login form itself. As soon as the site validates the login, the manager removes the credential. According to the company, the AI agent therefore can neither read nor reuse it. The approval itself is carried out on one of the owner’s authorized devices.

In this setup, 1Password’s vault remains out of the AI agent’s reach. “The agent cannot see the credentials, and the other passwords saved in your vault remain protected by end-to-end encryption,” says the company.However, this is not the case for the account the agent connects to.

Allow the AI agent to access your account

This makes sense. If you ask your AI agent to book a flight and give it access to your airline account so that it can complete the process, the tool will inevitably see the account’s contents and act on them. The risk therefore lies not so much with 1Password, but with the access you grant.

1Password acknowledges this in a FAQ: “An agent may be able to view information or perform actions within the connected account. Its behavior in this context depends on the agent and the website. Review the task and account before granting access.”

The pros and cons therefore need to be weighed carefully, because hiding the password does not prevent an incorrect command or the hijacking of the agent. This is not entirely theoretical: Meta had to urgently patch a vulnerability in Muse in September because it allowed attackers to take control of the agent and all its access.

The service is included at no additional cost in individual and family subscriptions. For now, it only works with accounts hosted on 1Password.com. Accounts linked to European servers (1Password.eu) or Canadian servers (1Password.ca) are not supported, and 1Password has not given any date.

Best password managers

The complete ecosystem

Proton Pass

Proton Pass logo // Source : Proton PassProton Pass logo // Source : Proton Pass
  • Generate aliases to hide your email address
  • Same group as Proton VPN
The best

1Password

1Password // Source : 1Password
  • The best-known and one of the oldest
  • Rich interface, sometimes dense for beginners
Low price

NordPass

NordPass // Source : NordPass
  • Backed by the NordVPN ecosystem
  • An atypical encryption solution
See all password managers
une comparateur meilleur gestionnaire mdp numeramaune comparateur meilleur gestionnaire mdp numerama

You have read 0 articles on Numerama this month

There is a good reason not to subscribe to

Not everyone can afford to pay for information.
That is why we keep our journalism open to everyone.

But if you can,
here are three good reasons to support our work:

  • 1 Numerama+ helps provide a free experience for all Numerama readers.
  • 2 You will enjoy an ad-free reading experience, numerous advanced reading features and exclusive content.
  • 3 Help Numerama fulfill its mission: understanding the present to anticipate the future.

If you believe in a free web and high-quality information accessible to as many people as possible, join Numerama+.

Subscribe to Numerama+
Toute l'actu tech en un clien d'oeil

All the tech news at a glance

Add Numerama to your home screen and stay connected to the future!

Install Numerama

To not miss any of the latest news, follow Numerama on Google!