1Password for Agents Lets AI Assistants Log In to Sites Without Ever Seeing Your Passwords

Summary

1Password launched a feature that lets AI agents such as Meta’s Muse, OpenAI’s Dots, and Grok Bot sign in to websites using credentials stored in your vault. The agent never receives the username, password, or vault contents. Passwords and one-time codes are injected through a secure channel, and access is limited to approved items for a single session.

Why it matters

As more people hand off shopping and booking tasks to AI agents, this is a practical answer to concerns about pasting passwords into a chatbot.

HTD Says

If you are going to let an AI agent log in for you, this is the setup you might want, because the bot gets session access and never sees the password. Just yesterday, I covered the new Walmart Shopping Bot, which will do your shopping for you within the guardrails you set. Of course, it is limited to Walmart properties. Now, 1Password lets these shopping bots and other AI assistants autonomously and securely log into sites you frequent.

I’m not quite there yet when it comes to letting even one-time codes log me into a site I know. Perhaps you can chalk this up to the “what could possibly go wrong” category. I love the move to 2FA (two-factor authentication) and passkeys (instead of passwords), but even that seems to be a struggle in my family.

While intriguing, I’m still sticking with Bitwarden for now (even though I was a 1Password family subscriber before). But I realize this type of feature will be coming. I’m interested to see how Apple approaches this, since they claim to be quite privacy-forward.

Source:

Engadget