1Password launched 1Password for Agents on October 22. An agent asks for a login, you approve it, and 1Password fills it in so the agent never sees the password. It's free for Individual and Family accounts on 1Password.com. Canadian 1Password.ca accounts aren't supported yet.
AI agents keep hitting the same wall: a sign-in page. 1Password’s answer launched on October 22. With 1Password for Agents, an agent asks for a login, you approve the request, and 1Password fills the credentials straight into the site. The agent never sees the password or the one-time code.
How it works
1Password’s announcement lays out the flow:
- An agent reaches a sign-in page and asks 1Password for a specific login.
- You review the request and approve or deny it in 1Password.
- The agent verifies itself with its own digital key, according to MacRumors.
- 1Password fills the login into the form. The agent continues without the credential ever entering its context.
You choose which login each agent can use, and you can disconnect an integration at any time. 1Password says the agent can’t reach anything else in your vault. It also says the safeguards vary by integration, since each one is built with the agent’s maker.
Which agents it works with
| Agent | Status |
|---|---|
| Meta Muse | Rolling out over the coming days |
| Grok Bot | Rolling out over the coming days |
| Anthropic Claude Duet | Coming soon |
| OpenAI ChatGPT Work and Dots | Coming soon |
| Town’s Townie | Coming soon (web and iOS) |
1Password also lists integrations coming later with Browserbase, Browser Use, Perplexity, Ramp and several smaller agent makers.
What it costs and who can use it
It’s included at no extra cost for 1Password Individual and Family accounts on 1Password.com. Accounts on 1Password.ca and 1Password.eu aren’t supported yet. The announcement doesn’t mention 1Password Business or Teams plans.
What it means if you run a small team
This fixes the worst habit agents create. Without something like this, you either take over the agent every time it hits a login, or you paste a password into a chat. The second option puts a live credential in a model’s context. An approve-and-fill step is the safer default, and it’s the same design Anthropic says Claude Duet uses for credentials.
Canadian teams should check their account region. If your company signed up on 1Password.ca, this feature isn’t available to you yet. Check the URL you sign in at before you plan around it.
Keep work logins out of personal vaults. The launch covers Individual and Family accounts. If you connect an agent to a personal vault that holds company logins, those logins sit outside your admin controls. Wait for Business support, or keep agent-accessible work accounts few and low-risk.
Approve narrowly. Grant each agent the one login a task needs. If an agent asks for your bank or payroll login to plan a dinner, deny it.