1Password for Agents: what it is and how to set it up

1Password for Agents is a sign-in layer for personal AI agents: when an agent hits a login page, it asks 1Password for the credential, you approve on your own device, and 1Password fills the password into the page so the agent never receives it. It's included at no extra cost on 1Password Individual and Family plans, with Grok Bot and Meta's Muse first in line and Claude Duet, ChatGPT Work and OpenAI's Dots listed as coming soon.

The post that launched it

On Thursday, @1Password announced the platform with a 39-second demo and a one-line pitch: "1Password for Agents gives your agents access without giving up your passwords." The post names Claude, OpenAI and Perplexity among the companies it built with, and says agents can't touch a vault unless you opt in to a connector.

This blog covered an early version of the idea in September, when Grok Bot started filling logins from 1Password. That was a single bot's integration. The new launch is one approval system that most of the big consumer agents are signing up to use, so you approve logins in one place whichever agent is asking.

How it works

The flow is the same for every agent, going by 1Password's product page and its partner developer guide. When the agent reaches a sign-in form, it sends a request and identifies itself to 1Password with a unique digital key. Your phone or desktop then shows which account the agent wants and why. You approve or deny, and if several saved logins match, you pick which one it gets.

After you approve, 1Password types the credential into the page itself. The agent ends up with a signed-in session and never sees the password. If it creates a new account during a task, that login gets saved to your vault.

The agent can't browse your vault, only the login it asked for. How often you get asked depends on the integration.

Who it works with, and what it costs

1Password didn't give dates for the "coming soon" partners. SiliconANGLE reports that nine more companies are building integrations, Perplexity and Browserbase among them.

On price, it's free for Individual and Family accounts on 1Password.com. MacRumors puts 1Password itself at $3.99 a month billed annually, and there's a 14-day trial.

How to set it up

For most people there's nothing to switch on yet. To be ready when your agent goes live:

• You need a US Individual or Family account on 1password.com. Accounts on 1Password.eu and 1Password.ca aren't supported at launch.
• Join the waitlist on 1Password's agent integrations page.
• Connect once from inside the agent: pick "Connect 1Password" in its settings and approve the consent screen on 1password.com.
• Use a Chromium browser such as Chrome, Edge or Brave, since the fill runs through the 1Password browser extension.
• Put the logins you want the agent to use in your own Personal or Private vault. Shared vaults aren't supported, and neither are passkeys, payment cards or addresses. Usernames, passwords and one-time codes are what it handles.

If you already use Claude in Chrome, you've seen the earlier version: 1Password shipped a Claude browser integration in July. The Claude Duet agent Anthropic released this week already asks before it signs in anywhere.

My read

I like that the approval happens in the password manager and not in the chat. The model that just read a stranger's web page shouldn't be the one deciding whether a credential gets used.

The timing helps too. The same day, Axios reported that US banks have started spotting agent activity in customer accounts, and most can't tell whether the customer asked for it. That confusion comes from people pasting passwords into chat windows. A signed request from a known agent, approved by a person, gives a bank's fraud team something to check.

For businesses, the catch is that this is a consumer product. Business and shared vaults aren't part of the launch. So if someone on your team wants an always-on agent like Dots working in a vendor portal, it will run on their personal account for now. Decide whether you're fine with that before it happens by default.

What this means for your business

The big agent vendors now agree that an agent can use a login without holding the password. Before anyone on your staff connects one, write down which logins an agent should ever touch, and ask which tasks need an agent in the first place. Plenty of portal work is a weekly export that a proper API connection handles better. New Face Design's free process audit sorts your recurring tasks into those buckets. Start here.