1Password for Agents: Agent Logins Without Handling Passwords

How it unfolded

In July, 1Password first built a similar integration for Claude inside a desktop browser: the platform filled in the password and Claude never received it. The Agents platform announced on Oct 22 extends that approach beyond a single desktop session to personal agents that are not tied to one computer, which the company calls a trust layer for personal agents.

The three-way split at sign-in works like this: when an agent reaches a login page, it first identifies itself to 1Password with its own digital key and requests the matching credential; the user sees on their own device which login is requested and for what task, and approves or denies it; once approved, 1Password fills the password or one-time code directly into the destination site's form. The agent only learns access was granted, cannot open the rest of the vault, and the user can disconnect an integration at any time.

Rollout comes in two waves: Meta's Muse and SpaceXSI's Grok Bot arrive over the days following launch, while Anthropic's Claude Duet, OpenAI's ChatGPT Work and Dots, and Town's Townie are listed as coming soon. Nine more companies, including Browserbase, Browser Use, Perplexity and Ramp, are building further integrations, and agents not on the list can join a waitlist.

On pricing and scope, the feature is included at no extra cost in Individual and Family plans on 1Password.com; 1Password starts at $3.99 per month billed annually, and new users can start with a 14-day trial. According to launch-day technical coverage, accounts on 1Password.eu and 1Password.ca are not supported yet, and the first release does not support passkey-only accounts, with the company saying it plans to add passkey support later. Safeguards vary by integration, a caveat the company left in its announcement.

Statements

1Password said in its blog post that handing a password, secret or credential to an agent is a common shortcut, but it can leave sensitive information in places the user can no longer control, as a copy gets saved for the next time; the Agents platform gives users a trusted way to delegate tasks to personal agents while keeping control of the passwords, secrets and credentials those tasks require.

1Password business chief John Torrey told PCWorld by email that the user is involved in every decision: customers decide which credential an agent can use, for which task, and for how long, and an agent cannot approve its own access. 1Password chief product officer Aashish Tripathi said on launch day that agents are starting to do real work on users' behalf, and the old model of handing over a credential and hoping for the best does not work.

The banks drew their line in the same week: JPMorgan Chase chief executive Jamie Dimon said on the bank's Oct 13 earnings call that it would not let outside agents inside customer accounts, citing the risk of rogue agents; Charles Schwab chief executive Rick Wurster then said the brokerage blocks large agents in the tens and twenties each week. A JPMorgan spokesperson told Axios that customers should not give their usernames and passwords to anyone.

Two layers of fact need to be kept apart: the public restrictions from JPMorgan and Schwab come from statements by the two companies' chief executives on earnings calls; the Axios report that several banks detected third-party agent activity inside customer accounts, with some actions appearing independent of user instructions, was relayed by Reuters on Oct 22 with the note that Reuters could not immediately verify the report.

Key facts

1. The platform is called 1Password for Agents, launched Oct 22, 2026; the sign-in step splits across three parties — agent, user and password manager — and the password is not handed to the agent.
2. The sign-in flow: the agent identifies itself with a digital key; the user approves each request on their own device; 1Password fills the password and one-time code directly; each approval covers a single credential, not the whole vault.
3. Rollout: first to arrive are Muse and Grok Bot; Claude Duet, ChatGPT Work, Dots and Townie are coming soon; nine more, including Browserbase, Browser Use, Perplexity and Ramp, are building integrations.
4. Predecessor: the July Claude integration covered only Claude inside a desktop browser; the new platform covers personal agents not tied to one desktop session.
5. Pricing: included at no extra cost in Individual and Family plans on 1Password.com; 1Password starts at $3.99 per month billed annually; new users can start with a 14-day trial; according to launch-day technical coverage, .eu and .ca accounts are not supported yet.
6. Banks the same week: JPMorgan on Oct 13 and Schwab shortly after publicly restricted outside agents from customer accounts; the Axios account-detection report was relayed by Reuters, which noted it could not immediately verify it.
7. Limits: once signed in, the agent continues its task inside the logged-in session; safeguards vary by integration; the user can disconnect an integration at any time.