1Password announced 1Password for Agents on October 22, 2026, via BusinessWire: when a personal agent doing work for you reaches a login, your password no longer has to pass through its hands. At the sign-in form, the agent proves its identity to 1Password with its own unique digital key; a request then appears on your device naming the credential it needs and why, and once you approve, 1Password fills the username and password straight into the form itself, removing the credential after the site accepts the login. The agent never sees or stores the password, and one-time MFA codes travel the same managed channel.
This answers a shortcut that is becoming a habit: hand a task to an agent and some step stalls at a login, so the easiest move is pasting the password into the chat, after which nobody can say where that copy ends up next time. As proactive agents like Claude Duet, which takes on work before you ask multiply, the more important the work they can do, the less the login step can rest on pasted passwords.
Access is granted one session at a time, and the key stays with you
Unlike blanket authorization, access here is issued per session and per item: an approval covers this task and this credential only, does not carry over, and the agent cannot approve its own access. The rest of your vault stays invisible to it. Chief product officer Aashish Tripathi put it this way: the old model of handing over a credential and hoping for the best no longer works, and an agent should be able to finish the job it was given without getting permanent access to everything behind the account. It is the same instinct as retail platforms capping what an agent may spend: let it in the door, but cut the permission small and short.
It seals off the password, not what happens after sign-in
The boundary deserves stating: keeping the password secret does not make everything after sign-in safe. Once you approve, what the agent can see and do inside the account depends on the agent and the site, so the thing to check before approving is exactly whether this task belongs in this account. There is also the practical risk of approval fatigue: if every step needs a tap on the phone, many people will be approving blind by the third prompt, and the trust layer ends up resting on human attention after all.
On availability, the feature is included in 1Password Individual and Family plans, with Meta's Muse and SpaceXSI's Grok Bot rolling out across platforms in the coming days; Claude Duet, ChatGPT Work, Dots and Town's Townie are named partners still being integrated, with Browserbase, Perplexity, Ramp and others to follow. It grows out of the integration first built for Claude in July, this time opening the same approval logic to the whole personal-agent ecosystem.
