Dev.to Security πŸ” Cybersecurity πŸ‘ 0 πŸ“– 2 min read

How to let an AI agent log in without giving it your password (1Password for Agents, Oct 2026)

AI agents can now order groceries, book trips and fill in forms for you. To do that, they need to log in to your accounts, and the easy way is to paste your password into the chat. That is also the risky way: the passwor

AI agents can now order groceries, book trips and fill in forms for you. To do that, they need to log in to your accounts, and the easy way is to paste your password into the chat. That is also the risky way: the password can end up in chat history, agent memory or logs, and a prompt-injection attack or a breach at the agent provider takes it with them.

On 22 October 2026, 1Password launched 1Password for Agents, a way for supported agents to sign in for you while the password stays in your vault. Here is what it does, what it doesn't, and a checklist I'd follow before approving any agent login.

How it works

  1. The agent asks. At a sign-in page, the agent identifies itself to 1Password with its own digital key and requests the login for that site.
  2. You decide. You see which login it wants and why, and approve or deny on your own device. If several logins match, you pick one.
  3. 1Password signs in. 1Password fills the password or one-time code directly into the form ("Agentic Autofill"). The agent only learns that access was granted. It never receives the password and can't browse the rest of your vault.

Which agents support it (as of 24 Oct 2026)

Agent Made by Status on 1Password's page
Muse Meta Rolling out over the coming days
Grok Bot SpaceXSI Rolling out over the coming days
Claude Duet Anthropic Coming soon
ChatGPT Work and dots OpenAI Coming soon
Townie Town Coming soon

1Password says it works only with supported integrations, not every AI tool, and there is a waitlist for other agents.

What it costs

There's no separate price. 1Password says it's included in all Individual and Family plans. On 1Password's pricing page (24 Oct 2026, USD, billed yearly):

  • Individual: $3.99/month.
  • Families (up to 5 people): $5.99/month.
  • New customers buying directly: first-year prices of $2.99 and $4.49.
  • Free trial: 14 days, no card required.

The catch: it hides the password, not the account

1Password's own FAQ says an agent may be able to see information or take actions inside an account once it's signed in. If you approve a login to your airline account, the agent can do whatever that account allows. Banks are uneasy too: TechCrunch cited an Axios report that US banks are seeing agent activity they can't attribute to the customer.

Checklist before you approve an agent login

  1. Use the narrowest account. Pick one with no saved card, or a low-limit card.
  2. Keep 2FA on. Let the password manager fill the code instead of disabling it.
  3. Approve per task, not forever. Deny anything you didn't ask for.
  4. Keep email and banking out for now. Email can reset every other password.
  5. Check the account afterwards. Look at orders, sent messages and connected apps.

The full guide, with sources and an FAQ, is on Kuponaut: 1Password for Agents: how to let an AI agent log in without giving it your password.

Sources: 1Password press release and product page (22–24 Oct 2026), TechCrunch, MacRumors, 9to5Mac. No affiliate links in this post.

πŸ“° Read the original article on Dev.to Security

Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes β€” full credit and traffic to the original publisher.