Some tasks you may want to delegate to your personal agent require signing in to complete, like booking a flight, making an appointment, or shopping for groceries. 1Password can fill your logins when your agent needs to sign in, so you don’t have to share your passwords with the agent.
With 1Password for Agents, you can:
- Let your agent use 1Password to complete tasks that require signing in. 1Password fills your username, password, and one-time passwords directly into the website’s sign-in form in the agent’s browser, so you don’t need to enter them in the agent’s chat.
- Stay in control of what your agent can access. 1Password shows you which agent is asking to sign in and suggested logins for the website. You review the request and choose whether to approve.
- Access your logins from one trusted place across multiple agents. Store all the logins you want your agents to use in 1Password, so your passwords stay organized and protected in one place and you can adopt new agents without starting over.
- Change your mind any time. Disconnect the integration when you no longer want an agent to sign in with 1Password.
When 1Password fills a login, the agent app makes sure the agent can’t see the sign-in page. Learn more about how 1Password fills your logins and how 1Password and Grok Bot protect your credentials.
Tip
Before you begin
To use 1Password for Agents, you’ll need:
An individual or family account on 1Password.com. Team accounts, business accounts, and accounts on 1Password.ca or 1Password.eu aren’t currently supported.
An account with a supported agent app.
The 1Password app installed on the same computer or mobile device as your agent app (version 8.12.42 or later):
The logins you want your agent to use saved as Login items in your Personal or Private vault. 1Password can fill usernames, passwords, and one-time passwords from these items.
Passkeys, Login items that rely on sign-in providers, other item types, and shared vaults aren’t yet supported. Learn how to move or copy an item if it’s stored in another vault.
Connect 1Password to your agent
Choose your agent and follow the steps to connect it to 1Password.
Connecting 1Password lets your agent ask 1Password to sign in. It doesn’t give the agent access to your 1Password vaults.
Appendix
How 1Password fills your logins
After you connect an agent, it can ask 1Password to sign in when it needs to complete a task, instead of requiring you to enter your password directly into the agent’s chat.
If a request comes from a partner app that 1Password recognizes, 1Password shows you a prompt that names the requesting app and suggested logins for the website the agent wants to sign in to. You can approve, choose a different Login item to use, or deny the request.
If you approve a request, the 1Password browser extension in your agent’s browser fills your username, password, and one-time password directly into the website’s sign-in form outside the agent’s view, then submits the form.
1Password only fills and submits the sign-in form. After your agent is signed in, the website manages the session the same way it would in your own browser. Some websites keep you signed in for a long time, while others sign you out after a few minutes of inactivity. You can ask the agent to sign out of the website when the task is complete.
The agent can only request that 1Password prompt you to sign in. It can’t approve its own sign-in requests through 1Password or access the information stored in your 1Password vaults.
After you approve an item, the agent may continue to use 1Password to sign in to the website with it for up to 30 days. After 30 days, the agent can’t use the approval and must ask you to approve a new request.
How 1Password and the agent app protect your credentials
1Password and the agent app each have a role in protecting your logins. All 1Password for Agents providers have signed an agreement to uphold shared security principles with 1Password and passed a security review.
1Password makes sure that only partner agents that you have connected to your account can make requests to sign in, and that every sign-in request requires your explicit approval through a supported 1Password app. Your credential remains encrypted until it needs to be used to sign in, at which point 1Password securely delivers it to the 1Password browser extension in the partner’s environment through our confidential computing platform.
The partner app is responsible for storing secret key material that identifies the connection you set up in an encrypted secret store, and for making sure the agent can’t see the sign-in page while 1Password fills and submits your login.
Learn more
Was this article helpful?
Glad to hear it! If you have anything you'd like to add, feel free to contact us.
Sorry to hear that. Please contact us if you'd like to provide more details.