AI agents can now order groceries, book trips and fill in forms for you. To do that, they need to log in to your accounts, and the easy way is to paste your password into the chat. That is also the risky way: the password can end up in chat history, agent memory or logs, and a prompt-injection attack or a breach at the agent provider takes it with them.

On 22 October 2026, 1Password launched 1Password for Agents , a way for supported agents to sign in for you while the password stays in your vault. Here is what it does, what it doesn't, and a checklist I'd follow before approving any agent login.

How it works

The agent asks. At a sign-in page, the agent identifies itself to 1Password with its own digital key and requests the login for that site.

You decide. You see which login it wants and why, and approve or deny on your own device. If several logins match, you pick one.

1Password signs in. 1Password fills the password or one-time code directly into the form ("Agentic Autofill").…