1Password launches Claude browser login for AI agents

1Password has launched 1Password for Claude, linking its password manager with Anthropic's Claude AI assistant.

The browser integration lets Claude use credentials stored in a user's 1Password vault without exposing the password or one-time code to the model, its memory, or Anthropic's systems. It is aimed at tasks such as booking travel and managing online accounts, where an AI agent may need to sign in across multiple sites on a user's behalf.

The move addresses a growing challenge for companies building and deploying AI agents: how to let software take real actions online without exposing the underlying secrets in plain text. In many current workflows, users either share credentials directly with the agent or step in repeatedly to complete each authentication prompt, creating a trade-off between security and automation.

Under 1Password's approach, access is granted for a single session and limited to a specific set of approved items. Once the session ends, the authorisation expires, so the agent does not retain ongoing access to the wider vault.

How it works

When Claude requests credentials for a task, the user can approve or deny access through a biometric prompt. The credentials are then injected into the target webpage through a channel controlled by 1Password, rather than passed into the model itself.

This is designed to ensure the model knows a login has been used, but does not receive the password or multifactor authentication code as part of its context. 1Password also scans the page after each autofill action to check that secrets have not been left exposed, and wipes filled values if a form submission fails before returning control to the agent.

Alongside the Claude integration, 1Password is introducing what it calls Agentic Mode for all users of its service. When a compatible AI agent takes control of the browser, the feature automatically restricts access so that only the credentials approved for the current task are available through the browser extension.

Users can see when that restricted mode is active and can cancel it at any time. During that period, nothing else in the vault is reachable by the agent.

The system also supports authenticated multi-site sessions, allowing Claude to move through several websites in a single workflow without asking the user to re-enter credentials at each stage. That reflects a broader push across the AI sector to move agents beyond text-based assistance into direct action in browsers and business tools.

Security model

Nancy Wang, Chief Technology Officer at 1Password, said the company views the issue as a new form of identity control rather than a simple extension of password management.

"We need a new security model that is purpose-built for agents, not just humans," said Nancy Wang, Chief Technology Officer at 1Password.

"The answer isn't handing agents your secrets. It is to let a user give an agent permission to use a credential without letting the agent see it. Claude knows it used your login; it does not need the password or one-time code in its context. That distinction is where trust in agents starts and the foundation we're building with Anthropic," Wang said.

The launch positions 1Password as an identity and access layer for browser-based AI agents, starting with Claude. The underlying framework is intended to work with other browser-based agents and platforms as the market develops.

That would expand 1Password's role from storing and autofilling credentials for people to governing what an AI agent can access, for how long, and in what context. The company framed that as increasingly important as AI systems begin handling practical tasks across consumer and business services.

1Password for Claude is available to 1Password users on Mac across business, family, and individual plans. Customers need the 1Password desktop app and browser extensions, along with the Claude desktop app and browser extensions.

Support for payment cards and identity details is due to be added after the initial launch. 1Password said its enterprise vault protects more than 1.5 billion credentials and secrets and is used by more than 180,000 businesses.