Use 1Password to sign in to sites with supported agents

Learn how to use 1Password to fill logins when your personal agent needs to sign in.

Some tasks you may want to delegate to your personal agent require signing in to complete, like booking a flight, making an appointment, or shopping for groceries. 1Password can fill your logins when your agent needs to sign in, so you don’t have to share your passwords with the agent.

With 1Password for Agents, you can:

  • Let your agent use 1Password to complete tasks that require signing in. 1Password fills your username, password, and one-time passwords directly into the website’s sign-in form in the agent’s browser, so you don’t need to enter them in the agent’s chat.
  • Stay in control of what your agent can access. 1Password shows you which agent is asking to sign in and suggested logins for the website. You review the request and choose whether to approve.
  • Access your logins from one trusted place across multiple agents. Store all the logins you want your agents to use in 1Password, so your passwords stay organized and protected in one place and you can adopt new agents without starting over.
  • Change your mind any time. Disconnect the integration when you no longer want an agent to sign in with 1Password.

When 1Password fills a login, the agent app makes sure the agent can’t see the sign-in page. Learn more about how 1Password fills your logins and how 1Password and our partners protect your credentials.

Tip

1Password for Agents is opt-in only. You’ll need to connect 1Password to a supported agent to use this feature. 1Password for Agents currently supports Muse, by Meta. Join the waitlist to be notified when other agents are ready.

Before you begin

To use 1Password for Agents, you’ll need:

Step 1: Connect 1Password to your agent

To get started, follow the steps to connect 1Password to Muse, then approve the connection in 1Password. Connecting 1Password lets your agent ask 1Password to sign in. It doesn’t give the agent access to your 1Password vaults.

  1. In Muse, go to Settings > Connectors and search for 1Password.
  2. Next to 1Password, select Connect, then select Connect in the next window.
  3. Sign in to the account you want to use with Muse on 1Password.com and select Allow to approve the connection.

You can connect one Muse account per 1Password account. If you connect a second Muse account, the first disconnects.

Step 2: Ask your agent to sign in to a website

Ask your agent to use 1Password to complete a task that requires signing in to a website. For example:

  • Book a trip or vacation, including accommodations, flights, and rental vehicles.
  • Schedule an appointment based on your Google Calendar availability.
  • Order groceries with the preferences and restrictions that matter to your family.

When your agent needs to sign in, it prompts you to use 1Password. 1Password then shows you an approval prompt that includes:

  • Which agent is asking.
  • A suggested Login item for the task.

Review the suggested login or search for a different login, then approve the request. You’ll be taken back to your agent app while 1Password fills the approved login and submits the sign-in form.

The website decides how long the agent stays signed in, just like it would if you signed in normally. If you don’t want your agent to stay signed in after it finishes a task, ask it to sign out of the website.

The website may still require additional verification, such as multi-factor authentication. The agent can continue once sign-in succeeds. Some websites block automated access.

Tip

1Password for Agents currently supports filling usernames, passwords, and one-time passwords from Login items stored in your Personal or Private vault. Passkeys, Login items that rely on sign-in providers, other item types, and shared vaults aren’t yet supported. Learn how to move or copy an item if it’s stored in another vault.

Get help

If you want to disconnect 1Password from your agent

If you no longer want your agent to sign in using 1Password, disconnect 1Password in your agent app.

Disconnecting removes existing approved login requests and stops the agent from continuing to use the integration to sign in. Refer to your agent app’s documentation for steps on how to disconnect integrations.

If the approval prompt shows no suggested logins

If the approval prompt from 1Password shows no suggested logins:

  • Confirm the item you want to use is in your Personal or Private vault. 1Password for Agents can’t access items in other vaults.
  • Open the item in 1Password and confirm its website matches the website you’re trying to sign in to. Update the website on the item if it has the wrong website or no website saved in it.
  • Make sure the item is a Login item with a username and password. Passkeys and Login items that rely on sign-in providers like Google or Facebook aren’t yet supported.

If the agent reports the login is no longer available

If the agent reports your login is no longer available, its approval may have expired. Prompt the agent to sign in again and approve a new request to use the login.

If you don’t see the 1Password connector

If you don’t have the option to connect your agent to 1Password, make sure you’re using the latest version of the agent app.

Appendix

How 1Password fills your logins

After you connect an agent, it can ask 1Password to sign in when it needs to complete a task, instead of requiring you to enter your password directly into the agent’s chat.

If a request comes from a partner app that 1Password recognizes, 1Password shows you a prompt that names the requesting app and suggested logins for the website the agent wants to sign in to. You can approve, choose a different Login item to use, or deny the request.

If you approve a request, the 1Password browser extension in your agent’s browser fills your username, password, and one-time password directly into the website’s sign-in form outside the agent’s view, then submits the form.

1Password only fills and submits the sign-in form. After your agent is signed in, the website manages the session the same way it would in your own browser. Some websites keep you signed in for a long time, while others sign you out after a few minutes of inactivity. You can ask the agent to sign out of the website when the task is complete.

The agent can only request that 1Password prompt you to sign in. It can’t approve its own sign-in requests through 1Password or access the information stored in your 1Password vaults.

After you approve an item, the agent may then continue to use 1Password to sign in to the website with it. How often you need to approve again varies by integration.

How 1Password and the agent app protect your credentials

1Password and the agent app each have a role in protecting your logins. All 1Password for Agents providers have signed an agreement to uphold shared security principles with 1Password and passed a security review.

1Password makes sure that only partner agents that you have connected to your account can make requests to sign in, and that every sign-in request requires your explicit approval through a supported 1Password app. Your credential remains encrypted until it needs to be used to sign in, at which point 1Password securely delivers it to the 1Password browser extension in the partner’s environment through our confidential computing platform.

The partner app is responsible for storing secret key material that identifies the connection you set up in an encrypted secret store, and for making sure the agent can’t see the sign-in page while 1Password fills and submits your login.

Learn more



Published: