1Password

Record description

1Password is a credential-management company whose For Agents security model documents item-level human approval and browser-based credential filling for selected login items. A connection gives the agent developer integration key material while decryption of approved vault items occurs inside 1Password's confidential computing enclave. The user's account password and Secret Key are not passed to the developer. The extension fills matching pages in the agent-hosted browser, and prior item approvals may be reused for a limited period.

This profile matters to agent security because the company's guarantee ends at a specific boundary. The approval controls which vault item reaches a login form; it does not continuously govern everything the agent may do after the destination site creates its own authenticated session. Disconnecting the 1Password integration revokes its keys and item approvals, not necessarily the website session. The distinction is developed in the November 5 report and effect-bound approval. Neither source documents an actual breach of the service. A meaningful independent test would check revocation at both the broker and the destination site, using synthetic accounts and separately authorized high-impact actions.

Explicitly related research (1)

Declared connections