1Password just solved the one problem that made AI agents dangerous to use: handing over your passwords. The password manager launched a Claude integration on Thursday that lets Anthropic's AI sign into websites using stored credentials without ever seeing them. The architecture is zero-exposure, meaning the password, one-time code, and any other secret never enter Claude's context, memory, or Anthropic's systems.
Here is how it works. When Claude hits a login page during a browser task, it requests the specific credential it needs. 1Password shows the user which login is being requested and why. After biometric approval (fingerprint or face scan on the user's device), 1Password injects the credential directly into the destination page, bypassing Claude entirely. The AI never sees the vault item.
"Claude knows it used your login; it does not need the password or one-time code in its context," Nancy Wang, CTO of 1Password, said in the announcement. "That distinction is where trust in agents starts and the foundation we're building with Anthropic."
Access is scoped to the current task and expires when the task finishes. If a form submission fails, 1Password wipes any filled values before returning control to the agent. The system also checks after each autofill that secrets were not exposed on the page.
1Password also introduced Agentic Mode, a browser extension feature that locks down the vault whenever any compatible AI agent takes control of the browser. The interface hides, and only credentials explicitly approved for that task remain reachable.
Agentic Mode works even without the Claude integration enabled and supports agents beyond Claude. The integration is available now for Mac users on business, family, and individual plans. It requires the 1Password desktop app and browser extension alongside the Claude desktop app and browser extension.
Support for payment cards and identity information is planned for a later update. The partnership was first outlined in March, when 1Password said Claude would gain consent-based access to vault items. This release ships that plan as a working Mac feature, with the company positioning it as the foundation for similar integrations with other browser-based AI agents.
1Password claims it is the first browser integration to let AI agents access credentials without granting direct access. The company is betting that as agents move from answering questions to acting on users' behalf in browsers, the old model of handing over secrets no longer works.
