1Password just shipped a browser integration that lets Claude log into your accounts without ever seeing your passwords. According to The Verge AI, the feature is called 1Password for Claude, and it’s live now for Mac users across business, family, and individual plans.
The pitch is simple. You want Claude to book a flight or clean up an online account, but every one of those tasks hits a login wall. Until now, that meant you take the wheel back, type the password, hand control back to the AI. 1Password wants to remove that handoff without handing Anthropic your vault.
How the Zero-Exposure Framework Works
- Credentials get injected, not shown. The company built what it calls a “zero-exposure security framework.” It pushes the needed login details through a secure channel the Claude agent can’t read. The AI can use your password. It can’t see it. Same goes for MFA one-time codes.
- Access is granted per task, not per session. Claude doesn’t get a standing key to your vault. Each request is scoped to a single task, and you approve or deny it with one biometric prompt. That’s still an interruption, but a much lighter one than manually signing in.
- The vault locks down the moment an agent takes over. “The moment an AI agent takes control of the browser, 1Password locks down automatically, limiting access to only the credentials explicitly granted for the current task,” the company said in its press release. “Nothing else in the 1Password vault is reachable.”
- Post-autofill scanning. After every autofill, 1Password scans the page to confirm nothing from the form submission is left exposed before Claude gets control back. A small detail, but it tells you where their threat model sits.
What You Need to Run It
The requirements list is longer than most launches:
- macOS only at launch
- 1Password desktop app and browser extension
- Claude desktop app and browser extension
- An active 1Password plan (any tier: business, family, individual)
No Windows. No Linux. No mobile. If you’re not already deep in both ecosystems, this isn’t a five-minute setup.
The Limitation Nobody Should Skip
Here’s what stands out to me. 1Password vaults hold passwords, passkeys, 2FA codes, API tokens, addresses, and financial details. But The Verge AI reports that 1Password doesn’t specify which of those Claude can actually reach, and it appears limited to login credentials for now. Payment cards and identity details are coming “sometime after launch.”
That gap matters. “Book me a flight” is the headline use case, and booking a flight requires a card. So the demo everyone imagines isn’t fully shippable yet. What you get today is Claude getting past login screens on its own. Useful, but narrower than the marketing suggests.
Why This Matters
The credential wall is the single biggest thing standing between agentic browsing and actual usefulness. An agent that can browse but can’t authenticate is a research tool, not an assistant. Every company chasing agents is running into this, and most solutions so far have been ugly: share your password with the model, or babysit every login.
1Password’s answer is architecturally interesting because it refuses the tradeoff. The agent gets capability without visibility. If that model holds up under real-world pressure, expect other password managers to ship something similar fast, because the alternative is watching users route around them.
The open question is trust at scale. Per-task approval with biometrics is a solid control today. But the whole point of agents is doing more with less supervision, and there’s an obvious pressure to loosen those prompts over time. How 1Password handles that pressure will say more about this product than the launch does.
More details are available at the original source.