Hot Take 1Password says it has a solution for AI agents leaking your passwords

[lokamoka820]

Agentic browsing is the next big thing in AI, at least when you ask the likes of Microsoft, Google, Opera, Perplexity and others. It is an integrated AI that performs tasks on behalf of the user. From research to creating Spotify playlists or, my personal favorites, buying groceries (that's irony).

While some of these tasks do not require special permissions or data, others, like making a purchase on your behalf, do. This usually requires authorization. If you want the AI to buy something from Amazon, it needs your Amazon account credentials to do just that. At other times, it may need access to API keys or one-time codes.

That is seen as a problem by some, as you have to trust the maker of the AI that the artificial intelligence won't do anything problematic with the data. There is also the chance of it being retained and then stolen, if things go really wrong.

1Password, maker of the password manager of the same name, announced a solution to the problem. According to the company's announcement, agentic browsers introduce a whole range of issues:

• No single source of truth for secrets management across agentic AI and employees
• Difficulty of revoking credentials/items, especially long-lived ones
• Proliferation of untracked/out-of-date credential grants

1Password says it has a solution for AI agents leaking your passwords - gHacks Tech News

1Password has developed a new protocol to make agentic browsing more secure and less prone for data leaks of credentials.

www.ghacks.net

 

[Jonny Quest]

So why would we, anyone allow that in the first place? That does not sound good!

While some of these tasks do not require special permissions or data, others, like making a purchase on your behalf, do. This usually requires authorization. If you want the AI to buy something from Amazon, it needs your Amazon account credentials to do just that. At other times, it may need access to API keys or one-time codes.

That is seen as a problem by some, as you have to trust the maker of the AI that the artificial intelligence won't do anything problematic with the data. There is also the chance of it being retained and then stolen, if things go really wrong.

 

[lokamoka820]

Maybe it's not up to you to allow it in the first place, and maybe it's the only solution in the future, as AI already controls a lot of things now.

 

[Wrecker4923]

The maker of the password manager has developed a new protocol for that very purpose.
...
The integration is only available through Browserbase.
...
Can 1Password succeed with Secure Agentic Autofill? Much depends on adoption, preferably by bigger players.

All the browser platforms will likely have their own things.

Would you hand over credentials to AI agents so that they can act on your behalf?

Not yet, or ever. As long as somebody can change how my system behaves by sending me hidden love letters .

Maybe it's not up to you to allow it in the first place

Adding NeuralLink to the mix, soon, grok (or others) will act on your behalf too. Tin hats have never been so attractive.

 

[Victor M]

Agentic AI is for the bird brained. Just keep around old setup programs for popular browsers before they betray you.