1Password 发布 1Password for Agents，AI 智能体可代用户登录且不接触密码
1Password launches a way for AI agents to log in on your behalf without seeing your password
- 11Password 于周四发布 1Password for Agents，AI 智能体可代用户登录个人账号且不接触密码
- 2机制为智能体发起登录时发送数字密钥验证身份，用户收到提醒并确认后由 1Password 代填凭据完成登录
- 3首批支持 Anthropic 的 Claude Duet、OpenAI 的 Dots 与 ChatGPT Work、Grok Bot、Meta 的 Muse 及 Town，公司称在扩展合作
- 4同日 Axios 报道美国银行在用户账户中检测到智能体活动，多数银行无法判断其是否源于用户请求
密码管理厂商把智能体代操作从交出凭据改造成可控的授权确认流程，掌握凭据的一方正在变成人机协作的权限闸口。
- 影响：消费者让智能体代办的活动已进入银行风控视野而机构难以辨别；直接下发账号密码会留存凭据副本；这类缺口为带用户确认的授权类安全产品创造需求，企业账号体系也会面临识别和放行智能体的同类问题。
- 参考：可考虑盘点内部存在密码共享或凭据代管的应用和流程，评估接入带用户确认环节的授权机制；值得先明确允许智能体代办的操作范围，尤其是客服与金融相关场景。
- 依据：产品机制与支持范围出自 1Password 官方博客口径，暂无独立验证；银行侧情况为 Axios 采访多位银行人士与 Chase 发言人的转述。
Concerns have swirled over the access that consumers are increasingly entrusting to AI agents. Now, security services are trying to catch up.
Password manager 1Password on Thursday launched a new tool by which users can allow agents to log into their personal accounts on their behalf, without the agent ever having access to a user’s credentials.
The new platform, dubbed 1Password for Agents, accomplishes this by creating a system of communication between the agent, the user, and the password manager. When an agent attempts to log in on a user’s behalf, a unique digital key is sent to 1Password to confirm the agent’s digital identity. The user is then sent an alert about the login attempt and can personally confirm the request. 1Password then signs in the agent, filling in the credentials on the digital assistant’s behalf, which allows it to log in and complete whatever task is at hand.
1Password for Agents allows users to choose their agent of choice — whether that’s Claude Duet from Anthropic, OpenAI’s Dots or ChatGPT Work, Grok Bot, Meta’s Muse, or agents from Town, which is an AI assistant startup. The company says it is working with other companies to expand the service.
“Handing over a password, secret, or credential is a common shortcut to an agent, but can leave people with sensitive information in places they can no longer control as a copy gets saved for the next time,” the company said in a blog post. “1Password for Agents gives people a trusted way to delegate tasks to personal AI agents while keeping control of the passwords, secrets, and credentials those tasks require.”
Online agentic activity has increasingly unsettled major institutions. Indeed, 1Password’s new platform is launching on the same day that Axios reports that U.S. banks have begun to detect agentic activity inside user accounts.
This isn’t necessarily a case of rogue agents pilfering accounts but, rather, an example of how consumers are increasingly allowing automated services to act on their behalf, including on financial matters. However, the potential for agent-related problems is still large. The big issue appears to be that most banks cannot tell if the agentic activity is tied to user requests or not.
Bankers interviewed by the outlet described the situation as “horrifying,” and a Chase spokesperson interviewed by Axios additionally told the outlet that customers “should not give their usernames and passwords to anyone.”
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Lucas is a senior writer at TechCrunch, where he covers artificial intelligence, consumer tech, and startups. He previously covered AI and cybersecurity at Gizmodo. You can contact Lucas by emailing [email protected].
来源：TechCrunch · AI · techcrunch.com