1Password now lets AI agents sign in without seeing your password, as major US banks restrict agents that log in with customer credentials

The same week a password manager built a way for agents to log in without the password, major banks started shutting agents out.

What happened

1Password announced 1Password for Agents. When an agent reaches a sign-in page, it requests a credential from your vault, you approve it, and 1Password fills the login directly on the site, so the agent never has the password or one-time code. TechCrunch reports the agent's identity is confirmed with a unique digital key and the user gets an alert to approve each request. Launch integrations include Meta's Muse, Anthropic's Claude Duet, OpenAI's ChatGPT Work and dots, Grok Bot and Town's Townie, with several marked as coming soon. It is available at no extra cost for Individual and Family accounts on 1Password.com.

On the same day, The Decoder, citing Axios, reported that Morgan Stanley, JPMorgan, Bank of America, Wells Fargo and Citi are restricting external AI agents that log in with customer credentials, which breaks bank rules requiring account holders to sign in themselves. Most banks want agents limited to read-only access, and many cannot tell whether an agent is acting on a user's request or on its own. A Chase spokesperson told Axios customers "should not give their usernames and passwords to anyone."

My take

For business automation, the pattern to copy is simple: the agent asks, a human approves, and the secret never enters the model's context. Pasting a password into a prompt or a workflow note leaves a copy somewhere you no longer control, as 1Password points out.

The bank news is the other half. If a platform cannot tell your agent from an attacker, expect lockouts. Where a service offers an API with scoped tokens, use that instead of a browser agent logging in as a person. Where it does not, keep the agent read-only and put a human approval in front of any action that moves money or changes records. Log which agent used which credential and when. Those three habits will survive whatever rules the banks and SaaS vendors write next.