AI agents signing in: a password risk for SMEs
In brief
1Password has launched 1Password for Agents, according to TechCrunch. After a user confirms an alert, the service signs an approved AI assistant into a personal account without giving it the password. Supported agents include products from Anthropic, OpenAI, Meta and Town. The same day, Axios reported that U.S. banks see this kind of activity and cannot always link it to a user request.
What it changes for an SME
For an SME this is mainly a risk issue, not a cost or time saver. If staff already let an AI agent into email, banking or a web app, a password given to that agent can remain somewhere you do not control, according to 1Password. Axios reports that U.S. banks already see this kind of sign-in and often cannot tell if the customer requested it; Chase, speaking to Axios, advised customers not to share usernames and passwords with anyone. The 1Password feature is described for personal accounts and a short list of consumer agents, so it may not cover your company vaults yet.
What you can do
- Tell staff not to paste business passwords into an AI chat or agent.
- If you already use 1Password, check whether 1Password for Agents covers your company vaults and which assistants it supports.
- Ask your bank and main SaaS vendors how they log and treat sign-ins made by software agents.
Let's talk about the time you could save.
In 20 minutes, we find where AI could save you time or money. Free, no commitment.