Overview
- 1Password publicly released 1Password for Claude on Thursday, July 16, 2026, and it is available on macOS for 1Password subscribers who also use the Claude desktop app and Claude in Chrome with paid Claude plans.
- The integration uses a zero‑exposure design that decrypts saved credentials only on the user’s device and injects them directly into web pages so Claude never receives or stores the plaintext password or TOTP code.
- Each credential request is scoped to a single task and requires explicit user approval, typically via Touch ID or another biometric prompt, and Agentic Mode in the browser extension automatically locks the vault when an AI agent takes control.
- At launch the system supports usernames, passwords and one‑time (TOTP) codes only, includes page checks that clear autofilled values on failed submissions, and 1Password plans to add payment cards and identity items in later updates.
- Security experts caution that hiding secrets from the model does not eliminate risk because an authenticated session can still let an agent act on a site and prompt‑injection or malicious page content remain unresolved threats that need session controls and detection.