Particle.news
Download on the App Store

1Password Rolls Out Browser Warning to Flag Phishing Before You Paste Credentials

The feature introduces a brief interruption to help users notice mismatched URLs in an era of more convincing phishing.

Overview

  • The browser extension now withholds autofill on non-matching domains and shows a pop-up stating, "The website you're on isn't linked to a login in 1Password."
  • Rollout begins today and may take weeks to reach everyone, with the feature enabled by default for individual and family plans when available.
  • Business deployments require admin activation in Authentication Policies within the 1Password admin console.
  • The tool is meant to create a pause before users paste credentials, but it is not foolproof because users can still proceed or dismiss the warning.
  • 1Password cites rising phishing risks driven by AI, survey data showing widespread exposure, and industry figures on growing fraud losses and costly breaches.