1Password’s browser extension fills in your passwords automatically when you browse, and now the company has built a similar tool for AI bots browsing the web on your behalf, but for a very different reason.

AI tools and browsers built on Claude, Gemini, and ChatGPT are increasingly using AI agents to browse the web, book tickets, and make Spotify playlists for you, and unlike your risk of forgetting a unique password, an AI bot risks remembering it and causing a breach later. 1Password’s fix for that potential risk, a new Secure Agentic Autofill feature that “injects the credentials directly into the browser if, and only if, the human approves the access.”

With the tool, when a browser AI agent determines that it needs login credentials, “the agent informs 1Password that a credential is being requested,” 1Password says. “At that point, 1Password identifies the appropriate credentials, requests approval from the user via a human-in-the-loop workflow.” To approve a request, a human authenticates the request with something like Touch ID on their Mac, and 1Password’s tool uses an “end-to-end encrypted channel” between its extension in the browser operated by the AI agent and the approving device to input the credentials. The AI agent and LLM, according to 1Password, never see the actual credentials as a result.

Initially, Secure Agentic Autofill is available starting today in early access via Browserbase, which builds a browser and tools specifically designed for AI agents.