1Password 推出新方案：允许 AI Agent 代客登录且无需暴露密码

随着消费者越来越频繁地将各类权限委托给 AI Agent，外界对安全隐患的担忧也日益加剧。如今，安全服务机构正在努力跟上这一步伐。

密码管理器 1Password 于周四推出了一项新工具，允许用户授权 Agent 代表自己登录个人账户，同时完全不向 Agent 暴露用户的凭证信息。

这一名为 1Password for Agents 的全新平台，通过在 Agent、用户与密码管理器之间建立一套通信系统来实现这一目标。当 Agent 尝试代表用户登录时，会向 1Password 发送一个专属数字密钥以确认其数字身份。随后，用户会收到有关该登录尝试的通知，并可亲自确认该请求。接着，1Password 会代为完成登录，代表该数字助手自动填入凭据，使其能够顺利登入并完成手头的既定任务。

1Password for Agents 允许用户自由选择自己中意的 Agent——无论是来自 Anthropic 的 Claude Duet、OpenAI 的 Dots 或 ChatGPT Work，还是 Grok Bot、Meta 的 Muse，亦或是 AI 助手初创公司 Town 打造的 Agent。该公司表示，目前正与其他公司展开合作以进一步扩大服务支持范围。

“直接向 Agent 提供密码、机密或凭据是一种常见的走捷径做法，但往往会导致敏感信息留存在人们无法再掌控的地方，甚至被保存副本以备下次使用，”该公司在一篇博文中表示，“1Password for Agents 为人们提供了一种可信赖的方式，让他们能够将任务委托给个人 AI Agent，同时始终牢牢掌控这些任务所需的密码、机密和凭据。”

线上日益增多的 Agent 行为令各大机构愈发感到不安。事实上，就在 1Password 推出新平台的同一天，Axios 报道称，多家美国银行已开始在用户账户内检测到 Agent 的活动迹象。

这并不一定代表存在恶意 Agent 在盗取账户，而更反映出消费者正越来越多地允许自动化服务代表自己处理事务（包括财务事宜）。然而，与 Agent 相关的潜在风险依然巨大。当下的核心痛点在于，大多数银行无法分辨这些 Agent 活动究竟是否与用户的真实请求挂钩。

接受该媒体采访的银行从业人员将这一现状形容为“令人不寒而栗”（horrifying），摩根大通（Chase）的一名发言人在接受 Axios 采访时也补充表示，客户“绝不应将自己的用户名和密码透露给任何人”。

Concerns have swirled over the access that consumers are increasingly entrusting to AI agents. Now, security services are trying to catch up.

Password manager 1Password on Thursday launched a new tool by which users can allow agents to log into their personal accounts on their behalf, without the agent ever having access to a user’s credentials.

The new platform, dubbed 1Password for Agents, accomplishes this by creating a system of communication between the agent, the user, and the password manager. When an agent attempts to log in on a user’s behalf, a unique digital key is sent to 1Password to confirm the agent’s digital identity. The user is then sent an alert about the login attempt and can personally confirm the request. 1Password then signs in the agent, filling in the credentials on the digital assistant’s behalf, which allows it to log in and complete whatever task is at hand.

1Password for Agents allows users to choose their agent of choice — whether that’s Claude Duet from Anthropic, OpenAI’s Dots or ChatGPT Work, Grok Bot, Meta’s Muse, or agents from Town, which is an AI assistant startup. The company says it is working with other companies to expand the service.

“Handing over a password, secret, or credential is a common shortcut to an agent, but can leave people with sensitive information in places they can no longer control as a copy gets saved for the next time,” the company said in a blog post. “1Password for Agents gives people a trusted way to delegate tasks to personal AI agents while keeping control of the passwords, secrets, and credentials those tasks require.”

Online agentic activity has increasingly unsettled major institutions. Indeed, 1Password’s new platform is launching on the same day that Axios reports that U.S. banks have begun to detect agentic activity inside user accounts.

This isn’t necessarily a case of rogue agents pilfering accounts but, rather, an example of how consumers are increasingly allowing automated services to act on their behalf, including on financial matters. However, the potential for agent-related problems is still large. The big issue appears to be that most banks cannot tell if the agentic activity is tied to user requests or not.

Bankers interviewed by the outlet described the situation as “horrifying,” and a Chase spokesperson interviewed by Axios additionally told the outlet that customers “should not give their usernames and passwords to anyone.”