Password Manager Sees Surge Past $500M Guarding AI Access

1Password launched 1Password for Agents to broker AI assistants' access to apps, accounts and private data without exposing raw credentials, and said annual recurring revenue topped $500 million to fund the effort.

Key Takeaways

1Password launched 1Password for Agents on Thursday
1Password said its annual recurring revenue topped $500 million
1Password for Agents will connect personal agents across services including Meta, Anthropic, OpenAI and xAI
The system has agents ask 1Password for permission through a Password Manager instead of storing secrets, so the vault mediates access to stored logins via a Password Manager and payment details

The company posted that the new system will connect personal agents across services including Meta, Anthropic, OpenAI and xAI, while a separate company release put the revenue figure at more than $500 million in ARR, a company that sells password management and identity tools to consumers and businesses.

Password Manager Vaults Move Toward Agents

1Password said agents will connect whether they live inside a chat app, browser, phone or operating system, and it named frontier labs and cloud firms as ecosystem partners, suggesting the product is meant to plug into many agent surfaces rather than one closed stack.

The system is described as having agents ask 1Password for permission instead of storing secrets themselves, so the vault mediates access to stored logins, payment details and other secrets.

From Human Logins To Machine Logins

Earlier agent products mostly generated drafts and code suggestions. The next wave tries to complete tasks by touching live services.

If an agent holds a plain-text password, compromise of the agent can become compromise of the account. If the agent instead requests scoped access from a vault, the user or company can limit what that agent can do.

Enterprises already solve this for staff identity, but agents raise the frequency and scale.

A worker may log in a few dozen times a day. An agent may trigger actions continuously and across several services, turning secret handling into infrastructure rather than a convenience feature.

Also Read: AI Firm Walls Off New Work Bot In Phone App For 2 Paid Plans

How 1Password For Agents Gates Access

1Password for Agents appears designed to act as a broker between an AI model and the systems it wants to use.

Instead of pasting a password into OpenAI or Anthropic, a user stores it once in 1Password and sets rules about which agent can call which service.

That structure matters most for developers and security teams, because a product built on Meta or xAI models can swap models later, but the permission layer stays in one place. Before tools like 1Password for Agents, many teams handled early agent access with environment variables, copied cookies or lightweight internal scripts, methods that work for demos but break once dozens of agents and hundreds of services enter the picture.

The practical test will be whether 1Password can offer short-lived, scoped permissions rather than simple secret retrieval.

If an agent can only approve one calendar action, one checkout step or one repository task, the blast radius shrinks. Watch whether named partners such as Anthropic and OpenAI expose enough hooks for that fine-grained control over the next few quarters.

The Revenue Figure Sets The Stakes

The $500 million ARR mark gives 1Password room to make this bet without looking experimental.

Password managers were once defensive software. The company is now arguing the same trusted store can become the operating rail for AI actions.

That also draws a line against model providers, since labs can build powerful assistants, but many users will resist giving one AI vendor custody of every credential.

A third-party vault offers separation between the model that reasons and the system that releases access.

If personal agents become mainstream, the market may reward whoever controls that release point, and Thursday’s announcements show 1Password wants that role before the big labs can absorb it themselves.