Credential leaks continue to happen, even though the controls for human identity have been available for years.
Matt Moore, co-founder and CTO of @chainguard_dev, joins @NancyzWang and Dev Tagare to discuss how security changes when credentials belong to people, machines, and AI agents moving through the SDLC.
The controls differ, but the standard is the same; credentials should be protected and scoped, and every use should be attributable.
✅ People need MFA, secure credential storage, and SSO where it fits
✅ AI agents need short-lived, least-privilege access
✅ Keep raw secrets out of agent context where possible, and broker access at runtime
✅ Trace actions to the agent and its authorizing human or service
The gap sits between what teams know works and what's actually deployed.
🎧Listen to the full conversation here: bit.ly/4hjYOEa
We're proud to support Herackthon 2026, a monthlong innovation challenge uniting creators, technologists, and visionaries to build for women, by women, and with everyone. Workshops along the way cover coding, infrastructure, architecture, and go-to-market strategy.
1Password is providing licenses to the members of the three winning teams, so they can continue developing their project with credential security handled from the start.
📅 Dates: Sep 14 – Oct 4, 2026
📍 Location: Vancouver + Remote
👥 Eligibility: Open to everyone · Teams of up to 5
⏳ Deadline: Registration open until Sep 18
➡️ Register here: bit.ly/4cOyrFf
We're partnering with @TownAI to bring 1Password's secure access to their assistant, so it can log in and get the job done without ever seeing your passwords. Your team decides what it can reach, and that access can be pulled back anytime. Town handles the work, and we handle the keys. More to come!
we’re proud to be partnering with @1Password so Muse will be able to work with the logins you already have.
more details on how we built all of this here: security.muse.ai
We're excited to partner with @Meta to bring @1Password to @Muse, a new personal AI agent that helps you get things done across every part of your life. Muse is built with a secure credential store, and soon with 1Password, that extends to the password vault you already have. You’re in control of every request to access these credentials.
More coming soon!
We’re excited to collaborate with Instinct on safer experiences that help people share the credentials they choose, when they choose, while keeping security and control at the center. More to come.
Instinct + 1Password
32% of Instinct users already securely share their credentials with Instinct through our Vault. Today, we’re excited to announce our partnership with @1Password . Together, we are working with 1Password to roll out a product integration that enables users to
AI agents are a new class of identity. Meet 1Password at Fal.Con 2026, booth #1852. On Sept. 1, @NancyZWang (CTO, 1Password), @talperetz_ (Co-founder and CPO, @Runlayer) and David Tsao (CISO, @NotionHQ) will also discuss securing rogue agents with identity, access, and runtime visibility. Register here: bit.ly/4xUcEUv
We’re proud to support @OpenAI's call for collective action alongside many technology peers, and to deepen our work together to build trusted access for agents. openai.com/collective-cyb…
We have a limited window to strengthen cyber defenses, and together with organizations including @AnthropicAI, @awscloud, @Google, @Microsoft, and @Oracle, we're calling for a global effort to give defenders the tools, resources, and support to protect the infrastructure we all
ChatGPT Work can now use its computer and browser to sign in to websites on web and mobile, without ChatGPT ever seeing your username or password.
That means you can ask it to:
• Set up utilities for a new apartment
• Book a DMV or passport appointment
• Check reimbursement costs through your insurance
• Find and book an in-network doctor around your availability
• Check when your car registration expires and prepare the renewal paperwork
• Compare your rental insurance policy with an issue you’re emailing your landlord about
• Find and save apartment listings that match your criteria
• Restock something just by uploading a photo
• Schedule a package pickup for a return
• Cancel tickets for a rescheduled trip
• Book a vet appointment
• Submit reimbursement paperwork for medical treatments
• Check resale sites for new drops and save things you might like
• Find candidates with specific experience and draft outreach
• Take invoices from your email and submit them to your accounting software
• Draft replies to rental property inquiries
• Fill out permit applications for your small business
• Add action items to a vendor portal based on a recent client call
• Analyze the latest ad campaign for your small business
Basically: if it’s something you’d normally have to open a browser and click through yourself, try asking ChatGPT Work to do it.
Logging into websites is rolling out today on web and mobile for Plus, Pro, and Business users.
AI can fix code but can it fix a security flaw without creating another one? @1Password’s Off-By-1 Labs tested leading models on vulnerabilities they hadn’t seen before. Many failed to fix the flaw. Some introduced new bugs or made the problem worse. Watch @JacobDePriest explain why verification still matters on the Zero Signal Podcast: bit.ly/4cBe51Z
As organizations grow, IT teams need secure systems that can keep pace without adding more manual work.
1Password is announcing four updates to Enterprise Password Manager (EPM) that help admins reduce lockouts, simplify provisioning, and support complex organizational structures:
🔷Entra ID Secret Expiration: Track secret expiration dates and receive reminders before an identity provider connection breaks. A guided workflow helps admins rotate secrets and restore connectivity.
🔷Multi-Tenancy and Hosted Provisioning integration: Use Hosted Provisioning across multi-tenant environments to automate provisioning and deprovisioning for parent and child accounts.
🔷Vault Migrations: Copy vaults from a parent account to one or more child accounts in a single workflow. Vaults are re-encrypted in the browser, access starts with secure defaults, and each migration is recorded in the audit log.
🔷Hosted Provisioning for managed service providers: Connect an identity provider to client accounts in minutes, with users automatically created, updated, and deprovisioned across managed tenants.
👉Learn more here: bit.ly/3SNPkJj
Code is the easy part. When agents write code in minutes, the bottleneck moves to CI, review, deployment, and verification. @TheRohanVarma from @OpenAI’s Codex team joins @NancyZWang (CTO @1Password) and Dev Tagare (Head of Engineering, @GeminiApp) on Zero-Shot Learning to talk about what comes next. Listen to episode 8: youtu.be/5vMyvmLUVkM
The unlock for agents will not come from trusting the model. It will come from building a system that understands what “done” means and improves its ability to verify it.
Imagine asking an agent to write release notes across 1,247 commits. It returns a polished draft, but the comparison API paginated at 1,000 commits and the agent never followed the cursor. The result looks complete even though 247 commits never entered the context.
These checks do not prove that the release notes are well written. They establish something more fundamental: that the agent received the complete inputs and produced an internally consistent result.
Verification produces the fact, and authorization consumes it.
Do not promote the model. Promote the loop, and let the loop learn.
Illustrative code: github.com/nancyzwang/ver…
Blog: 1password.com/blog/verified-…
A plausible result is not the same as a verified result. Verified loops give agents job-specific identities, bounded authority, and only the permissions they earn through trusted evidence.
bit.ly/4wyvf7u
Zero. Standing. Access. That should be the new security baseline for teams adopting AI agents.
Watch Random but Memorable to learn:
🔹 How vibe coding creates more privileged users
🔹 Why overprivileged agents are a security risk
🔹 How to reach zero standing privileges
Full episode 👉 bit.ly/4hOYFLd
Write code or use AI to build?
Secure your daily workflows with 1Password’s developer tools.
Learn how to:
🔹 Secure your local environment
🔹 Eliminate plaintext secrets
🔹 Protect SSH keys and Git commits
🔹 Build secure AI-powered workflows
Start learning 👉 bit.ly/4xv9WEO
544 Followers 418 FollowingCISO/CIO @1password | former @github, @NSAGov. Developer, security nerd, engineer, whisky geek, dad | opinions here are my own
4K Followers 6K FollowingBuilding ✨
Dev for @MonkeesAreKey
Building https://t.co/plAWCYyCB7 @boringsnap @spacezerodev
Proud @FrenchApeYC member 🍌
@shipordie_ crew member 🏴☠️
941 Followers 4K Following15+ yrs shipping software. Now ceo & founding engineer at https://t.co/SUEW7TOKBP — agentic development studio. Building agentic infrastructure and harnesses.
106 Followers 7K FollowingExploring in neural networks from inside purely biological mind with heavy cognition architecture & mapping the phase space where thought becomes destiny.
12 Followers 152 FollowingWhat happens when a non-dev designs an AI agent governance system modeled after law or Organizational Behavior? Building JongPago OS to find out. 🇰🇷
3K Followers 4K Following@1password Senior Product Designer • Coffee Drink'n Piano Tinkl'n 'Tiki' Enthusiast • Big Hugger • Pun Blurter • Not here for drama or politics. I’m not the GOP
40K Followers 267 FollowingWe help secure the world’s most targeted organizations and products. We combine security research with an attacker mentality to reduce risk and fortify code.
544 Followers 418 FollowingCISO/CIO @1password | former @github, @NSAGov. Developer, security nerd, engineer, whisky geek, dad | opinions here are my own
3K Followers 2K Followinggeek, scribe, coffee snob, and wanna-be cyclist. Contributor to Apache Spark and Delta Lake maintainer. Developer Relations at Databricks (opinions r my own)
901K Followers 460 FollowingFather of three, Creator of Ruby on Rails + Omarchy, Co-owner & CTO of 37signals, Shopify director, NYT best-selling author, and Le Mans 24h class-winner.
2.0M Followers 4K FollowingInspiring readers to think beyond traditional boundaries & create the future of business. Subscribe to our daily newsletter: https://t.co/BpH3KmBae9
2K Followers 2 FollowingThis account is no longer active. Need help? Email us [email protected], follow us at @1Password, or visit https://t.co/C8gaN8ISrB
7K Followers 1 FollowingThis account is no longer active. Need help? Email us [email protected], follow us at @1Password, or visit https://t.co/wRLgayEq8i
1.8M Followers 2 FollowingWe're an AI safety and research company that builds reliable, interpretable, and steerable AI systems. Talk to our AI assistant @claudeai on https://t.co/FhDI3KQh0n.
141K Followers 36 FollowingThe best way to keep you, your family, and business safe online. Go ahead. Forget your passwords. | Customer Support 👉 https://t.co/pSnf9gdlos