Introducing stronger phishing protection in 1Password

1Password has always protected you by refusing to autofill credentials on mismatched sites. But we know that sometimes you might not realize why autofill didn't work, so you'd manually copy and paste instead – which could still get you phished.

Now, we've added an extra layer of protection. When you try to paste a password into a site that doesn't match the URL saved in 1Password, you'll see a warning pop-up in your browser. It's a gentle nudge to slow down and double-check the URL before you continue.

Phishing attacks are everywhere right now, and thanks to AI, they're harder to spot than ever. Those fake login pages look almost perfect, and it only takes one quick moment for someone to accidentally hand over their credentials to a scammer.

This feature is rolling out to all Individual, Family, and Business customers over the next few weeks. For Individual and Family users, built-in phishing protection will be enabled by default once it rolls out to you. If you're a 1Password Admin, you can enable it for your team in Authentication Policies in the admin console as shown below.

To learn more, we've got a full breakdown in our blog post, plus a demo video showing built-in phishing protection in action. Be sure to check them out!