Level up your business security with free, on-demand training and certification. Explore 1Password Academy today →
December 2025 at 1Password: More browser options, easier sign-in, and safer saving and filling
Welcome to your monthly roundup of what’s new in the world of 1Password! Additional browsers now supported in 1Password for Windows 1Password now supports additional browsers on Windows including Zen, Opera, Waterfox, and Floorp. This much-requested update lets you save and autofill vault items without leaving your preferred browser. Now in beta: New sign-in experience in 1Password browser extension If you have an Individual or Families membership, you can choose to try a new feature in the beta and nightly version of the 1Password browser extension. This new sign-in experience combines all the sign-in methods – passwords, passkeys (coming soon), social logins, OIDC & SAML – into a single, simple interface focused on getting you where you want to go. To activate this in the beta or nightly version of the 1Password browser extension, go to Settings -> Autofill & save and switch on Sign in with Universal Sign On. Let us know what you think! New policies available to administrators for auto-save and auto-submit If you’re a 1Password Enterprise Password Manager administrator, you now have more granular control over filling and saving behavior: Autosave: Choose which item types 1Password can offer to save (credit cards, identities, logins, OTPs, passkeys, social logins, etc.). Autosubmit: Control whether 1Password can automatically submit forms after filling or if you want users to do that step themselves. Now in beta: Improved email options for account recovery We’re rolling out new account recovery options in beta for 1Password Enterprise Password Manager administrators . If you aren’t seeing this option yet, hang tight – you will soon. Administrators can choose to route recovery emails to specific users to get faster follow-ups and reduce email volume – or even send them to your internal IT ticketing tool. We hope this makes account recovery a simpler, faster process for everyone and would love to hear your feedback on it. The complete first season of the Chasing Entropy podcast available It’s a wrap on the first season of our new show, the Chasing Entropy podcast! This season Dave Lewis, 1Password Global Advisory CISO, sat down with dozens of CISOs and security leaders to discuss how security works in their organizations and what keeps them up at night. All episodes are available now wherever you listen to podcasts. Release note highlights Browser Extension We’ve added a new setting to manage whether 1Password.com automatically unlocks when your 1Password browser extension is unlocked. You can find the setting in the browser extension under Settings > Security > “Sign in to 1Password in the browser automatically”. Mac, Windows, and Linux Fixed a bug so Large Type no longer disappears when the display zoom is set above 100%. [Mac only]: We’ve expanded the additional browsers you can connect to the 1Password app to include browsers that use more complex background processes, such as SigmaOS and Atlas. [Windows only]: We’ve fixed an issue that caused the 1Password app to become unresponsive for 30 seconds after you turned on passkey support. [Linux only]: You no longer need to authenticate approval prompts on Wayland when 1Password is already unlocked. [Linux only]: We’ve fixed an issue that prevented the authorization prompt from appearing on Wayland. iOS, and Android We’ve moved the location of the “Unlock with device” setting under the “Unlock” heading in Settings > Security. We’ll resume our monthly highlights in January, 2026. We hope you have a wonderful end to 2025, and we’ll see you in the new year!September 2025 at 1Password: Browser versions, enhanced security, and new integrations
Welcome to your monthly roundup of what’s going on in the world of 1Password! Minimum browser versions increasing On October 14, 2025, we’ll be increasing the minimum Chrome/Chromium and Firefox versions required to use 1Password.com and the 1Password Browser Extension. The new minimum version requirements will be as follows: Chrome 128 Firefox 128 Edge 128 Brave 1.69.x Existing installations of the browser extension will continue to work, but affected devices will no longer receive updates until the minimum browser version has been met. New options for autofill confirmation prompts We’ve added some new security settings to the 1Password browser extension to improve security. You can now enable a confirmation prompt to appear before credentials are autofilled, helping to prevent accidental autofilling to malicious websites. A corresponding policy is also available for Administrators so they can enable this for their users. New integration for 1Password and ZScaler We recently launched a new integration between 1Password Device Trust and Zscaler to help organizations strengthen their Zero Trust security. This powerful combination ensures that employees can only access company applications from devices where the Zscaler agent is correctly installed and running. It’s a crucial step to automatically enforce security policies across all devices – including unmanaged ones – reducing your attack surface and securing your distributed workforce. Random but Memorable episodes in September How to build a career in cybersecurity with Heath Adams How cyber warfare really works with Hayley Benedict "Top skills right now, I think AI is dominating everywhere. I think that cloud is here to stay and just going to become more and more prominent... any sort of like cloud security, if you combine cloud security background with offensive security background, you're you're a golden ticket for a hire." – Heath Adams, The Cyber Mentor Release note highlights Browser Extension Fixed a bug so that 1Password remembers your list sorting preferences. We’ve added the message “1Password wants to fill your credit card details on [website name]” to the authorization prompt to fill credit card details. We’ve removed the hamburger menu from the toolbar in the 1Password pop-up. Notifications and options such as “Lock 1Password” and “Settings” are now available in a side panel, which you can open from the account menu in the top left of the pop-up. We’ve fixed an issue where the “Save passkey” prompt appeared unexpectedly on certain websites. Mac, Windows, and Linux Fixed a bug so that 1Password remembers your list sorting preferences. SSO fixes for authentication and handling email address changes. Updated dependencies to fix some bugs and improve the app’s stability. The “Scan QR code” button now works as expected when you create or edit an item. [Mac only]: We’ve fixed an issue with biometric unlock for MDM-managed devices. iOS and Android Fixed a bug so that 1Password remembers your list sorting preferences. SSO fixes for authentication and handling email address changes.October 2025 at 1Password: Defining new standards, empowering communities, and securing the future
Welcome to your monthly roundup of what’s new in the world of 1Password! 1Password helps author a new open standard for secure credential transfer We’re proud to have helped author a new standard called Credential Exchange Format (CXF), a major step forward in secure, privacy-preserving credential transfer between password managers. CXF will enable people to move their data between password managers safely and consistently, without exposing sensitive details in the process. It’s an open standard developed with other industry leaders to promote portability without compromise. Read the announcement 1Password for Good donates $100k during Cybersecurity Awareness Month During October Cybersecurity Awareness Month, we gave back to communities by donating $100,000 USD to six organizations working to ensure that the next generation has access to the technology education, digital literacy, and online safety skills they need. It’s one of the many ways we are helping communities through our 1Password for Good efforts, including launching a cybersecurity guide for parents with the Family Online Safety Institute. Read the announcement Securing the Win: Our new docuseries with Oracle Red Bull Racing We teamed up with Oracle Red Bull Racing to explore how world-class organizations balance performance and protection. Our new Securing the Win docuseries takes you behind the scenes with the team’s leadership and IT experts. Episode 1: Inside Oracle Red Bull Racing with CEO and Team Principal Laurent Mekies Episode 2: Speed and Security with CIO Mark Hazelton Teaming up with the Utah Jazz and Utah Mammoth We’re excited to announce that we've partnered with Smith Entertainment Group (SEG) — the parent company of the Utah Jazz, Utah Mammoth, and the Delta Center as their Official Cybersecurity Partner. Professional sports franchises depend on speed, trust, and instant, secure access to stay competitive, and 1Password’s Extended Access Management suite will help SEG’s teams protect what matters most both on and off the field. Read the announcement Closing the credential risk gap for AI agents with Browserbase Together with Browserbase, we launched Secure Agentic Autofill, an integration that delivers end-to-end encrypted credentials to AI agents in the browser, only when authorized by a human. This partnership helps developers and AI researchers use LLMs securely by keeping raw credentials out of the model context. Learn more about the Browserbase partnership Introducing .env file support in 1Password environments We’ve added support for .env files in 1Password environments, now available in public beta. This update makes it easier for developers to securely load environment variables directly into local development setups, without exposing secrets in plaintext. You can import, edit, and share .env files across teams while keeping everything fully encrypted and managed in 1Password. Introducing new .env file support in 1Password environments | 1Password Random but Memorable episodes in October Episode 15.7 - The state of passkeys in 2025 Episode 15.8 - What you need to know about car hacking “When you think about the convenience of passkeys, it’s easy to forget how much work goes on behind the scenes to make them secure and interoperable.” – Random but Memorable, Episode 15.7 Release note highlights Browser Extension Fixed an issue where websites with many fields and dropdowns could crash in Chromium browsers. Localization improvements across multiple languages using new translations from Crowdin. On Safari, when you type into a field on a website, you now see a “Save in 1Password” button in the suggestions dropdown. Icons now load significantly faster throughout 1Password. Mac, Windows, and Linux Added breadcrumb navigation to the SSH Agent and CLI pages for easier navigation. Improved localization using new translations from Crowdin. Icons now load significantly faster across all apps. Fixed an issue that could prevent unlocking if the app was closed during sign-in. Improved Guided Setup with a more accurate progress bar. Visual and performance fixes, including smoother launches and rounded window corners on Mac. [Windows only]: Added group policy support using ADMX templates. [Linux only]: Fixed visual issues with prompts and app icons on Wayland. iOS and Android Improved localization using new translations from Crowdin. Icons now load significantly faster. Guided Setup now shows a more accurate progress bar. Fixed an issue that could prevent unlocking if the app was closed during sign-in. [iOS only]: Added a new keyboard shortcut to open in-app settings (Ctrl + Command + ,). [Android only]: Fixed an issue where “Lock 1Password and pause biometrics” didn’t properly lock 1Password.January 2026 at 1Password: Taking on credential sprawl and advanced phishing scams
We kicked off 2026 with a big step forward for access governance with 1Password Unified Access, rolled out stronger phishing protection, and shipped a steady stream of fixes and improvements across every platform. In case you missed it Governing access beyond SSO with 1Password Unified Access In January, we announced the public preview of 1Password Unified Access, a new capability that helps organizations discover and govern company-owned credentials — including shared and non-SSO accounts that often fall outside traditional identity systems. Unified Access combines 1Password Enterprise Password Manager and 1Password SaaS Manager to give admins a clearer view of which apps rely on traditional credentials, who has access, and when that access should be rotated or revoked. When someone changes roles or leaves, you can revoke access and rotate credentials with a single action. For employees, the App Launcher brings both SSO and non-SSO apps into one place, making it easier to get work done without hunting for logins scattered across portals and vaults. The public preview is available to 1Password EPM Business customers in US-hosted environments with at least 100 users. 👉 Read the announcement and learn how to join the public preview. Introducing extra protection against phishing attempts 1Password has always protected you by refusing to autofill credentials on mismatched sites. But we know that sometimes you might not realize why autofill didn't work—so you'd manually copy and paste instead, which could still get you phished. Now, we've added an extra layer of protection. When you try to paste a password into a site that doesn't match the URL saved in 1Password, you'll see a warning pop-up in your browser—a gentle nudge to slow down and double-check the URL before you continue. Phishing attacks are everywhere right now, and thanks to AI, they're harder to spot than ever. Those fake login pages look almost perfect, and it only takes one quick moment to accidentally hand over your credentials to a scammer. This feature is rolling out to all Individual, Family, and Business customers over the next few weeks. For Individual and Family users, built-in phishing protection will be enabled by default. If you're a 1Password Admin, you can enable it for your team in Authentication Policies in the admin console. 👉 Learn more about phishing protection. Random but Memorable We kicked off the new year with an episode focused on cybersecurity resolutions that are actually worth sticking to! This episode turns advice from last season's guests into a practical checklist, covering small, ten-minute wins like freezing your credit, using passkeys, turning on MFA, cleaning up your digital junk drawer, and adopting a "politely paranoid" mindset to spot scams before they do damage. "If your heart rate increases, your caution should too. If a situation is urgent, contact the sender through a trusted channel, NOT the website, email, or phone number you see in the message." – Dave Lewis, Global Advisory CISO 👉 Listen to the episode Release note highlights 1Password in the Browser When setting up the 1Password extension in Firefox, you now see the permissions page first. We've improved localization for a number of our supported languages. We've fixed an issue where a scrollbar could appear unexpectedly on webpages. We've fixed an issue where the 1Password extension could break syntax highlighting for code blocks on some websites. Mac, Windows, and Linux We've fixed an issue where you couldn't interact with the prompt to turn on two-factor authentication when signing in to the app. We've improved localization for a number of our supported languages. We've fixed an issue where one-time password fields from Bitwarden login items didn't import correctly. We've updated the account icon shown in the authentication prompt when using the CLI or SDK desktop app integrations to have rounded corners. We've fixed an issue where the step to download the 1Password extension was missing from Guided Setup for individual and family accounts. We've fixed an issue where selecting the Create vault button multiple times could cause multiple vaults to be created. We've fixed an issue where items containing files could be duplicated or moved into accounts where file storage was turned off. [Mac only]: We've added Dark Mode and clear 1Password icons for macOS Tahoe. [Windows only]: You now only see the Windows Passkeys setup prompt if an unlocked account has the setting "Passkey item support" enabled. [Windows only]: We've added settings to reduce lag and choppy performance on some high refresh rate G-SYNC monitors. [Windows only]: We've fixed intermittent connection issues between the MSIX version of 1Password for Windows and the browser extension. [Windows only]: We've fixed an issue where op-ssh-sign-wsl.exe could fail to translate Windows Subsystem for Linux (WSL) paths to Windows paths, causing Git commit signing to fail in WSL. [Windows only]: We've fixed an issue that prevented ADMX templates from being ingested and applied in Microsoft Intune. [Linux only]: We've improved error messages and made restarting device enrollment smoother when it fails. [Linux only]: The Linux import callouts now point to the correct support article. [Linux only]: Pressing the Alt key now focuses the 1Password menu icon instead of showing the legacy menu bar. iOS and Android We've made improvements to item import and export functionality. We've improved localization for a number of our supported languages. We've fixed an issue where one-time password fields from Bitwarden login items didn't import correctly. We've fixed an issue where the step to download the 1Password extension was missing from Guided Setup for individual and family accounts. We've fixed an issue where items containing files could be duplicated or moved into accounts where file storage was turned off. [iOS only]: We've fixed an issue where search would dismiss when a recent search was selected on iPadOS 26. [iOS only]: We've fixed an issue in Guided Setup where the Autofill step couldn't be marked as complete. [iOS only]: We've fixed a visual issue with the item list menu on iOS 18. [iOS only]: We've fixed an issue where the "Pull down to search instantly" search tip was dismissed too quickly on first sign in. [iOS only]: We've fixed an issue where the search field didn't work when linking a related item, and the full list of items was shown regardless of your search. [Android only]: We've improved the password autofill experience and added passkey support for Vanadium on GrapheneOS. [Android only]: We've fixed an issue where the bottom navigation didn't restore the last selected tab after restarting the app. [Android only]: We've improved autofill in Android apps where username fields were hard to fill or didn't show suggestions.Introducing stronger phishing protection in 1Password
1Password has always protected you by refusing to autofill credentials on mismatched sites. But we know that sometimes you might not realize why autofill didn't work, so you'd manually copy and paste instead – which could still get you phished. Now, we've added an extra layer of protection. When you try to paste a password into a site that doesn't match the URL saved in 1Password, you'll see a warning pop-up in your browser. It's a gentle nudge to slow down and double-check the URL before you continue. Phishing attacks are everywhere right now, and thanks to AI, they're harder to spot than ever. Those fake login pages look almost perfect, and it only takes one quick moment for someone to accidentally hand over their credentials to a scammer. This feature is rolling out to all Individual, Family, and Business customers over the next few weeks. For Individual and Family users, built-in phishing protection will be enabled by default once it rolls out to you. If you're a 1Password Admin, you can enable it for your team in Authentication Policies in the admin console as shown below. To learn more, we've got a full breakdown in our blog post, plus a demo video showing built-in phishing protection in action. Be sure to check them out!November 2025 at 1Password: Access-Trust gap, planning your estate, and an updated unlock experience
Welcome to your monthly roundup of what’s new in the world of 1Password! Read our 2025 annual report: The Access-Trust Gap The Access-Trust Gap is the widening divide between the types of access that security and IT teams can control and the reality of how people, and now AI agents, access sensitive systems and data in practice. We recently published our annual Access-Trust Gap report with findings based on the responses of more than 5000 individuals working in security, IT, and knowledge-based roles. Our report presents insights on where the Access-Trust Gap is the widest, and where employees are commonly accessing resources without proper controls: 37% of employees don’t follow their company’s AI policy 52% of employees download apps without IT approval 70% of IT/IS professionals say SSO doesn’t secure employee identities Along with the report you can read three supporting articles which explore key insights in detail, and provide further recommendations on how to close the Access-Trust Gap with 1Password. Access-Trust Gap Report The enterprise AI crisis SSO is falling short Password habits are worsening Introducing a new unlock experience We’re excited to share that our updated unlock experience is now available on 1Password for Mac and Windows. This update introduces device-based unlock options as well as unlock presets that allow you to find the right balance of security and convenience. That means you can now choose to unlock 1Password with your device, use your device password to unlock 1Password, and adjust how frequently your password is required. You can find all the details in our announcement. Windows 11 Passkey Support Creating and using passkeys has been available on Windows with 1Password in the browser since 2023. Expanding our passwordless features, 1Password for Windows now offers native Windows passkey support. That means you can create and use passkeys in desktop apps, as well as in the browser, then seamlessly sync them with 1Password. If you have any questions, or are curious to learn more you can check out the announcement post here in the Community. Read our digital estate planning guide Estate planning is an important consideration for everyone. However, what often goes overlooked is a handover plan for online accounts and digital assets. This month we released our digital estate planning guide to help you make sure these important details aren’t forgotten. How will you transfer accounts with 2FA or passkeys to your family members? What will you do with accounts that are left to you in a digital estate? Our digital estate planning guide walks you through these questions and many more. You can find the digital estate planning guide, and our digital estate planning episode of Random but Memorable with Willful in our Community. Watch the latest episode of Securing the Win: Our continuing docuseries with Oracle Red Bull Racing We teamed up with Oracle Red Bull Racing to explore how world-class organizations balance performance and protection. In this month’s episodes you can push boundaries with Nimesh Kotech, read up on Matt Cadieux’s playbook, then get behind the wheel with Verstappen and Tsunodo. Episode 3: How Nimesh Kotecha pushes the boundaries of control Episode 4: Oracle Red Bull Racing CIO Matt Cadieux’s cyber resilience playbook Episode 5: Behind the wheel with Max Verstappen and Yuki Tsunoda Random but Memorable Episode 15.9 - Why you need a digital estate plan (and where to start) Episode 16.0 - How to avoid online shopping scams Release note highlights Browser Extension There are new unlock settings available for the 1Password browser extension. If you don’t integrate the browser extension with the 1Password app, select 1Password in your browser’s toolbar, then select the account menu > Settings > Security to manage your settings. We’ve fixed an issue where websites with many fields and dropdowns could crash in Chromium browsers when using the 1Password browser extension. Localization has been improved for a number of our supported languages using new translations from Crowdin. We’ve fixed an issue where business passkey policies prevented personal accounts from filling passkeys while 1Password was locked. Mac, Windows, and Linux We’ve fixed an issue where 1Password would open in front of other windows after a silent MSIX update. [Windows] We’ve fixed an issue that prevented rich SSH and CLI prompts from appearing on Wayland. [Linux] If duplicates are detected when you import environment variables, you can now choose to ignore, overwrite, or keep both. We’ve expanded the additional browsers you can connect to the 1Password app to include browsers that use more complex background processes. [Mac] When you view an Environment in 1Password, updated wording now distinguishes between temporarily revealing variables and changing their default visibility. We’ve fixed an issue that caused comma-separated URLs in code blocks within Secure Notes to change when you saved them. In-app updates are now blocked for MSIX system-wide installs and Microsoft Intune-managed deployments to avoid issues tracking 1Password’s install state, update failures, and de-provisioning. [Windows] iOS, and Android There are new unlock settings and presets available for the 1Password app, including Unlock with device. You can manage these settings in the app under Settings > Security. If biometric unlock fails, you can now use the SSO login option instead. [iOS] We’ve fixed an issue that caused comma-separated URLs in code blocks within Secure Notes to change when you saved them. We’ve fixed an issue where you couldn’t select the “Sign in” button after you changed your account email, and an issue where your Secret Key wouldn’t pre-populate after you changed your account password. [Android]August 2025 at 1Password: Android filling updates, Pax8 Marketplace, and AI security insights
Welcome to your monthly roundup of what’s going on in the world of 1Password! Updates to autofill in Chrome and Brave on Android devices Google’s recent changes to Chromium browsers on Android introduced improvements, but also created points of friction for third-party password managers like 1Password. In response, we’ve updated 1Password for Android’s integrations with Chrome and Brave to provide a stable native autofill experience. Install the latest version of Chrome or Brave, then follow the steps in our guide to get your browser integrated with 1Password for Android. You can learn more in a detailed post from Patrick, our Android developer extraordinaire! 1Password MSP edition now available on the Pax8 Marketplace After the general access launch of 1Password MSP edition earlier this year, we’re excited to announce our enterprise password manager is now available in the Pax8 Marketplace. The MSP edition of our enterprise password manager has been purpose-built in collaboration with over 1,000 MSPs to offer simple yet comprehensive tools for managing multiple clients, improving profitability while scaling, and protecting client data. Enhanced access review features with 1Password SaaS Manager 1Password SaaS Manager is helping to close security gaps created by unmanaged app access, shadow IT, and more. We’ve made this process easier and more efficient than ever with new access reviews. These new capabilities allow security teams to conduct continuous and scheduled reviews supporting proactive deprovisioning and access auditing across all apps. Reviews are automated and fully auditable with clear, detailed reporting. Research on security challenges caused by AI AI is front of mind for tech and security experts alike. In our ongoing work to lead security conversations relating to AI, we commissioned a survey of 200 North American security leaders which identified four key concerns around AI governance and security controls: Limited visibility into AI tool usage AI and security policy enforcement Unintentional exposure via AI access Unmanaged AI You can find more about these security concerns, and how to mitigate them with 1Password, in our blog post. Random but Memorable episodes in August How AI is supercharging social engineering attacks with Rachel Tobac 7 steps to secure digital parenting with Alanna Powers from FOSI Release note highlights Browser Extension An issue with “Hide on this page” has been fixed Improvements to performance with reduced input/output on page load An issue where the extension could become unresponsive in Firefox has been resolved Fixes and enhancements to saving, singing in with, and authenticating passkeys Improved filling behaviour on payhoa.com, ticketmaster.com, and chexsystem.com Mac, Windows, and Linux Hardware acceleration has been enabled by default on Wayland Fixes for incorrect update notices, incorrect banners requesting Git commit signing reconfiguration, erroneous “Item created in” notifications, and formatting for some right-to left-text locales A filling issue with Universal Autofill has been resolved iOS, and Android Fixes for a crash on unlock, and an autofill crash Passkey support for related URLs and subdomains, plus other passkey related enhancements A fix for an issue affecting SSO users that could prevent unlock after an email changeJune 2025 at 1Password: Better date formatting, new unlock settings, and a fresh integration
Welcome to your monthly roundup of what’s going on in the world of 1Password! In case you missed it Improved date formatting in the 1Password desktop app: With version 8.10.80 of the 1Password desktop app, date formats now follow the conventions of the language set at the operating system level. New unlock settings in beta for Mac: Customize how and when 1Password unlocks. For example, you can set 1Password to lock and unlock automatically when you lock and unlock your Mac. Coming soon to other platforms! Secrets syncing integration with AWS Secrets Manager: It’s now easier for developers and IT teams to sync secrets and environment variables from 1Password to AWS Secrets Manager. 1Password for Good: Learn what we did in June for Internet Safety Month. This month, we: Donated $30K to ABC Life Literacy Canada and Cyber-Seniors to further their online safety work since we know that older adults are vulnerable to online threats. Hosted an event with the non profit, Mission Bit and the Golden State Warriors about the intersection of sports and technology, where we shared tips about staying safe online with 40 high school students and provided free 1Password Family subscriptions. Provided over 400 1Password Family subscriptions through partnerships with the Family Online Safety Institute and the Southwest Grid for Learning in the UK to help children aged 11-13 stay safe online. Release note highlights for 8.10.80 and 8.10.82 Browser Extension If you’re a Wells Fargo customer, we’ve fixed an issue that prevented passkeys from working with the 1Password browser extension. We’ve updated some wording in the Autofill Behavior menu. “Only fill on this exact domain” is now “Only fill on this exact host”, and ports are now included in the description. Localization has been improved across our supported languages. We’ve fixed issues with autosubmit on auth.openai.com, cpaalberta.ca, and securedesjardinsbank.com. Windows, Mac, Linux When you select New Item > Login, the focus will now default on the title. We’ve fixed an issue where a tag could be deleted if you selected Rename Tag, didn’t make any changes, then you selected Save. Localization has been improved across our supported languages. We’ve updated some wording in the Autofill Behavior menu. “Only fill on this exact domain” is now “Only fill on this exact host”, and ports are now included in the description. [Linux-only] We’ve improved the error logging when Linux keyring connections fail. iOS When you select New Item > Login, the focus will now default on the title. Localization has been improved across our supported languages. We’ve updated some wording in the Autofill Behavior menu. “Only fill on this exact domain” is now “Only fill on this exact host”, and ports are now included in the description. Android When you select New Item > Login, the focus will now default on the title. You can now drag and drop item detail fields in multi-window mode. Localization has been improved across our supported languages. We’ve updated some wording in the Autofill Behavior menu. “Only fill on this exact domain” is now “Only fill on this exact host”, and ports are now included in the description. We’ve fixed an issue where you’d see an “offline” error if you tried to switch accounts while in the “Setup another device” page.February 2026 at 1Password: Benchmarking AI security & helping developers access secrets everywhere
February was all about AI agent security and developer workflows. From benchmarking model behavior to expanding programmatic access in 1Password Environments and SDK authentication, we continued strengthening how teams build and secure with 1Password. In case you missed it An ongoing conversation on OpenClaw and AI agents OpenClaw exploded in popularity this month, sparking curiosity across AI and tech circles. In short, OpenClaw is an AI agent that runs locally and performs personal assistant-style tasks such as managing your calendar, checking your email, or prioritizing tasks in your GitHub repository. From making reservations to building custom integrations, users have been quick to push the boundaries of OpenClaw. But with the excitement has also come concern. Agent gateways, such as OpenClaw, have access to the systems where they’re installed, making them a prime target for malicious actors. Since the beginning of the year, we’ve already seen skills that secretly instruct AI agents to deliver malware. As the use of tools like OpenClaw expands, it’s increasingly important to understand how to use them securely, and where the potential threats lie. Interested in the whole story? Our VP of Product, Jason Meller, has penned two recent write-ups on the topic: It’s incredible. It’s terrifying. It’s OpenClaw From magic to malware: How OpenClaw's agent skills become an attack surface Security Comprehension and Awareness Measure benchmark You might know how to spot and avoid phishing attacks, but can AI agents navigate the same scenarios? In our testing, even the most capable AI models were susceptible to common phishing strategies. As AI agents take on more tasks for us, and begin to act like employees, how they handle phishing is becoming a significant security concern. That’s why we built the Security Comprehension and Awareness Measure (SCAM). It’s a benchmark that tests how AI models handle phishing attacks when performing tasks like scanning your inbox or filling credentials. Security Comprehension and Awareness Measure (SCAM) Demo Alongside the benchmark, we also created a security skill. that serves as a phishing crash course for AI models. Introducing this skill improved the likelihood that each model we tested would detect and avoid a phishing test by as much as 59.9%. Programmatic access to 1Password Environments beta and desktop SDK authentication general access Building on last year’s introduction of 1Password Environments, we’re now adding programmatic read-only access. This release allows you to programmatically fetch secrets via CLI and SDKs when those secrets are needed, and only for the time that they are needed. Secure your secrets at runtime with the 1Password CLI and Environments With many thanks to our developer community for testing and feedback, we’re also introducing an update to 1Password SDKs. SDK integrations can now authenticate through the 1Password desktop app with a biometric, or password prompt. This supports workflows such as vault management, vault permissions, and batch item operations. Secure your desktop apps with 1Password SDKs Read the full launch post Evolving our partner ecosystem The 1Password Partner Program enables MSPs and other partners to help their customers adopt the familiar security solutions we provide. This program includes access to sales and technical training, as well as go-to-market resources to support onboarding and growth. We’re now focusing on simplicity, transparency, and consistency to best serve our mutual customers, and help partners scale their businesses. If you’re interested in becoming a partner, or learning more about the program you can read more in our blog post, or check out our partner program site. Random but Memorable February marks the start of a new season for Random but Memorable, our award-winning cybersecurity podcast! In this month’s episodes you can learn about practical security for the people you care about most, as well as guiding children to securely adopt AI tools. How security professionals actually protect their own families AI security tips for modern families with Childnet Release note highlights 1Password in the Browser 1Password items are now immediately cleared from the browser extension when a user is suspended. We’ve fixed an issue where 1Password could get stuck in a loop of repeatedly unlocking in Safari. We now correctly detect GitHub redirect URLs in the “Sign in with” flow. We’ve fixed an issue where 1Password could unexpectedly reload on a new tab in Firefox. Mac, Windows, and Linux We’ve fixed an issue where a prompt to turn on two-factor authentication couldn’t be selected. We’ve fixed an issue where the multi-factor authentication prompt could be missing when trying to unlock the app. We’ve added a new developer setting to enable SDK integrations, so you can authenticate SDKs with authorization prompts from the 1Password desktop app. If you load an empty .env file in Developer > Environments, it will now show a message saying no variables were found. [Windows only]: 1Password now supports a wider set of custom trusted browsers. [Windows only]: We’ve fixed an issue where the Windows Hello prompt could appear behind other windows or seem unresponsive. [Linux only]: We’ve updated our Flatpak Freedesktop dependencies to version 25.08. iOS, and Android [iOS only]: We’ve fixed an issue where Secure Note text would be cut off. [iOS only]: We’ve fixed an issue where exporting through Credential Exchange could fail for items with empty or incomplete website addresses. [iOS only]: We’ve fixed an issue where fields were intermittently visible when switching apps on iOS 26 if “Lock on Exit” was set to “Immediately”. [iOS only]: When a file attachment preview screen is dismissed in search results, it no longer re-appears automatically.
