Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password for Claude: Give Claude access without giving up your credentials

1password.com

Post reply on HN
Print view View original

1–10 of 10 posts

Re: 1Password for Claude: Give Claude access without giving up your credentials

#5

Post by terracatta »

mdni007 wrote: post #4

Why bother? If you're giving Claude access to your account anyways why not just give it your password too? Assuming you use a randomly generated password for every account you have.

You don't want passwords to enter into inference/context because once they are there the AI can accidentally share or be tricked into sending the password to other places.

With this solution to explicitly approve which credentials it can access for each task and the passwords themselves are never shared...Claude just can ask

1Password to fill them in for it at the right time in the browser. This is much safer.

We did some novel research earlier this year if you really want to see why it's bad for AI agents to just be able to grab things in your password manager...

https://1password.github.io/SCAM/replays/phish-shared-doc.ht... that's the nightmare scenario.

Re: 1Password for Claude: Give Claude access without giving up your credentials

#7

Post by terracatta »

laul_pogan wrote: post #6

How is this different than OP CLI with a service account?

Much safer as the technique ensures the AI agent never even sees the creds vs the CLI the inference/context can see them which opens you up to a whole class of security risk.

https://support.1password.com/1password-claude-security/

Re: 1Password for Claude: Give Claude access without giving up your credentials

#9

Post by laul_pogan »

terracatta wrote: post #7
laul_pogan wrote: post #6

How is this different than OP CLI with a service account?

Much safer as the technique ensures the AI agent never even sees the creds vs the CLI the inference/context can see them which opens you up to a whole class of security risk. https://support.1password.com/1password-claude-security/

Oh wow! I had no idea. Even with a service worker? I'll switch over to this- it works just as well for insertion and .env replacements in claude code?
Post reply on HN