1Password

Following our Black Hat announcements, we’re bringing partners together to unpack what’s new across the 1Password Unified Access platform. Join us for the inaugural What’s New: Partner Edition, a new quarterly webinar series created exclusively for the 1Password partner community. We’ll cover the latest product innovations, what they mean for your customers, and the messaging and enablement resources available to help you turn these announcements into stronger customer conversations. You'll walk away able to: 🔹 Understand the latest Unified Access announcements and what they mean for partners 🔹 Confidently position 1Password's newest innovations with customers 🔹 Explore the partner messaging and enablement resources available to you 📅Tuesday, August 11 at 8am PST/ 11am EST/ 4pm BST Register here: https://bit.ly/4wEiauu #1PasswordPartners #webinar

Your business runs on credentials IT did not provision. A vendor login may sit in an employee’s personal vault even though the person who created it has left the company. The password has never been rotated, and IT may not know the account exists. Yet that credential can still provide access to a critical business system. The same issue appears across organizations. The contractor logins that outlast the contract, the break-glass accounts copied into multiple vaults, the credentials for apps that do not support SAML or OIDC. They were created outside standard provisioning workflows, but still grant access to real systems. Earlier this week, we launched 1Password Credential Governance, giving IT and security teams a repeatable workflow to: 🔍 Discover: Find company-owned Login items across employee and shared vaults, filter by domain, and surface high-risk credentials. 🔄 Reclaim: Convert unmanaged credentials into company-managed items, remove duplicates, and reassign access to the right users and teams. 🔐 Govern: Control who can view, use, and edit each credential, rotate or revoke access instantly, and maintain a full audit history of changes. The result is a continuous record of who can access a credential today and who could access it in the past: https://bit.ly/4fENH8c #CredentialGovernance #IdentitySecurity #1Password

New 1Password research found that 93% of IT security teams don't have a singular approach to monitoring AI agents. On average, organizations use a combination of 3 different approaches to auditing or monitoring the actions of AI agents. Which brings up the question: who should be held accountable for AI agents’ actions or behavior? Weigh in below. 

When developers need to move quickly, secrets often end up in the easiest place to store them and the hardest place to secure, plaintext .env files that IT and security teams can’t see, monitor, or revoke. That's the gap we're closing. With enhancements to Developer Watchtower and 1Password Environments, we're helping teams: 🔍 Find plaintext .env files on local disks 🔐 Remediate exposed credentials in one click ⚡ Easily store, share, and use developer secrets across the tools and workflows developers already rely on 👀 Give admins the visibility and reporting they need to manage credential risk before it spreads Developers shouldn’t have to choose between speed and security. See how 1Password helps teams ship quickly without leaving secrets exposed: https://bit.ly/4w0LcDn #IdentitySecurity #DevSecOps #ZeroTrust #Developers #1Password

An audit log that says “a service account accessed this item” does not tell you which workload made the request, where it originated, or what authorized it. 1Password Credential Broker is now in public preview, giving each workload its own identity and access only to the credentials it is approved to retrieve. Using Workload Identity Federation, Credential Broker validates the workload against a configured trust policy and delivers credentials on demand, without granting standing access to the vault. For GitHub Actions, every issuance is logged with the repository, branch, workflow, environment, and commit that initiated the request. See how Credential Broker keeps credentials out of pipeline configurations and plaintext .env files while giving security teams a clearer record of machine access: https://bit.ly/44XJkQM #CyberSecurity #DevSecOps #IdentitySecurity #1Password

The 1Password Environments MCP Server is now available on Cursor Marketplace. AI agents are moving beyond suggesting code. They are running applications, calling production APIs, and interacting with infrastructure, which makes the way they access credentials a critical security boundary. With the integration, developers can: ▶️ Move plaintext environment variables into 1Password ▶️ Create and configure 1Password Environments from Cursor ▶️ Run applications with credentials injected at runtime ▶️ Return variable names to the agent once credentials are secured in 1Password Access remains scoped to the task and requires explicit user approval that’s authorized through the 1Password desktop app. You can now build faster with Cursor while keeping secrets out of repositories, local .env files, and agent context. Get started: https://bit.ly/3RM39au #AI #DeveloperSecurity #MCPServer #Cursor #SecretsManagement

📣 | NEWS We’re expanding our Amazon Web Services (AWS) Marketplace programme with 1Password onboard. Partners across EMEA can now transact 1Password solutions through private listings, with access to our dedicated enablement, advisory and billing support services. 🛒 Learn more ⬇️ https://okt.to/c4RJOj #PartnerSuccess

🔦 Black Hat USA 2026 Talk Spotlight : "Catch It, Vault It: The Life of a Leaked Credential" Every leaked secret has a life cycle. Most companies never see it, until it's too late. GitGuardian's Ben M. and 1Password's Matt Egan trace one leaked credential from exposure to resolution: what's fueling this year's surge in credential-based attacks, how a secret gets caught and validated, how it's prioritized, and how it ends up permanently vaulted instead of sitting exposed in your codebase. Catch us live to see where detection ends and governance begins, plus a first look at what's next for the GitGuardian x 1Password partnership. 🕚 Aug 5, 11:00–11:15 AM 📍 Booth #4735 Add it to your Black Hat schedule and swing by! #BlackHatUSA #SecretsManagement #DevSecOps

We’re excited to be working with Snowflake on a new integration within the broader Cortex AI Gateway initiative to help joint customers securely govern third-party agent access across platforms. The integration is designed to give agents short-lived, task-scoped access without exposing raw credentials, while maintaining a complete audit trail of every interaction. As AI agents begin working across enterprise systems, they need a secure way to access them, and this integration is a step toward making that possible You can learn more about the integration here: https://lnkd.in/gQ7x5k3f

AI agents are changing who can access critical systems and how that access needs to be governed. 1Password Privileged Access helps security teams replace standing access with just-in-time, just-enough access for human, machine, and AI identities. Access is provisioned at request time, scoped to the task, enforced in the target system’s native policy layer, and revoked automatically when the work is complete. Every request, approval, and access event is logged. This gives organizations a clear way to govern access across cloud infrastructure, databases, Kubernetes, and developer environments without replacing the tools they already use. Explore 1Password Privileged Access at https://lnkd.in/gHDy9QPH