AgentsAutonomy & tool use
1Password passes $500 million in annual recurring revenue and launches 1Password for Agents
1Password says its annual recurring revenue has passed $500 million. It credits the growth to products that let AI agents use logins without seeing them, and it launched 1Password for Agents with support for Claude, ChatGPT Work and Meta's Muse.
From the WSJ · Technology article of October 22, 2026 and cited sources: 1Password reports more than $500 million in ARR, up from $250 million in 2023 and about $400 million in late 2025. [2] [3] [4] [9]
SOURCES[2] 1Password press release, Oct 22, 2026 1password.com[3] Business Wire: 1Password surpasses $250M ARR (2023) businesswire.com[4] Wikipedia: 1Password en.wikipedia.org
AT Pulse research deskPublished · Updated · 5 min read · AI-assisted analysisAI-assisted, not human-edited. Methodology Corrections Who owns this site
- What happened
- 1Password reports more than $500 million in ARR, up from $250 million in 2023 and about $400 million in late 2025. [2] [3] [4] [9]
- Original source
- WSJ · Technology article, independent perspective
- Brief by
- AT Pulse research desk AI-assisted; publisher and contact on the desk page
- When
- October 22, 2026 article published
- Covered
- Oct 23 edition
- Evidence
- 11 sources across 9 sites
- 11Password Surpasses $500 Million in Revenue as AI Agents…wsj.com
- 21Password press release, Oct 22, 20261password.com
- 3Business Wire: 1Password surpasses $250M ARR (2023)businesswire.com
- 4Wikipedia: 1Passworden.wikipedia.org
- 51Password security advisory, Jan 30, 20261password.com
- 6ITPro: 1Password Unified Accessitpro.com
Reach: not measured yet
1Password reports more than $500 million in ARR, up from $250 million in 2023 and about $400 million in late 2025. The company is private, so these figures are unaudited. Its 90% year-over-year growth figure for Q3 refers to net new ARR, not total ARR. [2] [3] [4] [9]
1Password for Agents lets agents such as Anthropic's Claude, OpenAI's ChatGPT Work and Meta's Muse use stored credentials without seeing or permanently storing them. The earlier Claude integration, which runs only on Mac, fills logins through 1Password's own channel after the user approves with biometrics. Access is limited to approved items for a single session. [2] [7] [8] [9]
credential brokering for agents is now sold as a product, and major model makers have integrated it.
Read the full assessment
Implication: buyers should assess it alongside session-level controls such as scoped permissions and action approvals, because hiding a password does not limit what a signed-in agent can do.
Executive brief
1Password says it passed $500 million in annual recurring revenue (ARR), and it credits most of the recent growth to tools that secure AI agents. The headline from the Wall Street Journal says "revenue", but the company's figure is ARR. The company also claims monthly active non-human identities on its developer and AI tools grew 500% year over year (1Password). On the same day it launched "1Password for Agents", with named agent partners including Anthropic, OpenAI and Meta. 1Password is private, so none of these figures has been audited publicly. The point to watch is whether credential brokering becomes a standard control layer for agents.
What changed and event timeline
$250M ARR
1Password reported passing $250M ARR. More than two-thirds came from over 100,000 business customers ().
$400M ARR claimed
CEO David Faugno reportedly told CNBC the company had passed $400M ARR and was weighing an IPO in 2026 or 2027 ().
Agent-risk advisory
1Password warned that AI browser assistants could use an unlocked extension to reach the vault or trigger autofill if prompt injection steered them. It listed settings changes to reduce the risk ().
Unified Access launches
An agent-security platform for credentials, secrets and machine identities, built with Anthropic, Perplexity, GitHub, Cursor and Vercel ().
1Password for Claude
Claude can sign in to sites with vault credentials without the model ever seeing them. This launched on Mac only (;).
$500M ARR and 1Password for Agents
The company announced the milestone and a platform for personal agents (;).
Capabilities and access
- 1Password for Agents: agents use credentials without seeing or permanently storing them.
- Enterprise products: Unified Access, Privileged Access, Credential Broker and SaaS Manager (1Password).
- 1Password for Claude: Mac only, on Individual, Family and Business plans. Support for payment cards and identity details is planned (IT Brief).
Read the full section
- 1Password for Agents: agents use credentials without seeing or permanently storing them. PYMNTS lists Meta's Muse, Anthropic's Claude, OpenAI's ChatGPT Work and Dots, SpaceX's Grok Bot and Town's Townie as supported (PYMNTS).
- Enterprise products: Unified Access, Privileged Access, Credential Broker and SaaS Manager (1Password).
- 1Password for Claude: Mac only, on Individual, Family and Business plans. It needs the 1Password desktop app, the Claude desktop app and both browser extensions. Support for payment cards and identity details is planned (IT Brief).
Technical analysis for researchers and developers
- How credentials are delivered: 1Password fills the credential into the page through its own channel after the user approves with biometrics.
- Scoping: "Agentic Mode" locks the rest of the vault so only the approved items are available, and access lasts for a single session (IT Brief).
- Continuous verification: Unified Access re-checks authority at the moment access is requested instead of trusting a login all day (ITPro).
Read the full section
- How credentials are delivered: 1Password fills the credential into the page through its own channel after the user approves with biometrics. The model, its memory and Anthropic's systems never receive it. If a form submission fails, 1Password clears the values before handing control back to Claude (The Next Web).
- Scoping: "Agentic Mode" locks the rest of the vault so only the approved items are available, and access lasts for a single session (IT Brief).
- Continuous verification: Unified Access re-checks authority at the moment access is requested instead of trusting a login all day (ITPro).
- Evaluation: the reviewed sources contain no public red-team results or reproducible benchmarks.
Claims and evidence
- $500M+ ARR, double-digit free-cash-flow margin, 90%+ gross retention: reported by the company (1Password). These are self-reported by a private company and not independently corroborated.
- Growth rate: the press release says net new ARR grew about 60% over the first three quarters of FY26 and about 90% year over year in Q3.
- Customers: over 200,000 businesses, 85% of the Forbes AI 50, and Q3 new customers up 150% (1Password).
Read the full section
- $500M+ ARR, double-digit free-cash-flow margin, 90%+ gross retention: reported by the company (1Password). These are self-reported by a private company and not independently corroborated.
- Growth rate: the press release says net new ARR grew about 60% over the first three quarters of FY26 and about 90% year over year in Q3. PYMNTS describes the 90% as year-over-year growth without saying it refers to net new ARR (PYMNTS). Treat 90% as a net-new figure, not total ARR growth.
- Customers: over 200,000 businesses, 85% of the Forbes AI 50, and Q3 new customers up 150% (1Password).
- Agent tool adoption: customers using the developer and AI tools grow ARR about 5x faster (PYMNTS). This is a correlation, not proof that the tools caused the growth.
Context and prior work
- Funding: a $620M Series C in January 2022 valued the company at $6.8B (Crunchbase News).
- Growth pace: the reported figures imply $250M to $500M ARR in about three years.
- Earlier agent work: Secure Agentic Autofill with Browserbase applied the same "fill but never expose" approach to browser agents (Business Wire).
Read the full section
- Funding: a $620M Series C in January 2022 valued the company at $6.8B (Crunchbase News).
- Growth pace: the reported figures imply $250M to $500M ARR in about three years. From the $400M figure (Nov 2025), total ARR rose roughly 25% in about 11 months. That calculation comes from the reported figures, not from the company.
- Earlier agent work: Secure Agentic Autofill with Browserbase applied the same "fill but never expose" approach to browser agents (Business Wire).
Limitations, safety and contested findings
- Prompt injection is still a risk. The Next Web says it is not yet known whether 1Password's approach holds up against such attacks (The Next Web).
- The vendor's own advisory confirms an ecosystem-level risk.
- Hiding the password does not limit the session.
Read the full section
- Prompt injection is still a risk. Researchers have shown AI browser tools leaking credentials through prompt injection, and Claude's own extension was among those affected. The Next Web says it is not yet known whether 1Password's approach holds up against such attacks (The Next Web).
- The vendor's own advisory confirms an ecosystem-level risk. It notes that domain matching and confirmation prompts limit the damage, and that no cryptographic controls were bypassed (1Password advisory).
- Hiding the password does not limit the session. Once an agent is signed in, it has the full authority of that session (inference from the documented design).
Business and practitioner implications
- Buyers: credential brokering for agents is now sold as its own category.
- Developers: building agents on vendor-held credentials, rather than secrets in environment variables or prompts, matches what Anthropic and OpenAI integrations are adopting (PYMNTS).
- Investors: together with the IPO talk (Wikipedia), the milestone presents 1Password as an agent-identity company. Audited numbers would only appear with an IPO filing.
Read the full section
- Buyers: credential brokering for agents is now sold as its own category. Assess it separately from session-level controls such as scoped permissions and action approvals.
- Developers: building agents on vendor-held credentials, rather than secrets in environment variables or prompts, matches what Anthropic and OpenAI integrations are adopting (PYMNTS).
- Investors: together with the IPO talk (Wikipedia), the milestone presents 1Password as an agent-identity company. Audited numbers would only appear with an IPO filing.
The source trail.
Sources (11)
1Password Surpasses $500 Million in Revenue as AI Agents Drive Growth
Feed excerpt only.
wsj.com