https://1password.com/blog/index.xml · source : Passwords, Secrets, and Access Management | 1Password
Recent content in Blog on 1Password Blog
📈 16,8 articles / mois — soit ~1 article tous les 1,8 jour · dernier le 11/08/2026 00:00
100 articles datés · regroupés par mois.
✅ 6 bons points ❌ 1 à corriger sur 7 critères évalués.
🔒 Le détail du calcul (note par critère : intégrité technique, découvrabilité, conformité podcast ouvert…) est réservé aux abonnés — connectez-vous.
It happened again. We blinked, and suddenly summer’s over and it’s time to register for classes. The horror!While the start of a new school year has always been a stressful time for parents and students, the growing number of accounts, apps, and devices students have been responsible for in recent y…
Lire l'article →AI agents have crossed an important line from making suggestions to taking actions. They can read a repository, call internal systems, change code, open a pull request, and keep working while the human moves on.In this world, it is no longer enough to ask whether a model is capable. We have to ask: …
Lire l'article →AI is changing how products get made. For user experience teams, that means the very shape of the work is changing.There are two key elements of user experience design. On one side is craft: the interaction, nuance, visual judgement, emotional texture, and other qualities that make a product feel co…
Lire l'article →AI has changed the calculus of a credential attack. Before, finding and exploiting credentials in an enterprise environment required time, patience, and human judgment. An attacker had to decide which accounts were worth testing and which systems were worth reaching. Many credentials never made the …
Lire l'article →We studied what happens when Large Language Models (LLMs) generate vulnerability patches for recently disclosed, complex vulnerabilities. Our data shows that LLMs produce Fix-Like Artifacts with Embedded Defects (FLAWED) 53.9% of the time when complex patches are required. By sharing the results of …
Lire l'article →It's 6:30am and you hear the door of the nightclub you've spent the last 8 hours inside shriek as it closes behind you. You watch bleary-eyed as an overly bright sunrise illuminates the business-suited people as they glide effortlessly along the sidewalk, their obnoxiously well-rested faces talking …
Lire l'article →On August 2, 2026, Productiv told customers its SaaS management platform was shutting down on August 6, with account data deleted once access ended. Four days is not much time to pull years of app inventory, spend, and usage data out of a system you've come to depend on, especially with AI tools now…
Lire l'article →Earlier this year, a bill arrived from one of 1Password’s AI vendors for 5x the value of the original contract. The initial agreement came in below a certain threshold, so it never reached the right approvers for review. By the time it did, we had a much clearer understanding of how quickly AI costs…
Lire l'article →Zero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the complex decisions it takes to ship with AI. In this episode, 1Password VP, …
Lire l'article →In our last post, we shared how we began to scale our security code review process with SAGE. We discussed how we gathered historical Product Security (ProdSec) review records to create a 1Password-specific ruleset, the three-stage Finder/Critic/Judge pipeline, and the limitations of our v1 implemen…
Lire l'article →AI agents are doing more than just generating code. Increasingly, they are working autonomously on complex coding challenges, touching production APIs, databases, and infrastructure across development environments, often without thorough human review. To perform these operations and access multiple …
Lire l'article →Every security team has tried to trace a credential access event back to a specific workload, and received nothing but a "service account." That service account probably had access to an entire vault, and its audit trail doesn’t tell you which repo triggered the request, which specific credential wa…
Lire l'article →Summary and key findings1Password surveyed 500 American IT and security professionals and 500 developers to learn how organizations are adopting and governing AI for their most technical workers. We found that companies are racing to embed AI agents throughout their systems, but have done so without…
Lire l'article →Here's a moment that comes up in nearly every compliance review: a security engineer pulls a list of IAM roles in the AWS environment. The list is long. Some roles were created for a migration project that closed two quarters ago, a few belong to contractors who haven't worked there in over a year, …
Lire l'article →No developer wants to be responsible for causing a catastrophic breach. But security best practices are often incompatible with the expectation that developers constantly write and ship code, and that velocity is massively accelerating thanks to AI adoption. Developers trying to work fast need conve…
Lire l'article →Right now, in one of your employee's personal vaults, there's a login for a vendor portal your team has been using for three years. Whoever set it up no longer works at the company. The password has never been rotated. And until today, you didn't know it existed.That credential was created outside y…
Lire l'article →Do you prefer a short flight or a long drive? Do you have an undiscovered love for esports? Do you look good with bangs and, if not, do you look good in hats? College is the perfect time to learn and discover new things about yourself, in the classroom and beyond. It’s also the perfect time to learn…
Lire l'article →Consider a few tasks that take place across every business, every day:A product team ships a feature and wants to know if customers are using it successfully.A finance team needs customer and account information for planning. An analyst needs definitions to create a report. An AI assistant needs ope…
Lire l'article →Part 3 of our agent-identity series: a reference architecture showing how a locally running AI agent, like the coding assistant in your editor or the copilot in your browser, can borrow a human's authority in a scoped, short-lived, auditable way, anchored in an app the user already trusts.The second…
Lire l'article →AI agents are moving from helping people think to acting on their behalf in browsers, apps, and accounts. That changes the security model. Once an agent can click, buy, update, and submit for you, the key question becomes: what identity is it acting under, and what access should it get? Claude can c…
Lire l'article →A nasty shock is hitting finance leaders across every industry right now: AI token bills that run ten, twenty, even a hundred times over what they forecasted, blowing holes straight through quarterly budgets. These leaders are all asking the same questions: How could this happen if they didn't appro…
Lire l'article →Zero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the complex decisions it takes to ship with AI.Adarsh Hiremath, Co-founder and …
Lire l'article →Black Hat is where the security industry gathers to compare notes on current cybersecurity topics. It brings together a diverse group of security experts, from C-suite executives to black-hat hackers. Some attendees see it as a target-rich environment for testing their latest hacks. Many hackers and…
Lire l'article →Note__This blog is a recap of 1Password’s recent webinar, “The credential sprawl tour: Is your department leaking secrets?” [Head here](https://1password.com/webinars/secure-every-credential) to watch the complete webinar recording.__ Credential sprawl has long been an issue IT and security teams ha…
Lire l'article →The cybersecurity landscape is changing fast. At 1Password, that means we’re continuously evolving what we work on, how we work, and the culture we need to achieve our goals.Last year, I wrote about what high performance means to us. As our industry continues to move quickly, I want to share a more …
Lire l'article →Zero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the decisions it takes to ship with AI.Ankur Goyal, Founder and CEO of Braintru…
Lire l'article →The engineers here at 1Password are always working to improve our products. With all the active development to introduce features, fix bugs, and enhance the overall user experience, numerous code changes go into every release. We strive to ensure each iteration is better than the last and that new c…
Lire l'article →This is the second post in a series that follows 1Password’s response to NIST’s call for input on how those principles should apply to agents. In our last post on agent identity, we introduced why the ability to reason makes agents fundamentally different from traditional machine workloads, why it b…
Lire l'article →For years, our Pride Employee Resource Group (ERG) has been building something that goes far beyond a single month on the calendar: a community rooted in connection, visibility, and belonging for employees and allies across 1Password.This Pride Month, we're spotlighting Chris Houckham-West, a Custom…
Lire l'article →When 1Password announced we were having an AI-themed Hackathon, my first thought was that the content design team had to be involved. Over the last few months, our content design team saw massive changes not only in tech but also in our ways of working. It felt like everything was shifting to AI all…
Lire l'article →Today we're shipping a new capability directly into 1Password Device Trust that lets admins query their fleets faster, without needing to be SQL experts. Now you can describe what you want to investigate in plain English, and Device Trust generates a ready-to-run SQL query you can execute across you…
Lire l'article →Recognized for Completeness of Vision and Ability to Execute1Password has been recognized as a leader in the 2026 Gartner® Magic Quadrant™ for SaaS Management Platforms. SaaS Manager gives IT and security teams visibility into unapproved AI use and every app, AI tool, and dollar spent across their o…
Lire l'article →AI agents now write code, fix bugs, and ship to production. But in order to do useful work, agents require credentials. At 1Password, one of our core AI security principles is that raw credentials should never be directly exposed to LLMs, but all too often, that’s exactly what happens: most teams sa…
Lire l'article →"The hardest thing in security is always the chaos," according to Travis McPeak, Head of Security at Cursor. He shared this with Nancy Wang, CTO of 1Password, and Dev Tagare, Senior Director of Engineering at Google, on a recent episode of Zero-Shot Learning, the podcast about how AI gets built, sec…
Lire l'article →One of the less surprising findings of the 2026 Verizon Data Breach Incident Report (DBIR) is the fact that incidents targeting the Financial and Insurance sector are on the rise. As they put it, “This sector continues to be a favorite among attackers, which isn’t surprising given that its core busi…
Lire l'article →At 1Password, we regularly invite outside experts to challenge our assumptions and strengthen our security. We encourage security researchers to participate in our bug bounty programs, and have spent years building a collaborative research environment. We also believe in the benefit of open source s…
Lire l'article →Right now, somewhere in your organization, a service account token is sitting in a CI/CD environment variable with access to your entire cloud environment. The job it was created for got deleted three sprints ago, and nobody knows it's still there.Unfortunately, that’s not just a worst case scenario…
Lire l'article →Over the past two decades, 1Password has earned the trust of millions of people, more than one million developers, and over 180,000 businesses by helping them secure one of the most fundamental elements of digital life: identity.Today, I’m thrilled to share that 1Password has acquired Apono, and I w…
Lire l'article →Listen to this episode on Apple PodcastsnullListen nowListen to this episode on SpotifynullListen nowAnyone who thinks security leaders are humorless sticklers for the rules has never spent half an hour with Jaya Baloo. But in this episode of Chasing Entropy, Dave Lewis does just that, and the resul…
Lire l'article →Every year, the Verizon Data Breach Investigations Report (DBIR) is one of the most hotly-anticipated and widely-read documents in security. And every year includes some surprising stats and reshuffles the top few threat vectors. But longtime readers will notice that the 2026 DBIR features some advi…
Lire l'article →