@1Password Global Advisory CISO, keynote, breaker of things, dad, creator of (-:|3, OG, raconteur, conflicted, gentleman spy, investor, whisky distillery owner
Canada
Joined March 2007
- Tweets78.5K
- Following1.9K
- Followers36K
- Likes34.7K
Dave Lewis retweeted
My forward to the 40th anniversary Phrack, released today at [un]prompted. A true honor, and responsibility, I will not soon forget.
Thank you to the Phrack team for all you do, and for being what this community is about for so long. We owe you so much
Dave Lewis retweeted
Today we announce 1Password for Agents platform, building with companies @Muse, SpaceX Super Intelligence Grok @Bot, @AnthropicAI’s @Claudeai, @OpenAI, @TownAI, @Browserbase, @Browser_use, @heydana_ai, Instinct, @usekernel, @Perplexity_ai, @tryramp, @Tomo, and @wajo_ai, with more integrations on the way. 🎉
We've heard from so many of our customers who want to use these new personal AI agents to help them get more done, but want more control over what the agent can access with the same trust and ease of use they get when using 1Password directly.
1Password for Agents gives your agents access without giving up your passwords. When an agent reaches a sign-in form, it requests a credential from your vault. If you approve the request, 1Password directly auto-fills the credential in the destination site so the agent can’t see or take possession of the credentials.
The agent gets the task done, but it doesn’t get your passwords..
You stay in control. 1Password for Agents free and optional for personal and family accounts. Unless you opt-in to an agent connector, agents cannot touch your vault.
➡️Learn more: bit.ly/487da6J
Giving an #AI agent full access for testing has a way of becoming permanent. "It worked in test" is a thing. Clean up prototypes before they become production.
#AI security starts before the prompt and continues after the response. Credential use is the part that needs discipline.
The biggest mistake in agentic #AI is convenience first, governance later. Later usually arrives after the exposure.
Credentials now move through browsers, terminals, IDEs, CI jobs, and agent frameworks. Security has to meet them there. Otherwise fire bad...something something.
The easiest way to lose control of agentic #AI is to treat non-human access like a copy of human access. It's really not that hard.
I didn’t realize the Moroccans sent their swim team to the FIFA World Cup. I’ve never seen so much diving.
Most enterprise AI risk is not science fiction. It is exposed keys, shared vaults, stale service accounts, and missing approval paths.
and a Happy #July_4th to my American cousins!
A smart model can still run inside a weak control plane. Over-permissioned agents fail with confidence.
If your AI agent can reach customer data, prod systems, and SaaS admin panels with the same token, you do not have automation. You have concentrated risk.
Fresh Chasing Entropy podcast goodness now available!
In this episode of the @1Password Chasing Entropy podcast, I sit down with Jaya Baloo, co-founder and COO/CISO of AISLE™, to unpack one of the most important shifts happening in cybersecurity right now: the collision of #AI, vulnerability management, and operational reality.
Link: podcasts.apple.com/ca/podcas…
That awkward moment when you realize that the conference put your former company name on your conference badge.
Cisco reported record profit and cut 4,000 people the same day. This is cold as hell. My thoughts are with my former colleagues who find themselves out of job. arstechnica.com/information-…
