@1password Senior Product Designer • Coffee Drink'n Piano Tinkl'n 'Tiki' Enthusiast • Big Hugger • Pun Blurter • Not here for drama or politics. I’m not the GOP
🇬🇧
Joined February 2007
- Tweets23.6K
- Following3.7K
- Followers3K
- Likes15.3K
Benji ☕️ retweeted
I really hope you can appreciate good design and craft and support indie developers like @mymind @notboring @halidecamera @superwhisper and @zerocam_app instead of praising one-promted apps from celebrities.
We do it for people, with care and love. Not cash grab.
We care about design and experience as well as good result.
Benji ☕️ retweeted
Proud to see @1Password onstage at #MetaConnect as a partner for @Muse, the @Meta personal AI agent.
Thank you, @natfriedman, @alexandr_wang, and the Muse team, for the partnership. And a special thanks to those Metamates who flew across the country to work with us in Philadelphia!
Benji ☕️ retweeted
Apple Services is looking for a Design Systems Designer in Los Angeles.
jobs.apple.com/en-us/details…
I'm based in LA as well, can highly recommend. 🏄🏼♂️🌴
Benji ☕️ retweeted
We’re excited to collaborate with Instinct on safer experiences that help people share the credentials they choose, when they choose, while keeping security and control at the center. More to come.
Instinct + 1Password
32% of Instinct users already securely share their credentials with Instinct through our Vault. Today, we’re excited to announce our partnership with @1Password . Together, we are working with 1Password to roll out a product integration that enables users to seamlessly and securely share their credentials with Instinct.
Our users already use Instinct’s Vault to:
- Log in to loyalty accounts to book flights and hotels with points
- Manage streaming, software, and other recurring subscription accounts
- Book or cancel restaurant, fitness, and event reservations
- Sign in to healthcare portals to schedule and cancel appointments
- Easy access to tax, payroll, benefits, and expense management services
Together with 1Password, we’re working toward a future where people can share their credentials without compromising on security or control.
We’ll be rolling this out across our early access group.
If you’re not already in the platform, join at app.instinct.com/login.
More details about 1Password here:
1password.com/
Benji ☕️ retweeted
Universal Sign-In is now available to all 1Password customers!
After 4+ years of integrating every major auth method into 1Password, we could finally create a single, seamless way for you to sign into your sites with any auth method.
Learn more below: 1password.com/blog/introduci…
Benji ☕️ retweeted
New Zero-Shot Learning episode just dropped with Jeff Wang @jeffwang, former Windsurf CEO and now President of New Enterprise at @cognition, and Richard Liu, Head of API Products at @AnthropicAI.
The IDE may no longer be the center of software development. AI coding agents now fix bugs, vulnerabilities, and failed CI checks.
The next primitive is not more code generation. It is proof the work was done correctly.
Watch: youtube.com/watch?v=jwhASGKT…
Benji ☕️ retweeted
Write code or use AI to build?
Secure your daily workflows with 1Password’s developer tools.
Learn how to:
🔹 Secure your local environment
🔹 Eliminate plaintext secrets
🔹 Protect SSH keys and Git commits
🔹 Build secure AI-powered workflows
Start learning 👉 bit.ly/4xv9WEO
Benji ☕️ retweeted
This agent was user intent-aligned and user authority-misaligned.
Agents need a distinct identity and scoped authority. And we need to verify the path, not just the result.
A man in Australia asked his agent (Claude running on OpenClaw) to book him a spot in a popular gym class. The agent found a software vulnerability that let it book the class weeks further ahead than should have been possible. When the user then asked if it could move him up the waitlist, the agent discovered the API had no authorisation checks on cancelling other people’s reservations, so it cancelled the person in the first spot and moved him up the list.
Some people will call this misalignment, but his agent was perfectly aligned to him - it was only trying to help its user get what he wanted. The most important thing about this story, in my opinion, is that it gives you a window into what is about to start happening on a massive scale once millions of people have an agent trying to get their beloved users the best seats, bookings, appointments or reservations through absolutely any means necessary.
Benji ☕️ retweeted
Kept the Black Hat conversation going with Jonathan @aluveaux, CIO at @WeAreLegora and @jacobdepriest, CISO & CIO at @1Password.
Shared responsibility model: Labs provide frontier models. Applications authorize and execute.
Benji ☕️ retweeted
Standing room only for @1Password’s AI panel: @jacobdepriest, @aluveaux, @kpolley, and @DrewHintz, moderated by @jakestorm_.
Agent access has a Goldilocks problem: too little and tasks fail; too much and blast radius grows. Each agent needs an identity and task-scoped access.
Benji ☕️ retweeted
Anthropic’s eval compressed discovery and exploitation into one autonomous loop.
If the attack is agentic, the defense must also be agentic: constrain egress, issue credentials per task, log every action, and revoke access instantly.
axios.com/2026/07/30/anthrop…
Benji ☕️ retweeted
1/ Standing access starts with a good reason. Someone needs it, gets it, nobody takes it back. It builds across cloud, databases, k8s and CI/CD faster than anyone keeps a list, and agents inherit whatever their deployer had.
Privileged Access (launching today from @1password) grants only at request time & revokes when the task is done.
1password.com/product/privil…
Benji ☕️ retweeted
Most teams grade an agent on whether the output was correct. That's the wrong unit of measurement.
@adarsh_exe put it plainly on Episode 5 of Zero Shot Learning from @1Password: a model can answer correctly the first time and still make every wrong decision getting there. Move it to a slightly different context and you've got an agent that's broken in production.
Grade the task, the trajectory, and the output. Trajectory is where the failures live, and it's the first thing that goes when the context shifts.
The rest of what we got into:
- Evals are infrastructure. Every model swap and prompt change means the evals have to move with them, and most teams are still treating them like a one-time gate.
- Staged rollout keeps the blast radius small. Scope what the agent can touch at each step instead of handing it everything and finding out.
- Authentication for agents may already be a bigger market than authentication for humans.
Watch the full conversation:
Benji ☕️ retweeted
AI is priced by consumption. Every prompt and model call compounds the bill.
This is the problem we are solving with AI Spend and Consumption Management in 1Password SaaS Manager.
As our CFO Greg Henry puts it, “Organizations need better data and alerts to understand where model usage is creating value to keep budgets well managed as AI adoption grows.”
Read more to get ahead of AI spend before procurement gets the call: bit.ly/3TmGB0v
#AI #SaaSManagement #FinOps #ITLeadership #tokenmaxxing #AIROI #AIGovernance #AgenticWorkflows
Benji ☕️ retweeted
Local AI agents shouldn't rely on long-lived credentials. Our latest deep dive explores delegated identity for local agents using OAuth 2.0, OIDC, SPIFFE, WebAuthn/FIDO2, and CAEP, so every action is scoped, short-lived, and traceable to a human. bit.ly/45mpqyU
#AI #Security #Identity #ZeroTrust #AgentIdentity #Developers
