Logins get filled through a channel Claude can’t see

When Claude hits a login wall, it can hand the request to 1Password rather than see your password. The password and one-time codes never enter the model’s context, memory, or Anthropic’s systems.

1Password shows which saved item Claude is asking for, and you approve it, pick a different login, or deny. During the fill, Claude stops reading the page until 1Password reports back, so the credentials are already submitted by the time it looks again. Passkeys and other item types aren’t supported.

Agentic Mode kicks in as soon as Claude takes control of the browser, so only items approved for the current task stay reachable. Setup needs a Mac, 1Password for Mac and the browser extension at version 8.12.28 or later, plus the Claude desktop app and Claude in Chrome.