1Password hits $500M ARR with 90% YoY new-ARR growth, launches agent credential management product

1Password for Agents

1Password has crossed $500M ARR, and the growth behind that number is striking. New ARR in Q3 grew 90% year-over-year, and new B2B logo additions were up 150% versus the same quarter last year. CEO David Faugno attributes the acceleration directly to AI agent adoption — specifically, the security problem agents create when they're handed standing credential access and left to operate without controls.

“We put out a press release around our business momentum, about a $500,000,000 in ARR now. We're across that threshold, and we did it at Accelerate. New ARR for q three was 90% growth year over year. We're adding new logos on the B2B side at 150% growth over quarter over last year. And it's very much driven by awareness that especially in the development cycle, agents need access.”

The product launch

This week, 1Password launched 1Password for Agents, a credential management layer designed to give AI agents just-in-time, least-privilege access to secrets without those credentials ever entering the model's context window or sitting in a file where another agent could retrieve them. Launch partners include SpaceX AI, MetaMuse, Anthropic, and OpenAI.

The core mechanism is that the secret is scoped to a specific agent, for a specific task, delivered at the moment it's needed — then gone. Faugno argues this architecture is non-negotiable given that AI agents are non-deterministic actors: even well-intentioned agents behave unpredictably, and malicious injection or credential drift can cause real damage. The same just-in-time principles that 1Password has applied to enterprise secrets management for years are now being extended to this use case.

Why the timing

The threat environment is the demand driver. Faugno points to a pattern running through recent high-profile security incidents, including the Hugging Face breach: in almost every case, attackers gained entry and then looked for standing credentials to pivot. AI is lowering the cost of launching those attacks toward zero, which means the threshold for being a worthwhile target has effectively disappeared. When attacks are automated and nearly free, any exposed credential is a liability.

What's next

Faugno signals that agentic credential hygiene will extend to the consumer side — think automated password resets and remediation, roughly an agentic version of 1Password's existing Watchtower feature. The constraint is that any such automation has to preserve the zero-knowledge architecture of the vault, with decryption happening inside confidential computing environments so secrets are never exposed to the agent or to a potential attacker during the process.

On multi-factor authentication, Faugno ranks hardware keys as most secure, passkeys as the practical best choice for most users, and SMS as the weakest option given how easily SIM swapping can be executed.

The commercial thesis is tight: AI agent adoption expands the credential attack surface faster than most organizations are tracking, and 1Password is positioning itself as the control layer between agents and the secrets they need to function. The 90% new-ARR growth suggests enterprises are starting to pay for that.