1Password introduces a new phishing prevention tool to flag unlinked websites

1Password has released a new phishing protection feature in its browser extension that warns users when they try to paste credentials into a website that is not linked to a saved login. The alert appears during manual paste attempts when the site does not match any entry stored in the user’s vault.

Previously, 1Password would block autofill on suspected phishing sites, but users could still copy and paste credentials into fraudulent pages. This update aims to close that gap by prompting users to confirm they trust the site before continuing, adding a brief pause that may help stop credential theft.

1Password says the feature is meant to address more convincing phishing scams enabled by AI, and warns that AI powered browsers could further increase the risk. It is available now in the extension settings under Notifications as “Warn about pasted logins on non-linked websites.”