Grateful for the opportunity to speak with our friends at @lightspeedvp about our journey at @1Password .
1Password’s push into AI met resistance inside the company.
David Faugno (@1PasswordCEO), CEO of @1Password, joined Lightspeed Partner @guruchahal on Cyber60 to discuss the company’s AI strategy.
He said some employees were skeptical when leadership committed to AI two years ago.
David helped connect the strategy to their existing mission: helping customers use emerging technologies safely.
That early work mattered when personal agents began gaining traction. Customers were reluctant to hand over their credentials.
1Password had already been building infrastructure to help agents access accounts while protecting those credentials.
As David puts it, “People want a trust layer” before letting agents act on their behalf.
Check out the full interview down below!
0:00 Welcome to Cyber60
1:29 Why 1Password Shifted to Enterprise
4:22 Scaling From Individual Users to Enterprise
7:37 How AI Is Transforming 1Password
11:28 Balancing Growth and Profitability
15:20 The Funnel Metrics in Cybersecurity
17:41 Building an Executive Team
20:39 Rapid-Fire Questions
Every day now seemingly brings another breach, and the postmortem almost always ends the same way. A credential was compromised, and it could reach far more than it should have.
We spend enormous energy trying to prevent the breach. Prevention matters, but I think we ask the wrong question afterward. The question is not only how did they get in. It is why did one stolen credential open so much.
Breaches are inevitable. Blast radius is a choice.
Every standing credential in your environment is pre-authorized damage. The API key on a hard drive that never expires. The token sitting in a config file. The agent running with persistent access to systems it touches once a month. When one of them leaks, and one of them will, the damage was decided by choices made months earlier.
So what can we do? Secure exposed credentials. Give every identity, human or agent, only the access it needs, only for as long as it needs it. Know where every credential lives, who owns it, and how to revoke it.
Agents make this urgent. Handing an agent your credentials is not automation. It is delegation without accountability.
You cannot shrink a blast radius you cannot see. Start by looking. How much standing access do you have? Most teams I speak with cannot answer that today. That gap is the risk.
Breaches are inevitable. What happens next is up to us.
David Faugno retweeted
If you're only working on vulnerability management, then you're only focusing on 1/3 of the problem.
If you prioritize breaking the attack paths around lateral movement and abuse of authorized access, then you're addressing all of the major attack vectors at once (vulnerabilities, phishing, stolen credentials, social engineering, software supply-chain, etc).
People love to focus on finding and fixing vulnerabilities because it feels good in the same way that running laps around a circular track feels good. You're moving fast and having predictable, repeatable tasks, but not actually getting anywhere.
Some of the biggest openings in security have nothing to do with patching
How breaches began, per a 2026 report:
- 31% exploited a vulnerability
- 35% used phishing, stolen logins or impersonation scams
And nearly half now involve a vendor or partner, up 3x since 2024
Full piece from a16z's Asaf Ezra and Steph Zhang on six cybersecurity companies worth building: a16z.news/p/defense-in-depth…
Appreciative of the recognition here.
The 4th annual Cyber 60 list is here.
This year’s list recognizes some of the fastest-growing venture-backed cybersecurity startups in the market, building to advance next-gen infrastructure, AI security, and how we approach threat detection.
Congratulations to everyone who made the #Cyber60 list in partnership with @FortuneMagazine and sponsor @AWSstartups.
Read our full CISO survey report, conducted with Wakefield Research, which polled 200 CISOs on enterprise AI and where they’ll invest next: lsvp.com/cyber60-2026-2027/
7
375
David Faugno retweeted
1Password Privileged Access is named as an Honorable Mention in the 2026 @Gartner_inc® Magic Quadrant™ for Privileged Access Management.
As cloud environments become more dynamic, standing access creates risk for every identity, from employees and contractors to service accounts and AI agents.
1Password Privileged Access helps organizations move from permanent permissions to just-in-time, just-enough access for people, workloads, and AI agents.
Read more about the recognition and how 1Password is helping organizations secure access at runtime: bit.ly/4szHdh6
David Faugno retweeted
We just launched 1Password for Agents.
Your agents can now sign in and complete tasks securely without seeing or storing passwords, secrets, or credentials.
If you haven’t used a personal agent yet, you probably will. When you do, using it with 1Password will make it easy to do it safely.
In my view, people will use different agents for different purposes and often log into resources the old-fashioned human way as well. Having a single trusted place to store your access secrets and keeping them out of harm's way by granting access just when it's needed, wherever it's needed, there's a big unlock.
As agents get more advanced and pervasive, the risk of exposed credentials can no longer be ignored. Recent security disclosures bring the risk into focus. We wrote a blog about reducing exposure.
1password.com/blog/reducing-…
This advice is likely to resurface a lot.
in light of the AI cyberattack mayhem going on right now, it's a good time to reshare Karapthy's Digital Hygiene guide
probably the most important thing you can read this week:
> use a password manager for every account
> set up physical security keys so attackers can't log in
> enable face id and fingerprint everywhere
> randomize your security question answers
> encrypt your hard drive
> get rid of unnecessary smart home devices
> switch to signal for private messaging
> use brave instead of chrome
> switch to brave search instead of google
> mint virtual credit cards for every purchase
> get a virtual mailing address
> never click links inside emails
> use a vpn on public wifi
> block ads and trackers at the dns level
> install a network monitor to see which apps are spying on you
We have a lot of new customers coming to us these days and we are committed to making the secure way the easy way. That’s an always on challenge. Thank you Cody.
It’s been a long time since I’ve had a non-ai product experience that felt magical.
I signed up for 1 password today and wow. It’s really impressive. Feels like magic.
Signed up after seeing the new agentic integrations.
1
10
967
David Faugno retweeted
The internet is being hacked right now so I made this emergency video with 6 steps that you can take to secure your account right now:
1. Disconnect apps and agents you don't use
2. Use @1Password with watchtower
3. Turn on two-factor auth with the right app
4. Rotate or retire your API keys
5. Ask AI to update software packages
6. Don't trust breach emails or calls
I also share a prompt that you can use to get AI to audit all of the above in the video description.
📌 Watch now: youtu.be/nXMlSq4aFBg
RT @1Password: Today we announce 1Password for Agents platform, building with companies @Muse, SpaceX Super Intelligence Grok @Bot, @Anthro…
David Faugno retweeted
now is a good time to repost Andrej Karpathy's blog post on digital hygiene: karpathy.bearblog.dev/digita…
David Faugno retweeted
PSA: in light of recent cyberattacks and vulnerabilities, I recommend everyone:
* use a good password manager (1Password) and do not duplicate passwords
* use two factor auth for everything important (not via sms!! Google Authenticator or better yet YubiKey)
* Auto-updates on, and restart weekly so they actually install
* Freeze your credit
* Get an IRS Identity Protection PIN
* Get your cell carrier to give you a port-out PIN or number lock that makes the carrier refuse to move your number without the PIN
You can ask your claude code to audit what on your laptop is out of date and needs updating.
David Faugno retweeted
Thank god for @1Password service accounts. Not a single variable in @Railway exposed, just pointers to 1p.
I agree about the responsibility to educate those who will be caught off guard about the risks and the basics being called out here. For our part, we continue to invest in the use cases our secure vault can support. The rate at which we see credential compromise doing harm is exploding. The investment we have made at 1Password in developer tools and AI/ builder platform integrations are driving rapid adoption but so many remain exposed.
When we started investing in AI safety, we did it because we believed our customers and future customers would need us when these bills came due. When the cost to attack trends to 0, everyone becomes a target, and standing access is a massive hidden risk.
Thrilled to be partnering with NVIDIA to bring credential security to the OpenShell Gateway. Read more here:
1password.com/blog/1password…
Yet another example of our commitment to being everywhere our customers need us to be as they adopt emerging technologies, and the vital role we play with our partners to put safety first and keep people in control.
David Faugno retweeted
We’re excited to share that 1Password has been named an Identity and Access Security finalist in the 2026 #TechForwardAwards! 🏆
Thank you to @thecubetv for this recognition.
➡️ Read more here: bit.ly/3UZrDeJ
Great upgrade!
I just added @1Password to my stack and gave my agents access to it. for all my clients
it's been a life changer
every client comes with their own logins. hosting, domains, email, dashboards, API keys. now the agents find the right account in 1Password, read only the field they need and use it. the passwords don't get printed in chats, logs or code
they can also save and update credentials when I ask them to, so new logins go straight into the vault
access to a login still isn't permission to send, spend or change anything live. that part stays with me
worth the sub if you're running an agency
4
1,687
David Faugno retweeted
Today, we’re launching support for Chrome extensions in the ChatGPT desktop app!
Bring the extensions you use every day to the in-app browser. You can now install, pin, and use your favorites, like 1Password, while getting things done with ChatGPT.
Enterprise admins can now centrally deploy and manage extensions across their workforce so the IAB meets security requirements.
Try it out and let us know what you think!