1Password Unveils New Feature to Combat Phishing Threats

A successful phishing attack can hit a business with an average cost of $4.8 million, as highlighted by research from IBM. To help mitigate this risk, whether at work or home, 1Password is rolling out a new phishing prevention feature designed to detect common signs of an attack, like slightly misspelled website URLs.

When a user clicks a link that leads to a website with a URL that doesn’t match their saved login details, the 1Password browser extension takes two key actions. First, it refrains from autofilling login credentials, and second, it presents a pop-up warning that states the current website’s URL “isn’t linked to a login in 1Password.”

While this feature isn’t a guaranteed shield against phishing attacks, it does raise awareness. Users can still opt to manually enter their credentials on a suspicious site, but the warning aims to encourage them to pause and reconsider their actions.

The rollout of this phishing prevention feature begins today, though it may take several weeks for all users to gain access. For those on individual and family plans, the feature will be enabled by default once available. However, businesses will require their 1Password Admins to activate it manually.