Password manager 1Password has introduced a new built-in phishing protection feature designed to stop users from accidentally sharing their usernames and passwords with scammers.<\/p>\n
The feature adds an extra layer of protection by warning users when they attempt to paste their login credentials into websites that don\u2019t match the URLs stored in their 1Password vault.<\/p>\n
Phishing Scams Are Getting Harder To Detect<\/strong><\/p>\n Phishing attacks have surged in recent years, driven in part by artificial intelligence (AI) tools that help criminals create polished emails, messages, and realistic-looking fake websites at scale. These often imitate well-known brands and rely on small details \u2014 such as a slightly misspelled URL \u2014 to trick users into believing they are on a legitimate site.<\/p>\n Why Traditional Protections Aren\u2019t Always Enough<\/strong><\/p>\n Like other password managers, 1Password already refuses to autofill usernames and passwords on websites whose URLs don\u2019t match the ones saved in a user\u2019s vault. While this helps prevent many attacks, the company says that protection alone isn\u2019t always enough.<\/p>\n In some cases, users assume the autofill failure is due to a technical issue and manually copy and paste their credentials into an unfamiliar or unrecognized website \u2014 handing sensitive information directly to attackers.<\/p>\n How The New Phishing Warning Works<\/strong><\/p>\n To close that gap, 1Password browser extension now displays a pop-up warning when users attempt to paste their credentials into a fake website. The alert prompts users to slow down, double-check the website address, and verify that it is legitimate before continuing.<\/p>\n \u201cIt’s easy for a user to miss that extra “o” in the URL, especially if the rest of the page looks convincing,\u201d the company explained, using a typo-squatted Facebook domain as an example. The goal of the pop-up, 1Password says, is to snap users out of autopilot and encourage a second look.<\/p>\n