1Password is rolling out a new phishing protection feature for its browser extension. When users attempt to paste their credentials into a website, the extension will now display a pop-up warning, prompting them to pause and verify the site's legitimacy before proceeding. This adds a crucial manual check.

The feature acts as a second pair of eyes, complementing 1Password's existing refusal to autofill on spoofed domains. It's enabled by default for individual and family plans, while admins can activate it for enterprise users. This move addresses a common vector for credential theft, where scammers create convincing login replicas.

Phishing attacks remain a primary threat, and password managers have evolved to counter them. By forcing a moment of hesitation, 1Password aims to reduce successful attacks even when users manually copy-paste credentials. The protection began rolling out today, starting at $2.99 per month for individuals.