Can agents keep a secret? We asked 1Password’s CTO Nancy Wang

Engineering leaders must shift security from a restrictive checkpoint to a "golden path" that accelerates development while maintaining rigorous quality standards. Nancy Wang, CTO at 1Password, emphasizes that the rise of AI coding agents necessitates a "no long-lived secrets" architecture, where credentials are injected directly into authorized runtime processes rather than stored on disk. This approach mitigates risks like credential theft while enabling teams to scale operations, as demonstrated by Oracle Red Bull’s reduction of wind tunnel recovery times from 60 to five minutes. Beyond speed, success hinges on measuring business-level outcomes—such as feature delivery and system resiliency—rather than simple PR counts. By empowering diverse roles, including customer support representatives, to utilize secure, agent-driven workflows, organizations can resolve technical debt and customer issues faster without compromising their core security posture.