Security and privacy have historically been treated as secondary to speed and innovation. Today, it’s commonplace for software providers to stick AI on top of their product with limited concern for security or privacy. This is a recipe for disaster if we don’t align the power of AI with the appropriate protection.
The agentic future is rapidly approaching, with standards being developed for agents to securely initiate and transact across platforms. People are already using agents to accelerate daily tasks, raising foundational questions about how we manage identity risk in the human-to-machine relationship.
Building secure, privacy-first AI
Dashlane envisions a future where AI elevates human flourishing with security, trust, and privacy by design. It’s a future where users can securely delegate to AI agents knowing their credentials and sensitive info won’t be misused or abused.
As a browser-native solution, Dashlane is uniquely positioned to act as the root of trust in secure human-to-machine credential delegation.
Our principles
Credentials remain attackers’ most-prized target to gain access, an issue that’s becoming more acute as AI agents begin to act and even decide on behalf of humans. This makes it ever more important that, as we build, integrate, and operate AI, we do so with a commitment to core principles that will protect both users and enterprises:
- Ensure privacy by default: Most companies follow a simple formula when building AI systems: Collect user data, send it to the cloud, analyze it there, and send back results. This violates the principles of a zero-knowledge architecture and leaves data exposed in unsecure channels. At Dashlane, we ensure complete user privacy by training our models without leveraging any customer data, with all computing happening locally on the user’s device.
- Credentials must stay under explicit user control: Granting an AI agent direct, programmatic access to a credential vault is too great of a risk, as there are documented cases of agents misbehaving. Our industry currently lacks fine-grained permissions and guardrails to define what, how and who the agent can share data with. Delegating credentials to authenticate is just the beginning; preventing destructive or unintended actions is the hard part.
- Maintain strict isolation: Dashlane operates in a sandboxed browser extension environment that’s isolated from web pages, meaning vault data and extension context are never exposed to the page itself and credentials are always stored in a trusted environment.
- Security and ease of use must go hand in hand: Dashlane was founded to simplify users’ digital lives. Strong security should reduce friction, not add to it. Any AI-powered experience that compromises usability in the name of protection will ultimately fail to achieve adoption or impact.
Our roadmap
We're advancing towards that future by harnessing AI to accelerate users’ digital lives and dynamically protect them from evolving phishing attacks. No matter where users browse, our real-time phishing protection can block threats the moment users are at risk, unlike traditional solutions that only intervene when users attempt to autofill or paste a saved credential.
Just as we make credential sharing simple and secure, we are working toward enabling users to securely delegate their credentials and other sensitive information to AI agents, whether that’s to make them more productive at work or help accelerate their digital lives. For businesses, our focus will be providing guardrails that give admins confidence that agents aren’t misusing or abusing access.
We’ve progressed towards this reality by testing Dashlane with certain AI-native browsers and connecting our credential intelligence with AI agents for security operations through the Dashlane Model Content Protocol (MCP) server.
Our next steps are to explore how AI can act as a copilot to aid users in strengthening their security posture and empower admins to answer complex questions that require correlating multiple data points and historical patterns. At the same time, Dashlane will always maintain its zero-knowledge architecture and ensure the privacy and security of sensitive corporate data.
By building privacy and trust into every layer of our platform, Dashlane is helping businesses and users confidently step into an AI-powered future.
Sign up to receive news and updates about Dashlane
