Apple has moved password changes from a manual recovery task to an AI action. That is convenient, but it also means the same agent that can help fix a weak login can be steered into changing account access without a human approval step.
The updated Passwords app can use Apple Intelligence and Safari to sign into a site, replace weak or compromised credentials, and save the new password in the vault. Apple says the feature works across passwords, passkeys, Wi‑Fi credentials, and verification codes, and researchers warn that agentic systems are exposed to prompt injection, retrieval poisoning, and telemetry manipulation.
For teams thinking about AI assistants that can act inside browser sessions or account portals, the control problem changes fast: once an agent can behave like a user, credential changes become part of the attack surface.