Browser agents · ChatGPT
How to let ChatGPT sign in without pasting your password
Short answer
Sign in through ChatGPT’s secure sign-in form or take over the browser; never paste the password into the conversation. When ChatGPT’s cloud browser reaches a sign-in page, it pauses and offers you both, and OpenAI says what you type in that form is not visible to the model.
If the login has to pass between people, send it as an Argoned sealed link, an encrypted link that opens once, so it never sits in a chat or inbox. Whoever runs the task then uses ChatGPT’s secure form.
Naming
First, which “ChatGPT agent”?
OpenAI has renamed and merged its agent features during 2026. Its help centre now lists “ChatGPT agent” as no longer available and points to ChatGPT Work, which uses a cloud browser. The ChatGPT desktop app also has a built-in browser, and there is a ChatGPT browser extension.
The advice on this page applies to all of them: the password belongs in a sign-in form, not in the conversation.
Sign-in pages
How ChatGPT handles a sign-in page today
- When the cloud browser reaches a supported sign-in page, it pauses and asks you to sign in through a secure sign-in form.
- OpenAI says credentials entered in that form go directly to the remote browser, are not visible to the model, and are not stored by ChatGPT.
- The signed-in session can stay active for later tasks until it expires or you clear the cloud browser’s data.
- If ChatGPT gets stuck, it asks you to take over the browser, and you can ask for a take-over link yourself. OpenAI’s agent help page says screenshots are not captured while you control the browser.
- OpenAI’s guidance is explicit: never paste passwords, security codes or payment details into the conversation.
Compared
Ways to give ChatGPT a login, compared
| Option | What ChatGPT can see | When to use it |
|---|---|---|
| Paste it into the chat | The password, in the conversation history | Never |
| ChatGPT’s secure sign-in form | Not the password, according to OpenAI. The signed-in session persists until it expires or you clear it | You are at the screen and the site is supported |
| Take over the browser | Whatever is left on screen after you hand control back | Sites that need extra steps, such as a security code |
| Argoned sealed link, then the secure form | Nothing in the chat; the person signing in opens the link in their own browser | The login belongs to someone else, or another person runs the task |
Step by step
Step by step: when someone else holds the login
A common case: you run the ChatGPT task, but the login belongs to a client, a colleague or your own other device. Use the sealed link to move the credential between people, and the secure form to enter it.
-
The owner seals the login
In Argoned, the owner opens the login, taps Share on the password and picks the shortest expiry that works (1 hour, 24 hours, 48 hours or 7 days). The link opens once.
-
Link and code travel apart
The owner sends the link one way, for example by email, and the access code that unlocks it another way, for example in a call or a text message.
-
Open it in your own browser
Open the sealed link in your normal browser, not inside ChatGPT’s browser, and type the access code. The password is decrypted in that tab.
-
Sign in through ChatGPT’s secure form
When ChatGPT pauses at the sign-in page, enter the login in its secure sign-in form or take over the browser. Do not paste it into the conversation.
-
Close up afterwards
Clear the cloud browser session if you do not need it again, and ask the owner to change the password after important tasks.
Afterwards
What to do after the task
- Sign out, or clear the cloud browser’s data, so the session does not stay active for later tasks.
- Change the password of any account that matters.
- Cancel any unopened sealed links you no longer need, in your vault under Session → Shared links.
FAQ
Questions
Is it safe to type my password into ChatGPT’s secure sign-in form?
OpenAI says credentials entered there go directly to the remote browser and are neither visible to the model nor stored by ChatGPT. The signed-in session can stay active for later tasks, so clear it when you are done.
Can ChatGPT see my password if I take over the browser?
OpenAI says screenshots are not captured while you control the browser. Once you hand back control, ChatGPT can see whatever is on screen, so do not leave a password visible.
What if ChatGPT asks me for the password in the chat?
Do not paste it. Use the secure sign-in form or take over the browser. OpenAI’s own guidance says never paste passwords into the conversation.
Does ChatGPT need an Argoned account to open a sealed link?
No. Whoever opens the link needs only a browser and the access code.
Keep reading
- Is it safe to give an AI agent your password? What pasting a password really exposes.
- Give Claude access to your accounts, safely Claude in Chrome and your logins.
- Let an AI assistant run errands without your passwords One login per errand, not your list.
- Encrypted credential sharing for AI agents How a sealed link works, step by step.
- AI agents Five ways to hand over a login, compared.
- Pricing Free: 8 items and sealed sharing with AI agents and people, no card. Pro: £2.99 a month for 512 items and import.
- Security How Argoned encrypts each item and each shared credential in your browser, what our servers store, and what is not protected yet.
Sources
- Using cloud browser in ChatGPT · OpenAI Help Center, read 16 October 2026
- ChatGPT agent · OpenAI Help Center, read 16 October 2026
- Using the built-in browser in the ChatGPT desktop app · OpenAI Help Center, read 16 October 2026
Your agent needs a login. Send it sealed.
Seal a login or API key in your browser and send a link instead of the password.
£0 · Free plan, no card needed · Encrypted in your browser