AI agents · Safety

Is it safe to give an AI agent your password?

Short answer

Pasting your password into a chat with an AI agent is not safe: it stays in plain text in the chat history, on the AI provider’s systems and in anything the agent saves.

Letting an agent use a login can be reasonably safe if the password never goes through the chat, the login has as little access as possible, and you change it after important tasks. Use the agent’s secure sign-in where it has one, or send the login as a sealed link: an encrypted link that opens once.

By Argoned Last reviewed 16 October 2026

The risk

What happens to a password you paste into a chat

A pasted password does not stay in one message. It can spread to places you cannot see or clean up.

A chat message is not a sign-in form. Once a password is in the conversation, it can end up in places you do not control:

The chat history, for as long as the conversation exists and according to the provider’s retention settings.
The AI provider’s systems, because the model has to receive the message to read it.
Notes, memories, files or screenshots the agent creates. Anthropic, for example, says Claude in Chrome takes screenshots of the tabs it works in, and whatever is visible becomes part of the conversation.
Shared or exported chats, if you or a colleague share the conversation later.
Other websites. Both OpenAI and Anthropic warn that hidden instructions on a web page can try to redirect an agent (this is called prompt injection), so an agent that knows a password can be tricked into using it somewhere else.

OpenAI’s own help pages say never to paste passwords, security codes or payment details into the conversation.

Compared

Five ways to give an AI agent a login, compared

Five common ways to give an agent a login, where the password ends up with each one, and when each makes sense.

Five ways to give an AI agent a login, and where the password ends up
Method	Where the password ends up	Our view
Paste it into the chat	In plain text in the chat history and the provider’s systems	Avoid, for every account
Share your password manager or master password	Every login you own is within reach	Never
Agent’s own secure sign-in or take-over mode	Typed by you into a form the model cannot see, according to the provider	Good when you are at the screen and the agent supports it
Password manager fills it for the agent	Filled outside the model’s view, according to the vendor	Good if you use that manager on a supported setup
Sealed link (Argoned)	Only encrypted data in the chat, email and our servers; readable on the page where it is opened	Good for handing a login to a person, or to an agent with no secure sign-in

Six rules

Six rules for any agent task that needs a login

Whichever method you choose, these habits keep an agent’s access narrow, short-lived and easy to take back afterwards.

Use the narrowest login

Use a sub-account, a read-only role or a restricted API key. If the agent only needs invoices, do not give it the admin login.
Keep the password out of the chat

Use the agent’s secure sign-in form, take over the browser, or send a sealed link and type the access code yourself.
Be present for the sign-in step

Watch where the agent is about to sign in. Stop the task if the address looks wrong.
Limit time and use

Choose the shortest expiry that lets the task finish. An Argoned sealed link opens once and lasts at most 7 days.
Change the password afterwards

For accounts that matter, change the password once the task is done. That makes any copy the agent or its provider kept useless.
Never hand over the master keys

Keep your email, your bank and your password manager’s master password to yourself. Whoever controls your email can reset almost everything else.

Argoned

Where Argoned fits, and where it does not

What a sealed link protects, the moment it stops protecting, and when the agent’s own sign-in is the better choice.

Argoned seals a login or API key in your browser and gives you a sealed link plus a separate access code that unlocks it. The chat, your inbox and our servers only ever carry encrypted data.

There is one limit to know about: when a browser agent opens the sealed link and the code is entered, the credential is shown on that page, so the agent can read it at that moment. Argoned keeps the password out of the chat history, email and our servers; it does not hide the password from an agent that is looking at the page where it is opened.

If your agent has its own secure sign-in and you are at the screen, use it. Argoned is most useful when someone else holds the login, when another person runs the agent, or when you want the handover to expire.

FAQ

Questions

Short answers about agents and stolen passwords, deleted chats, password managers and the logins you should never hand over.

Can an AI agent steal my password?

It can be tricked into using it somewhere else: providers warn that hidden instructions on a web page can redirect an agent. Treat any password an agent has seen as exposed, give it the narrowest login and change the password afterwards.

Does deleting the chat remove the password?

Not necessarily. It removes the chat from your list, but when the provider deletes it from its systems depends on its retention policy. Treat a pasted password as exposed and change it.

Is it safer to give the agent my password manager?

Only through a feature built for agents that fills one login after you approve it. Giving an agent your master password or whole vault puts every login at risk.

What should I never give an AI agent?

Your email password, bank logins, password-manager master password and account recovery codes. These unlock everything else.

More guides on handing logins and API keys to AI agents and people without pasting them in plain text.

Sources

Using cloud browser in ChatGPT · OpenAI Help Center, read 16 October 2026
Use Claude in Chrome safely · Claude Help Center, read 16 October 2026
bitwarden/agent-access · GitHub · bitwarden, read 16 October 2026

Your agent needs a login. Send it sealed.

Seal a login or API key in your browser and send a link instead of the password.

Create a free vault All AI agent guides

£0 · Free plan, no card needed · Encrypted in your browser