Giving your AI agent a password without pasting it on the chat

Description and use

AI agents need to securely receive passwords without exposing them in chat. Locked creates a link to a protected form where the user enters the password, after which the agent can use it without the secret appearing in the chat.

Problem

AI agents need to provide passwords for login pages, but pasting secrets into chat is insecure and often blocked by the agent.

Outcome

The agent can perform login actions without the password appearing in the chat, improving security while maintaining automation.

Workflow

• Install Locked with Bun: bun install -g github:BigSmallXYZ/locked locked setup
• Run locked request --label "GitHub login" --site github.com --login --reason "Sign in to merge PR #42"
• Open the provided link and enter the password in the form
• Choose how the agent should use the secret: locked inject, locked exec, locked panel, or locked phone send
• If the secret is highly sensitive, use --level sealed to require manual approval for each use

Evidence

So I created Locked. Instead of you pasting the secret, the agent sends you a link. You open it, type the secret in a small form and the agent uses it. The value stays out of the chat.

Source

The form needs to be reachable from your phone, and that's why you need a tunnel. It works with Cloudflare, ngrok, Tunnelmole or anything you already have.

Source

If the secret is highly sensitive, use --level sealed to require manual approval for each use.

Source