Give an OpenClaw agent your logins, not your passwords
“I don’t want to paste my passwords into a chat with an AI.”
The agent needs to get into the supplier portal, the bank’s invoice page and the shared e-mail inbox. The quick way is to paste the passwords into the chat.
Then they sit in a chat log on a computer, where anything that can read the chat can read them.
Why it happens in OpenClaw
- OpenClaw keeps API keys and channel tokens in its own settings, but website logins tend to end up pasted into chat, saved in the agent’s browser or written into a file the agent can read.
- Anything an agent can read, it can repeat.
How Octopus Prime solves it
Sign in once. The agent never sees the password.
Connect an app once at Settings › Connections with your own login, then choose which agents can use it. The Vault is a safe your agents can use but never read.
- Agents use your logins without seeing your passwords.
- A password pasted into a chat is locked away in the Vault.
- Choose which agents can use each connected app: just yours, one project’s or the whole organization’s.
- Shared vaults for team logins on Business, so nobody passes passwords around.
- Remove an agent’s access or disconnect an app at any time.
Where to find it in the app
- Open Settings › Connections, choose the app and sign in once with your own login.
- Choose which agents can use it.
- Mark sensitive logins as Ask me first, so each use waits for your OK.
- To cut off access, remove the agent’s access or disconnect the app in Settings.
Related features
More on this: Let AI agents use your apps without your passwords
Questions
How do I give my OpenClaw agent a password safely?
Don’t paste it into a chat. Connect the app at Settings › Connections and sign in once; the agent uses that login without seeing the password.
What if I already pasted a password into the chat?
In Octopus Prime, a password pasted into a chat is locked away in the Vault. Changing that password is still a good idea if it was shared anywhere else.
