Skip to content

Encrypted credential sharing for AI agents

Share passwords and API keys with your AI agent. Never paste them in plain text.

Seal a login or API key in your browser. Give your agent the sealed link, and keep the access code out of the chat.

Create a free vault See how the seal works

£0 · Free plan, no card needed · Encrypted in your browser

Why a sealed link beats pasting

Four differences that matter the moment you hand a password or API key to an AI agent.

  1. Sealed on your device

    Encrypted in your browser before anything is sent.

    If pasted: Typed into the chat in plain text.

  2. Stored encrypted

    Our servers keep only the encrypted copy.

    If pasted: Kept readable in the chat history.

  3. Needs a separate code

    The link alone opens nothing. Keep the code out of the chat.

    If pasted: Anyone who can read the chat can use it.

  4. Ends when you choose

    Opens once, expires within 7 days, and you can cancel it sooner.

    If pasted: Works until you change the password.

The problem

Passwords don’t belong in chat

Sooner or later, every AI agent stops at a sign-in page and asks for a password or an API key.
A person at a sign-in screen

You ask an agent to download invoices, update a DNS record or check a supplier portal. It reaches a login and asks for the password. You paste it in.

It feels harmless, but the chat now holds a working login. Deleting the message later may not remove copies that were already stored, and anyone who can read the conversation can use the password until you change it.

Now the password sits in plain text:

  • In the chat history
  • On the AI provider’s servers
  • In anything the agent saves
Is it safe to give an AI agent your password? →

How it works

Narrow it. Seal it. End it.

Share a password or API key with an AI agent in three steps. It is sealed in your browser, carried sealed and opened only where it is used.
A phone sharing a link

  1. Narrow the access

    Use a restricted account or a scoped key if the service offers one. Share only what the task needs.

  2. Send it sealed

    Argoned encrypts it in your browser. Give the agent the sealed link and keep the access code out of the chat.

  3. End access

    The link closes after one opening or at expiry, and you can cancel it sooner. Change important passwords after the task.

Keep the link and the code apart. If both sit in the same chat, that chat has everything needed to open it.

What is protected

What stays sealed, and what doesn’t

A sealed link keeps a credential encrypted until it is opened. When you can, open it and sign in yourself, so the agent never handles the password. See what is protected.

  1. Before it opens

    Sealed the whole way.

    • Your browser

      Sealed here

      Encrypted before anything leaves your device.

    • The agent chat

      Link only

      Holds only the sealed link, as long as the access code stays out of it.

    • Argoned’s servers

      Encrypted

      Store only the encrypted credential.

  2. When it opens

    Readable where it is used.

    • The AI model

      Reads it

      Can read the credential once it opens on the page the agent is viewing.

    • The website

      Receives it

      The site the agent signs in to receives the password, as with any sign-in.

  3. After

    Nothing left to open.

    • The sealed link

      Closed

      After one opening or at expiry it returns nothing. You can cancel it sooner.

Compared

Paste it, or seal it?

The same login, handed to an AI agent two ways: pasted into the chat, or sent as a sealed link.
A person comparing options on a board
Pasting a password into a chat compared with sending it as a sealed link
Question Pasting the password Sending it sealed
What the chat stores The live password A sealed link
Who can open it Anyone who can read the chat Only someone with the link and the access code
What Argoned stores Nothing. Argoned is not involved Encrypted data only
Can you take it back? No Yes, until it is opened
How long it works Until you change the password One opening, or until it expires

Use cases

Built for the agents you use

Sealed sharing works anywhere you can paste a link: browser agents such as ChatGPT agent and Claude in Chrome, coding agents, automations and the people you work with.

Encryption

Encrypted before it leaves your browser

Argoned is a private vault for your passwords, API keys and notes. Your vault secret protects a vault key, the vault key protects each item, and we store only the locked form.
  1. UK

    Unlock key

    Made from the vault secret you choose, using Argon2id, which makes every guess slow and costly.

    Made in your browser

  2. VK

    Vault key

    A random key, locked by the unlock key. It is held in memory only while your vault is unlocked.

    Stored only locked

  3. DEK

    Item keys

    A separate key for each item, locked by the vault key. One item’s key opens no other item.

    One per item, stored only locked

A phone with a lock on the screen

Who can read what

  • Your passwords, keys and notes

    Readable only after you unlock the vault.

    Only you

  • The secret that opens the vault

    We don’t store it. Your browser sends it to us once, at setup, so we can email you a backup copy.

    Only you

  • Your email address

    We use it to sign you in and to contact you.

    You and Argoned

  • A credential you send sealed

    Only someone with both the link and the access code can open it, within the limits you set.

    Link and code holder

  • Argon2id

    Turns your vault secret into the unlock key. It is deliberately slow and uses a lot of memory, so guessing is expensive.

  • AES-256-GCM

    Locks every item and key with authenticated encryption. If stored data is changed, decryption fails instead of returning it.

  • In your browser

    Encryption and decryption run on your device. Our servers keep the encrypted data and the details needed to sync it.

  • Recovery you control

    An optional recovery phrase can open the same vault. If you lose both it and your vault secret, your items stay locked.

Not independently audited yet. The code is public and the details are on the Security page.

Pricing

Free to start

The Free plan includes sealed sharing and the same encryption as Pro. Upgrade when your vault fills up.

  • Free

    £0 no card needed

    For a personal vault, your first AI-agent tasks or a first client list.

    Everything you need to start

    • Up to 8 vault items
    • Sealed sharing with AI agents and people
    • Encryption and recovery included
    • All future updates
    • Bulk import from CSV or JSON is on Pro
    Create a free vault
  • More room

    Pro

    £2.99 a month

    More room for freelancers, founders and anyone with a larger set of logins and keys.

    More room, same protection

    • Up to 512 vault items
    • Guided bulk import from CSV or JSON
    • Same security and recovery as Free
    • All future updates
    Upgrade to Pro in the vault

Included in every plan

  • Encrypted in your browser

    Argon2id and AES-256-GCM, on every plan.

  • Sealed sharing

    With AI agents and people, on every plan.

  • Recovery options

    An optional recovery phrase and an emergency kit.

  • All future updates

    Included on Free and Pro.

Prices in GBP. Compare plans and read billing answers on the Pricing page.

FAQ

Before you start

Straight answers about sealed links, AI agents and your encrypted vault. More on the FAQ page.
Two people beside a large question mark
Does my AI agent see the password?

Yes, at the moment it is opened. Today a sealed credential is opened on the Argoned page your agent is viewing, so a browser agent can read it then.

The password is never in plain text in your chat, your email or on our servers, as long as you keep the access code out of the chat.

See what is protected, and what is not →

Does the agent need an Argoned account?

No. The agent or person you send it to opens the sealed link in any browser, without an account. Only the sender needs an Argoned vault.

Which agents does it work with?

Sealed links work with any agent that can open a web page and lets you type into it, such as a browser agent where you can take over for one step.

We have not published a tested list yet, so try it once with a low-risk login before you rely on it.

Find the guide for your kind of agent →

What stops someone else opening the link?

The access code. A sealed link alone opens nothing: it also needs a separate access code (four groups of four characters). Each link opens once, expires at the time you chose, and opening attempts are rate-limited.

Can I take access back?

Yes, until the sealed link is opened. Cancel it in your vault under Session → Shared links.

Once a credential has been opened, the safe step is to change the password, so do that after important tasks.

Is Argoned independently audited?

Not yet. No independent security audit of Argoned has been done.

The code is public under the MIT licence, and the Security page lists what our servers can and cannot see. We will publish a summary there if and when an audit is done.

See what we have not done yet →

A paper plane carrying a message

Your agent needs a login. Send it sealed.

Create a free vault

£0 · Free plan, no card needed · Encrypted in your browser