Skip to content

Browser agents · Claude

How to give Claude access to your accounts safely

Short answer

The safest way to give Claude access to an account is to sign in to the site yourself and let Claude in Chrome work in the signed-in tab. Do not type passwords into the Claude chat.

When the login belongs to someone else, ask them to send it as an Argoned sealed link: an encrypted link that opens once, with a separate access code. Open it in a tab Claude is not using and sign in, so the password never sits in a chat or an email.

By Argoned Last reviewed

A person chatting with an AI assistant

How it works

How Claude in Chrome reaches your accounts

Claude in Chrome works inside your own browser, so it uses the sessions you are already signed in to.
An AI agent working on a screen

Claude in Chrome lets Claude read, click and type in your Chrome browser. As of October 2026, it is available on paid Claude plans. It uses the sites you are already signed in to. To see a page, Claude takes screenshots of the tabs it works in, and anything visible in them becomes part of the conversation.

Anthropic’s safety guidance says Claude in Chrome is not allowed to input sensitive data, asks permission before opening financial sites, and asks you to confirm high-risk actions. It recommends a separate browser profile without your banking, health or government accounts. It also warns about instructions hidden in web pages that try to redirect Claude, known as prompt injection.

Compared

Ways to give Claude access to an account, compared

Four ways to let Claude use an account, compared on whether Claude ever sees the password itself.
Four ways to let Claude in Chrome use an account, and whether Claude sees the password
MethodDoes Claude see the password?Good for
Typing the password into the Claude chat Yes, and it stays in the conversation Nothing; avoid it
You sign in first, then Claude works in the tab No, it sees the signed-in page Your own accounts
1Password for Claude (beta as of October 2026) No, according to 1Password; it fills logins after you approve with Touch ID Your own accounts, on a Mac with 1Password and a paid Claude plan
Argoned sealed link, opened outside Claude’s tab, then you sign in No, as long as the link is opened in a tab Claude is not using A login that belongs to someone else

1Password

What about 1Password for Claude?

1Password’s beta fills your own logins for Claude on a Mac, which solves a different problem from Argoned.

As of October 2026, 1Password describes 1Password for Claude as a beta for Mac. It needs Claude Desktop, Claude in Chrome, a paid Claude plan, a 1Password account, the 1Password app and the browser extension. It fills website logins and one-time codes, and you approve each request with Touch ID.

If that fits your setup, it is a good option for your own accounts. Argoned does something different: it moves one credential from one person to another, sealed, without either of you needing the same password manager.

Step by step

Step by step: a login that belongs to someone else

When the account belongs to someone else, receive the login sealed and sign in yourself before Claude starts.
A phone sharing a link

  1. Ask for a sealed link

    The account owner creates a sealed link in their Argoned vault, chooses an expiry (1 hour, 24 hours, 48 hours or 7 days) and sends you the link. They send the access code another way, such as a phone call or text message.

  2. Open it where Claude is not working

    Open the link in a tab or browser profile Claude is not using, and type the access code. The password is decrypted in that tab only.

  3. Sign in yourself

    Sign in to the site yourself in the Chrome tab Claude will use, then hand the task to Claude.

  4. Tidy up

    Sign out when the task is done. If the access was temporary, ask the owner to change the password.

Honest limit

Can Claude see a password opened in its tab?

Claude reads the tabs it works in through screenshots, so where you open a sealed link really matters.
A person beside a protected web page

Yes. If Claude is working in the tab where an Argoned sealed link is opened, the revealed password can appear in Claude’s screenshots and so in the conversation. Open sealed links in a tab or browser profile Claude is not using, then sign in yourself.

FAQ

Questions

Short answers about giving Claude a password, letting it use your bank, Argoned with Claude in Chrome, and tidying up afterwards.
Two people beside a large question mark
Is it safe to give Claude my password?

Not by typing it into the chat, where it stays in the conversation. Sign in yourself and let Claude work in the signed-in tab, or use a tool that fills the login without showing it to Claude.

Should I let Claude use my bank account?

No. Anthropic advises against using Claude in Chrome to manage financial accounts, and Claude asks permission before opening financial sites. Do your banking yourself.

Does Argoned work with Claude in Chrome?

Alongside it, not inside it. Argoned is not a browser extension and does not connect to Claude. You use it to receive a login sealed, then sign in yourself before Claude starts.

What should I do after Claude has finished?

Sign out of the site, close the tab and, if the access was shared for a one-off task, change the password.

Sources

A person beside a locked laptop

Your agent needs a login. Send it sealed.

Seal a login or API key in your browser and send a link instead of the password.

Create a free vault All AI agent guides

£0 · Free plan, no card needed · Encrypted in your browser