DotsSoftwareShipping codeAI score · 83/100AI-assisted edit · no obvious prompt-injection riskX

Dot Secure Login: Hand Over Control After One Manual Login

In Dot, have the agent open the login page → manually enter password and 2FA → return control → session persists in the cloud, model never touches credentials

BeginnerStepsTip
Who
Users of Dot (OpenAI agent) who need the agent to operate logged-in accounts over extended periods
You get
After one manual secure login, the session lives in Dot's cloud; the local device can be shut and the agent continues, with every send/spend/publish still requiring your approval
You need
Dot

Constraints

Requires: Dot account, target website account and password, 2FA device. Operations take place in Dot's browser environment. No additional fee information available.

What they did

Author kiruwaaaaaa had Dot open a website login page, personally completed password and 2FA verification while the model was paused, then returned control so the session remained active in Dot's cloud.

How it went

Author reported: after closing the laptop, the agent continued operating inside the logged-in account all night, and the model never saw the password; all sensitive actions still required manual approval. (Source: author_report)

Worth knowing

OpenAI's public guide describes this design: the model is paused while you complete a secure login form, and credentials go straight to the browser environment without touching the model's context. Critical caveat: a secret in a readable document is still readable—never put passwords in notes, prompts, or memory files. Check the Pause, Activity, and Scheduled tabs the next morning to verify status.

Steps

  1. Log in manually and return control

    Have Dot open the target website's login page. When the page hits a login wall, Dot automatically pauses and the model stops observing. Manually enter your username, password, and 2FA code, then click 'return control to dot' after logging in. The session will persist in Dot's cloud browser; your local device can be shut. The agent's subsequent send, spend, or publish actions will still await your confirmation.

Prompt you can copy

Reference prompt · Editorial suggestion。Confirm the destination, input variables and output format before use.

This block is the prompt. Ads are never placed here.

No prompt needed — just follow the steps.

Source

人工登录一次（含 2FA）后归还控制权，Dot 云端会话整夜代操作且从未见过密码 · kiruwaaaaaa · X · 2026-10-23T18:51:41.000Z

Comments & feedback

Tried this method? Share results, problems or improvements. Comments appear after moderation. Please avoid sensitive information.

Loading…

    Related