Personal password vault
Store personal credentials for supported agent actions without placing passwords in prompts.
The personal vault is for your own credentials, not a company-wide password-sharing directory. Use it only when the feature and the required tools are available to your account.
Add a credential
- Open My settings → Personal password vault.
- Choose Add credential, enter a recognizable name, optional username and password.
- Enter the exact Website origin (HTTPS), for example https://portal.example.com. This identifies the allowed website, not an arbitrary page or a wildcard for other domains.
- Save it, then refer to the entry through the supported credential selection or placeholder mechanism.
Do not write the password into a chat, skill or agent instruction. The supported tool substitutes the credential for the permitted action; the model should work with the reference instead of the secret.
Review use
A vault entry is not blanket permission for every website or action. Review the requested destination and any approval prompt. A browser action can still be subject to organization restrictions.
The destination website receives the password when it is used. MFA on that website may still require your input. Keeping the password out of the model's prompt does not make the destination itself trustworthy.
Treat screenshots and website content with care: do not request that the assistant reveal, repeat or copy secrets from a page. The vault cannot make a malicious destination safe.
Rotate or remove
Update a credential after changing it with the provider. Remove entries you no longer use. Jobs depending on a removed or expired entry may require a new credential selection. Removing the entry from CogLake does not revoke the underlying account or password at the provider.
Changing the saved username or destination requires the password again. Leaving the password blank during an otherwise unchanged edit preserves the stored value.

