2Secret 1.11.0: AI agents sign in through your browser, without the password

Version 1.11.0 of 2Secret is out for Mac, Windows and Linux, the command line, the browser extension, the web vault and the sync server. It completes the second part of Agent Access: an AI agent that works in your browser can let 2Secret sign you in, without ever seeing the password.

Signing in for an agent

More and more AI agents work inside a browser: Claude for Chrome, Perplexity's Comet, OpenAI's Atlas, and the browsers that tools like Playwright and Browser Use drive. Sooner or later such an agent stands in front of a sign-in page. Until now it had to ask you for the password, or read it from 2Secret, which puts it in the conversation.

Now the agent asks 2Secret to sign in with an item on the page it has open. 2Secret asks you: "Claude wants to sign in to github.com with “GitHub” in Chrome", with the same choices as for every other request (once, for this item until 2Secret locks, for 8 hours) and, if you want, Touch ID, Face ID or Windows Hello first. After Allow, the 2Secret browser extension fills the sign-in page that is the active tab of your browser and submits it. The agent only hears that it was filled, or why not. The password went from the app to the page, and nowhere else.

Only where it belongs

The extension fills only the active tab, and only when that tab belongs to the item's website, by the same rules as the Fill button: the registrable domain, never an https login on an http page, and every frame of the page checks its own address. The agent cannot point at a tab; it can only ask for an item. An agent that drives the browser can still read what was filled until the page is submitted, so 2Secret submits right away by default. Think of a fill as giving the agent that one login for that one website, and nothing more.

One button

The extension talks to the desktop app through the browser's own door for that: native messaging. The app registers itself as the host for every browser on your computer with one button, Settings → Desktop app → Browser connection → Set up for my browsers: Chrome, Chromium, Brave, Microsoft Edge, Vivaldi, Arc and Firefox, on macOS, Windows and Linux. The app only accepts that connection from its own program, and the connected browser can do nothing but wait for the logins you allow. It is listed with the agents, and you revoke it there like any other.

The extension in the stores

Agent browsers often do not allow extensions loaded from a folder, so the 2Secret extension is going to the Chrome Web Store and Firefox Add-ons. Until it is there, the extension from the download page works the same way; the extension documentation explains how to load it and how the connection works.

Updating

• Mac, Windows and Linux: apps with automatic updates turned on offer 1.11.0 by themselves. Otherwise get it from the download page. Signing in for agents needs the browser extension 1.11 and the command line tool, from the same page.
• iPhone and iPad: this version brings no new features to the phone app; a TestFlight build follows as usual.
• Your own server: 1.11.0 changes nothing on the server, so there is nothing to do.

Everything that changed is in the changelog; how an agent signs in and how you set up the browser connection is in the Agent Access documentation.