---
title: "Secret Layer: your AI agent logs in without seeing passwords | Scalebrowser"
description: "Your AI agent signs in, creates accounts, enters 2FA codes and uses passkeys without ever seeing a password. It gets a placeholder, Scalebrowser types the value only on its own site, and keys on a page are blacked out before the agent reads them."
canonical: "https://scalebrowser.net/secret-layer"
last_modified: "2026-11-15T13:22:44.000Z"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://scalebrowser.net/llms.txt
> Use this file to discover all available pages before exploring further.

Scalebrowser Secret Layer

# Your agent signs in everywhere and never sees a password.

It gets a placeholder, Scalebrowser types the real value, and only on the site it belongs to. Keys a page shows are blacked out before your agent reads them.

[Download free for Windows](https://scalebrowser.net/api/download/installer) [Connect your agent](https://scalebrowser.net/docs/agents/mcp-server)

Included in the Free plan · No credit card · Your vault stays on your PC

One email with the download link, nothing else. [Privacy](https://scalebrowser.net/privacy)

[Connect your agent](https://scalebrowser.net/docs/agents/mcp-server)

Included in the Free plan · No credit card · Your vault stays on your PC

## Inside the Secret Layer

1.

2. 01

   ### A placeholder, never the password.

   Your agent gets a name for every value a profile holds. It types the name, and Scalebrowser types the value into the page.

3. 02

   ### New accounts get a strong password.

   Your agent signs up with a password Scalebrowser draws for it and keeps in the profile's vault before the first key is typed.

4. 03

   ### 2FA codes, worked out on the spot.

   The two-factor secret stays in the vault. When a site asks for a code, the current one is computed and typed in.

5. 04

   ### Passkeys that stay in the profile.

   Each profile keeps its own passkeys. Your agent signs in with one and never holds the key.

6. 05

   ### A lookalike site gets nothing.

   A login is typed only on its own domain, and only over https. On any other page the field stays empty and your agent is told why.

7. 06

   ### Keys on a page become placeholders.

   When a page shows an API key, your agent reads a placeholder in its place: in the page, in screenshots, videos and PDFs.

## Workflows use the vault. Their AI never does.

Log In from Vault and Create Credentials type the values for a run. Ask AI, AI Extract, AI Decide and Agent Step never get one.

## Only you see a value, behind your vault password.

Every profile keeps its logins, keys and passkeys in a vault of its own on your PC. Open it with your vault password to look at any value yourself.

Scalebrowser

## On by default. Off when you want it all.

Switch the Secret Layer off and your agent gets the whole page: HTML, network requests and scripts. Vault passwords stay hidden either way.

Secret Layer

Keeps values an agent uses out of everything an agent reads.

Secret Layer active

Values a page shows are taken into the vault and replaced by a placeholder, and a stored value is only typed where it belongs.

Your agent reads placeholders.

## Questions about the Secret Layer.

A line or two each. For everything else there is the [Help center](https://scalebrowser.net/help).

###

The common ones, and all you store.

API keys from AWS, Stripe, GitHub, Google, Slack, npm, GitLab, SendGrid, Anthropic and OpenAI, by their format. And every value a profile keeps, even when a page shows it base64 or URL encoded.

###

###

###

###

###

## Hand over the logins. Keep the passwords.

Store a login once. Your agent uses it and never sees it.

[Download free for Windows](https://scalebrowser.net/api/download/installer)

One email with the download link, nothing else. [Privacy](https://scalebrowser.net/privacy)

Secret Layer in every plan, Free included · No credit card · Runs on your PC

Secret Layer in every plan, Free included · No credit card · Runs on your PC