Skip to content

Website sign-ins

Let missions sign in to websites with sign-ins you saved or keep in 1Password or Bitwarden, while passwords stay in your Keychain.

How missions sign in

A mission signs in to a website in its own browser tab, using a sign-in you saved or one from your connected vault. Skyflo enters the password and any verification code privately. The agent, the AI model and Skyflo's service never see them. Outside Full access, a sign-in waits for your browser confirmation first.

Website sign-ins are included with Core and above, Team plans included.

Save a sign-in

Open Accounts in the sidebar and choose Add, then Website sign-in. Enter the Website, Username and Password, and choose Save sign-in. The password goes to this Mac's Keychain.

Saving a sign-in does not grant a mission access to it. Turn on Missions can use this sign-in for each one missions may use.

For sites that ask for an authenticator code, add the setup key or authenticator link under Verification codes, or choose Import QR image with an exported QR code (the form explains the Google Authenticator export). Skyflo then generates the codes itself.

Import from Apple Passwords or a browser

In the same form, open Import a sign-in and choose Choose CSV file. Skyflo reads password exports from Apple Passwords or Safari, Chrome, Firefox, a Bitwarden individual vault and 1Password 8, then lets you pick one sign-in to copy. It is a one-time copy, not a sync. The CSV holds readable passwords, so delete the export when you are done.

Use 1Password or Bitwarden

Choose Add, then From 1Password or From Bitwarden:

  • 1Password needs a Service account token with read access to one vault. Create it on 1Password.com under Developer, then Service Accounts.
  • Bitwarden needs a Machine account access token from Bitwarden Secrets Manager, its cloud region and your organization ID.

The token stays in Keychain on this Mac. Sign-ins are read fresh from the vault each time a mission uses one, so changes in the vault apply at once. Removing the connection deletes its token from this Mac.

Codes from Mail and Messages

Turn on Read sign-in codes from Mail and Messages on the Accounts page. When a site emails or texts a code, Skyflo finds it and enters it without showing it to ChatGPT or Claude.

  • Mail needs Mail open with your account added, and Skyflo allowed for Mail in Automation settings. Skyflo reads your inbox only while a sign-in waits for a code.
  • Messages reads texts forwarded from your iPhone. Keep Messages open and allow Skyflo in Accessibility settings.

Reading pauses while the Mac is locked and resumes when you unlock it.

When a sign-in needs you

If a site sends a code Skyflo cannot read, asks for an authenticator code, rejects the saved password or needs a step only you can take, the mission waits and an item appears in Needs you on Home. Take control of the browser to finish, or edit the saved sign-in and try again.

Written for Skyflo Desktop 1.8.0. Last reviewed November 9, 2026.

Website sign-ins | Skyflo