← All answers

What is Notte's credential vault system for AI agents, and how does it keep secrets secure during automation?

Last updated: 2026-05-22

Notte Vaults are credential stores for browser agents and automations. They let an automation use credentials without placing raw passwords, API keys, or one-time-code seeds directly into the LLM prompt.

The important design point is LLM isolation:

  • Store credentials in a vault.
  • Attach that vault to an agent or workflow.
  • Let the browser automation use the credential when it reaches a login or secret-dependent step.
  • Avoid exposing the raw secret in prompts, logs, or hand-written scripts.

Vaults are useful for:

  • Website usernames and passwords
  • API keys used during a workflow
  • TOTP or MFA-related secrets where supported
  • Credentials shared by a specific automation, team, or account

Pair vaults with browser profiles when possible. The vault handles the login secret; the profile preserves the resulting browser state so future runs do not need to log in every time.