# Store passwords and logins for your squad

> Save a website login so your squad can sign in for you, and add a two-factor key. Learn what your squad can and can't see, and remove a login.

## How a saved login works

Save a login so your squad can sign in to a website without asking you. Use it for sites that aren't in the app list, such as a private portal.

- Each login belongs to one website. It is filled in only on that site and its subdomains, the addresses that end in the site's name. For example, a login for example.com also fills on app.example.com. It fills on addresses that start with http or https, and on any port (a number after the site's name, such as example.com:8080).
- SquadRoom types the username and password straight into the site. Your squad and its AI models never see or log the password, and it never reaches your squad's messages, notes, or logs.
- With a two-factor key saved, SquadRoom also enters the current 6-digit code. A two-factor key is the setup code a site gives you for an authenticator app.
- Every squad member can use every saved login.
- Logins are encrypted in your workspace: scrambled, so no one can read them as plain text. A backup holds them only when **Include secrets and environment variables** is checked. Without it, the backup leaves them out entirely. See [Back up your workspace](/docs/billing#back-up-your-workspace). A reset deletes them.
- Your squad signs in through a live browser, which uses credits. See [What SquadRoom costs and what uses credits](/docs/costs).

| Your squad can see                | Your squad can't see |
| --------------------------------- | -------------------- |
| The login's **Name**              | The password         |
| The website                       | The two-factor key   |
| The username or email             | The 6-digit codes    |
| Whether a two-factor key is saved |                      |

> **Warning:** Save passwords only here. Never paste a password into **Chat**, a task, a doc, a skill, or **Memory**.

## Open Passwords & Logins

Click your name at the bottom of the sidebar, then **Settings**, then **Passwords & Logins**.

Each saved login shows its name, website, and username, **Fills 2FA codes** when it has a two-factor key, and the date you added it. With none saved, you see "No logins saved yet". Below the list, **How your logins stay safe** sums up the rules above.

## Add a login

### Step 1: Open the form

Click **Add login**. The **Add a login** window opens.

### Step 2: Enter the website

Type the site in **Website**, such as github.com or jira.atlassian.net. SquadRoom adds https:// if you leave it out. It keeps only the site's address and drops anything after it, such as /login.

### Step 3: Name the account

Type a name for the account in **Name**, such as "GitHub, work account".

### Step 4: Enter the username and password

Type the username or email in **Username or email** and the password in **Password**. The eye icon shows or hides it.

### Step 5: Add a two-factor key, if the site asks for codes

Click **Two-factor key** and paste the site's authenticator setup key, such as JBSWY3DPEHPK3PXP, or its otpauth:// link.

### Step 6: Save

Click **Save login**. The login appears in the list.

Every field except **Two-factor key** is required. If one is empty, the window marks it and says which:

| Empty field           | Message                      |
| --------------------- | ---------------------------- |
| **Website**           | "Add the website."           |
| **Name**              | "Add a name for this login." |
| **Username or email** | "Add the username or email." |
| **Password**          | "Add the password."          |

Any other problem shows its reason next to **Save login**.

## Find a login

Type in the search box above your logins. It searches the name, the website, and the username. With no match, you see "No logins match" and what you typed.

## Remove a login

1. Click the trash icon (**Remove login**) on the login. The row asks "Remove this login?"
2. Click **Remove**. The login leaves the list, and your squad can't use it again. **Keep** cancels.

## Change a password

Remove the login, then add it again with the new password.

## What Passwords & Logins doesn't do

- You can't edit a saved login.
- You can't see a saved password or two-factor key again after you save it.
- You can't limit a login to one squad member.
- It saves website logins only, not payment cards or addresses.
- It doesn't connect apps such as Gmail or Slack. Use **Settings > Integrations**.

## If something goes wrong

### "Could not load your saved logins"

**Cause:** SquadRoom couldn't read your saved logins from your workspace.

**Fix:** Click **Retry**.

### A squad member says it can't sign in

**Cause:** No saved login matches the website it is on, or the password changed. Or the site asks for a code, and the login has no two-factor key.

**Fix:** Check the website on the login. If the password changed, or the key is missing, remove the login and add it again with the new details.

## Related pages

- Apps such as Gmail, Slack, or GitHub: [Connect apps through Integrations](/docs/integrations).