I built an open-source AI coworker that logs in with 2FA without the model ever seeing your passwords
Every AI agent I tried had the same weak spot: it was great until it reached a login screen. Then it needed a password, a 2FA code, or me. So I built Godmode Bot , an open-source (MIT) AI coworker that has a real browser plus your logins and 2FA codes. The model never sees any of those secrets. What it is Godmode Bot is a desktop app for macOS, Windows and Linux built with Tauri 2. It can also…
An open-source AI assistant named Godmode Bot has been developed to handle login screens and two-factor authentication (2FA) codes without ever revealing the user's passwords or secrets. This desktop application for macOS, Windows, and Linux operates using Tauri 2 and has the option to run headlessly on a server, NAS, or Raspberry Pi. It utilizes Claude Code for its artificial intelligence brain and browser functionality to interact with websites.
The login credentials and 2FA codes are stored in a secure local vault, encrypted using scrypt, key-encryption key, a random 256-bit data key, and AES-256-GCM. Each agent in Godmode Bot maintains its own identity, instructions, memory, and history within its own git repository. Secrets are redacted from transcripts, logs, and the user interface, and every secret access is recorded in an audit log.
Getting login information is straightforward, as users can import passwords from Chrome, 1Password, Bitwarden, Apple Passwords, or Firefox, and 2FA from a screenshot of a Google Authenticator export QR code. Agents can be scheduled to run tasks on a daily basis, and they can delegate tasks to other agents or create subagents as needed. A "Missing-login inbox" feature informs users if an agent is unable to sign in, detailing the issue.
Additional features include Chrome session import, integration with Composio toolkits and custom MCP servers, voice mode, encrypted backup and restore, and access to all Claude Code slash commands. The agent interacts with the browser in real-time while the user can take control at any point if necessary, such as solving a CAPTCHA.
Godmode Bot is designed to be trusted like a coworker with access to the user's machine. For enhanced security, running it within a VM or container is recommended. The project includes documentation on the threat model, and users are encouraged to provide feedback, particularly regarding the vault design and future agent capabilities. The project is hosted on GitHub, and users can access the headless version via Docker compose.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
