How Do I Store Website Credentials for Browser Automation?

If you want Bankr to perform tasks on websites that require a login—like checking out a cart or managing an account—you can store your credentials ahead of time. This allows Bankr to sign you in automatically without you ever having to paste your password into the chat window.

Stored credentials are designed for standard email and password login forms. For your security, Bankr fills these in only when it lands on the matching site and will never echo these values back to you in a conversation.

How to Set Up Credentials

Stored credentials live in your Env Vars (Environment Variables). To add them:

Open Bankr and click the Settings (gear icon).
Navigate to the Env Vars section.
Add a new entry for each piece of information (Email, Password, and the Allowed Website).

You must use a specific naming format so Bankr knows which site the credentials belong to: BROWSER_CREDENTIAL_<SITE>_<FIELD>.

Example: Setting up Amazon

If you wanted to store your Amazon login, you would add these three entries in your Env Vars:

Name	Value
`BROWSER_CREDENTIAL_AMAZON_EMAIL`	`alice@example.com`
`BROWSER_CREDENTIAL_AMAZON_PASSWORD`	`your-secure-password`
`BROWSER_CREDENTIAL_AMAZON_ALLOWED_ORIGINS`	`https://www.amazon.com`

Once these are saved, you can simply ask Bankr:
"Go to Amazon and tell me when my last order is arriving." Bankr will recognize the site, find the matching credentials, and sign in on its own.

The "Allowed Origins" Rule

The ALLOWED_ORIGINS entry is a security feature that locks your credentials to a specific website address. Bankr will only attempt to use your password if the website matches this URL exactly.

Match the scheme: Use https://.
Match the subdomain: https://www.amazon.com is not the same as https://amazon.com. Check your browser's address bar to see which one the site uses.
No trailing paths: Do not include extra folders or pages (e.g., use https://example.com, not https://example.com/login).

If a site uses multiple domains for login, you can list them separated by a comma:


BROWSER_CREDENTIAL_SHOP_ALLOWED_ORIGINS=https://shop.example.com,https://checkout.example.com

Safety and Approvals

Even with stored credentials, Bankr is designed to "fail closed." It will never submit a purchase, send a payment, or take an irreversible action without your explicit confirmation. For checkout flows, Bankr will navigate to the final review screen and wait for your go-ahead before clicking "Buy" or "Confirm."

For more technical details on environment variables and browser automation, visit docs.bankr.bot.