Hermes Vault For Business: Let Your AI Agent Log In Safely

The Hermes vault lets a small business hand website logins to an AI agent without anyone pasting a password into a chat window.

Your staff save a login once, the agent signs in when a job needs it, and the AI model never reads the password.

On 2 November 2026, Hermes v0.22.6 added the option to keep the vault's master key in your computer's own keychain.

This page covers whether that's worth your time, how a shop, a service firm and an agency would use it, and the risks to plan for.

If you want a second opinion on where an agent fits in your business, book a free call with my team.

The Short Answer: Is The Hermes Vault Worth It?

Yes, if your agent already does work behind a login, such as supplier portals, booking systems or client dashboards.

Without a vault, someone has to type a password every time, or worse, paste it into the conversation where it sits in the history.

With the vault, the login is saved once, encrypted on that computer, and filled straight into the page.

The official Passwords & Logins page says there is nothing to set up.

The first time the agent reaches a sign-in page it doesn't know, it asks a person for the login in a hidden prompt.

If your agent never leaves public web pages, you don't need it yet.

The moment it needs to check an order status, download an invoice or update a listing behind a sign-in, you do.

That covers most of the admin a small team would want to hand over.

What A Business Can Store In It

Item	Typical business use	Does a person approve each use?
Website logins	Supplier portals, booking tools, ad dashboards	No, filled on the saved site only
2FA setup keys	Accounts that ask for a six-digit code	No, Hermes generates the code
Payment cards	Reordering stock, renewing a tool	Yes, every single time
Addresses	Shipping and billing forms	No

Each item is tied to one website address, so a login saved for your supplier won't fill anywhere else.

Items are kept per profile, which matters once you run more than one agent.

Use Case 1: A Local Shop Reordering From Suppliers

Picture a garden centre that reorders from three wholesale portals every Monday.

The owner saves each portal's login the first time the agent asks.

If a portal uses an authenticator app, the owner adds its setup key and the item shows a 2FA auto badge, so the agent enters the code itself.

The card for the order is saved too, but Hermes stops and asks before it fills the card on the checkout page.

The owner reads the basket, approves, and the order goes through on their say-so.

The time saved is the logging in, the code hunting and the form filling; the decision to spend stays with a person.

🔥 Want an agent that handles the logged-in admin for your business? Inside the AI Profit Boardroom you get step-by-step video trainings, the installable Agent OS, four coaching calls a week and 3,400+ members sharing the setups they run day to day. → Join the AI Profit Boardroom

Use Case 2: A Service Firm With Client Portals

An accountancy or legal practice often has a login for each client's portal or tax account.

Many of those portals text a code to a phone.

For those, Hermes shows a small "Verification code" prompt, the staff member types the code, and Hermes enters it.

The code never lands in the conversation.

Portals that use an app approval, a hardware key or a passkey work too: the agent says "approve it on your device" and waits.

That keeps a human on every sign-in for accounts where your firm wants one.

Use Case 3: An Agency Running Many Client Accounts

Agencies hold dozens of client logins across ad platforms, analytics and site admin panels.

Two vault features fit that work.

First, profiles keep separate vaults, so one profile per client means a client's logins stay with that client's agent, as the profiles guide describes.

Second, if the team already shares logins through 1Password or Bitwarden, Hermes detects the op or bw command-line tool and uses those logins too.

A staff member unlocks the manager once per session, and it locks again after 30 minutes idle.

For overnight reports, 1Password can use a service account token instead, set through OP_SERVICE_ACCOUNT_TOKEN.

What The New Keychain Option Means For Owners

By default, the key that unlocks the vault is a file sitting next to the encrypted vault.

The v0.22.6 release adds an opt-in way to keep that key in the computer's own keychain instead.

Supported keychains, per the docs: Keychain on a Mac, Credential Manager on Windows, and Secret Service or KWallet on Linux desktops.

Whoever looks after your IT runs one command to check the current state, hermes vault key, and one to move it, hermes vault key migrate --to keychain.

The business benefit is simple: a backup or synced copy of the Hermes folder no longer contains everything needed to open the vault.

On a Mac or Windows laptop, the keychain is guarded by the staff member's login password, according to the docs.

The Trade-Offs Before You Switch It On

Keychain storage is off by default for good reasons, and owners should know them.

Moving computers takes an extra step. Before a profile moves to a new machine, run hermes vault key migrate --to file.
Night jobs on a Mac can stop logging in. Scheduled jobs that run while nobody is logged in can't read the keychain, so their logins fail with a clear error.
Deleting the keychain entry locks the vault for good. You'd restore the entry from a keychain backup or start the vault again.
A Mac may ask permission. After an update, macOS can ask whether Hermes may use the entry.

For a front-desk laptop used by one person, the keychain is a sound choice.

For a shared server running overnight jobs, keep the file key.

Ask whoever looks after your computers to run hermes vault key on each machine and note which mode it uses.

A one-line record per machine saves confusion the day a laptop is replaced.

Which Plan Or Edition Includes It

The vault is part of Hermes itself, and the docs don't list it as an add-on or a paid tier.

It works in the CLI and in the Desktop app under Settings → Passwords & Logins.

The keychain option needs v0.22.6: the CLI gets it with hermes update, the Microsoft Store app updates through the Store, and Docker or Hermes Cloud uses the :stable image.

Desktop copies installed from the .exe or .dmg installer get it with the next bundled release.

How The Vault Protects Your Spending

Card fills are where most owners hesitate, so here is the exact rule.

Every card fill shows the same approval prompt Hermes uses before a risky command, and saying no writes nothing.

Scheduled jobs, webhooks and the API server can't answer that prompt, so card fills there are refused.

The docs put it plainly: an instruction slipped into a checkout page can ask for money, but it can't spend it.

So an overnight job can still log in and pull a report, but it can't pay for anything.

See the scheduled jobs docs before you plan which tasks run unattended.

📞 Not sure which of your logins an agent should touch? Book a free SEO strategy session and we'll map the accounts worth automating and the ones to keep in human hands. → Get your free session

Risks The Vault Doesn't Remove

Once a password is entered into a website, that website has it, just as when a person types it.

If you run Hermes with a cloud browser service, that vendor's browser sees the page like any other.

The bigger one for business is plugins.

A third-party plugin that runs inside Hermes can do whatever Hermes can, including filling a saved login.

The fix the docs give is to run unreviewed plugins out of process with plugins.isolation: host, explained on the plugins page.

Make that a house rule before anyone saves a bank or client login.

If You Already Use Camofox

Some teams run Hermes with the Camofox stealth browser plugin for sites that are fussy about automation.

Vault fills work there too, but only when the Camofox address is local or HTTPS.

Our Hermes Camofox business guide covers when that browser is worth running.

Who On Your Team Should Own The Vault

Give one person the job of looking after saved logins, the same way someone already owns the office Wi-Fi password.

That person decides which accounts the agent may use, saves them through the prompt, and removes them when a supplier or client relationship ends.

In the Desktop app, everything they need sits on one screen: saved items, detected password managers with Unlock and Lock, plus Add and Remove.

On the command line, the same jobs are hermes vault list, hermes vault add and hermes vault rm.

Keep the list short.

An agent with five well-chosen logins is easier to trust than one with fifty forgotten ones.

Where The Time Actually Comes Back

No study measures hours saved here, so judge it by the steps that disappear.

The agent no longer stops at every sign-in screen waiting for someone to type.

Authenticator codes stop being a copy-paste chore for any account with a saved setup key.

Shipping and billing addresses fill on their own.

What stays manual is deliberate: text-message codes, app approvals and every card payment.

For most small teams, that's the right split between speed and control.

A Simple Rollout For A Small Team

Pick one task behind one login, like a weekly supplier reorder.
Update Hermes and check the plugin rule above.
Let the agent ask for the login once and save it.
Add the 2FA setup key if the site uses an authenticator app.
Decide per machine: keychain for personal laptops, file key for shared servers.
Review what's saved monthly in Settings → Passwords & Logins or with hermes vault list, and remove old logins with hermes vault rm.

Want trainings and live calls while you roll it out? The AI Profit Boardroom has both.

Also On Our Network

FAQ: Hermes Vault For Business

Can the AI agent spend money from a saved card on its own?

No. Every card fill asks a person first, and scheduled jobs, webhooks and the API server are refused because nobody can approve there.

Does my team need a password manager to use the Hermes vault?

No. The vault stores logins itself. If you already use 1Password or Bitwarden, Hermes picks up their command-line tools automatically.

Can I keep each client's logins separate?

Yes. The vault is scoped to the profile, so one profile per client keeps each client's logins apart.

Should a shared office server use the keychain option?

Usually not. Jobs that run while nobody is logged in can fail to read a Mac keychain, and headless Linux servers fall back to the file key anyway.

📺 Video notes + links to the tools 👉

🎥 Learn how I make these videos 👉

🆓 Get a FREE AI Course + Community + 1,000 AI Agents 👉

About Julian

I'm Julian Goldie, an SEO entrepreneur, author and founder of the AI Profit Boardroom, which has 3,400+ members.

I help business owners scale with AI agents, automation and SEO.

I've built a 7-figure SEO and link building agency, Goldie Agency, with a team of 70+ SEO experts.
I've grown a YouTube channel to 400,000+ subscribers.
I wrote "Link Building Mastery".
My Udemy courses have taught over 29,000 students.

→ Get my best AI training inside the AI Profit Boardroom

Choose your first logged-in task this week, and book a free strategy session if you want my team to plan which accounts belong in your Hermes vault.