Login and Password Chat

What it is

The Login and Password Chat is a way to publish the chatbot where all visitors use the same login and password to open the chat. It works like a “front desk”: whoever has the password gets in and chats; whoever doesn’t only sees the access screen.

1. When to use it

Use Login and Password mode when you want:

• Only a closed group to use the chat (team, VIP customers, beta testers, event);
• Distribution to be simple: a link + a password, with no development;
• Or to embed the chat in a site, but requiring a password before the conversation.

⚠️ Important: the password is shared — everyone uses the same one. It controls access, but does not individually identify each visitor. If you need to know who each user is, the right mode is Intranet (Authenticated Access) — see the specific guide.

2. Setting up on the platform

1. Go to your Project → Chatbots menu → select the desired chatbot.
2. Click the Publish tab and then the Sites sub-tab.
3. Click Add.
4. In the “Publish on Websites or Web Systems” modal, fill in:
   • Publication name: an internal name (e.g., “Restricted support area”);
   • Integration type: select “Login and Password Access”;
   • Access login: the username that will be typed on the chat entry screen;
   • Access password: minimum 6 characters.
5. Click Save Publication.

🔒 The password is stored securely (hash) and cannot be viewed later — write it down somewhere safe. If you lose it, you can reset it in the publication card.

Done! The new connection appears in the Publications list.

3. What the platform shows after creation

When you expand the publication, you will see:

3.1 Access link

A direct link to an exclusive chat page, in the format:

https://.../YOUR_CHATBOT_ID?public_api_key=ct_...

It is the fastest way to distribute: send the link + login + password to whoever should have access. When opening it, the person will see the chat entry screen.

3.2 Access login

The login defined at creation, always visible in the card for reference.

3.3 Reset password

Since the current password cannot be viewed, the card offers the “Reset” button: enter a new password (minimum 6 characters) and it takes effect immediately. The old password stops working.

3.4 Installation snippet (script)

Alternative to the link: the same script snippet from Public mode, to embed the chat in your site — with the difference that the chat opens on the login screen instead of opening directly:

<script>
  var carameloaiChatbot = {
    publicApiKey: "ct_...",
    project_id: "YOUR_PROJECT_ID",
    pluginVersion: "PLUGIN_VERSION"
  };
</script>
<script src="https://static.carameloai.com/prod/index.js"></script>

4. How everything connects

┌─────────────────────┐                        ┌──────────────────────┐
│  Visitor opens the  │   1. accesses the link │  Chat page           │
│  link or the site   │ ─────────────────────▶ │  (login screen with  │
└─────────────────────┘                        │  your bot's branding)│
                                               └──────────┬───────────┘
                                                          │ 2. types login + password
                                                          ▼
                                               ┌──────────────────────┐
                                               │  Caramelo API        │
                                               │  → checks password   │
                                               │    (secure hash)     │
                                               │  → enforces attempt  │
                                               │    limits            │
                                               └──────────┬───────────┘
                                                          │ 3. access granted
                                                          ▼
                                               ┌──────────────────────┐
                                               │  Open conversation,  │
                                               │  with that browser's │
                                               │  history             │
                                               └──────────────────────┘

In summary:

1. The visitor opens the access link (or the site page with the script);
2. Instead of the conversation, a login screen appears, customized with your chatbot’s colors and avatar;
3. They type the shared login and password;
4. The platform checks the credentials and unlocks the conversation.

5. How visitor access works

💡 Best practices: change the password periodically (“Reset” button), avoid obvious passwords and, if someone leaves the group, reset the password and distribute the new one.

6. Chat visual settings

In the publication card, “Settings” column, you can adjust the widget’s behavior (click Save after changing):

• Chat position on the site: screen corner where the bubble appears;
• Start and keep the conversation box open: the chat stays always open, with no close option;
• Compact Mode: the chat takes up the smallest possible size;
• Attention Retention: after a period of inactivity, the tab draws attention and the chat glows;
• Render in a fixed spot on the page: displays the chat inside a specific area of your site, instead of floating.

These options apply to script mode; the login screen always uses the colors and avatar configured in the chatbot.

7. Frequently asked questions