Login and Password Chat

What it is

The Login and Password Chat is a way to publish the agent where all visitors use the same login and password to open the chat. It works like a front desk: anyone with the password gets in and chats, and anyone without it only sees the access screen.

1. When to use

Use Login and Password mode when you want:

• Only a closed group to use the chat, like your team, VIP customers, beta testers or an event audience;
• Distribution to be simple: a link and a password, with no development;
• The chat to be on your website, but ask for the password before the conversation.

⚠️ Important: the password is shared, so everyone uses the same one. It controls access, but it doesn’t identify each visitor. If you need to know who each user is, the right mode is Intranet (authenticated access). See the dedicated guide.

2. Creating the connection

1. Open the project, click AI Agent Robots in the side menu and open the agent.
2. Click the Channels tab.
3. Click Add channel. If the agent doesn’t have any connections yet, the list of channels shows up right away.
4. In the Web group, choose Password-protected web and click Select.
5. In Destination and access, check that Access mode is set to Shared login and password and click Continue.
6. In Configuration, fill in:
   • Connection name: an internal name, like “Restricted support area”;
   • Shared login: the username people will type on the chat’s access screen;
   • Shared password: at least 6 characters;
   • Allowed domains (optional): the websites where the chat can run, one per line.
7. Click Create connection.

The “Connection created” screen shows the Bot link and the code to install on a website.

🔒 Write the password down somewhere safe. It’s stored in a protected way and can’t be viewed later. If you lose it, you can set a new one (see section 3.2).

⚠️ Heads up: creating the connection doesn’t publish a version of the agent. Until a version is published, the chat answers with the current draft. See how to publish in Your First Agent.

3. Sharing access

To see the link and the codes later, open the Channels tab, find the connection under Your connections and click Manage.

3.1 Link or code on the website

In Installation, choose what to copy:

• Bot link: the fastest way to share access. Send the link, the login and the password to the people who should have access. When they open it, they see the chat’s access screen;
• Website code: the same code as the Public Chat, to put the chat on your website. The difference is that the chat opens on the access screen instead of going straight to the conversation.

<!-- Caramelo AI chatbot -->
<script src="https://static.carameloai.com/sdk/latest/client.js"></script>
<script>
  window.CarameloChatbot
    .create({
      publicApiKey: 'ct_...',
      project_id: 'SEU_PROJECT_ID'
    })
    .start();
</script>

3.2 Resetting the password

On the same page, under Credentials and actions, is the Reset shared password block. It shows the Current login and a field for the New password (at least 6 characters). Click Reset password: the new password works right away for everyone, and the old one stops working.

Resetting the password is separate from the Save button and doesn’t send any other changes on the page.

4. How everything connects

┌─────────────────────┐                        ┌──────────────────────┐
│  Visitor opens the  │   1. opens the link    │  Chat page           │
│  link or website    │ ─────────────────────▶ │  (login screen with  │
└─────────────────────┘                        │  your agent's look)  │
                                               └──────────┬───────────┘
                                                          │ 2. types login + password
                                                          ▼
                                               ┌──────────────────────┐
                                               │  Caramelo API        │
                                               │  → checks password   │
                                               │    (secure hash)     │
                                               │  → limits login      │
                                               │    attempts          │
                                               └──────────┬───────────┘
                                                          │ 3. access granted
                                                          ▼
                                               ┌──────────────────────┐
                                               │  Open conversation,  │
                                               │  with the history    │
                                               │  from that browser   │
                                               └──────────────────────┘

In summary:

1. The visitor opens the link (or the website page with the code);
2. Instead of the conversation, an access screen shows up with your agent’s colors and avatar;
3. They type the shared login and password;
4. The platform checks the details and opens the conversation.

5. How visitor access works

💡 Best practices: change the password from time to time, avoid obvious passwords and, if someone leaves the group, reset the password and share the new one.

6. Adjusting the appearance

In Manage, the Settings and Advanced sections have the same options as the Public Chat: balloon position, compact mode, keep chat open, fixed container, timing and allowed domains. See what each one does in the Public Chat guide.

These options apply to the chat installed on the website. The access screen always uses the colors and avatar set in the agent’s Visual tab.

7. Frequently asked questions