# Synced Passwords

> Your SSH, AWS SSM, WinRM and database connections already follow your account to your other computers, but their passwords and key passphrases used to stay on the computer where you typed them, so you typed them again everywhere ("Password needed").

- Area: Desktop app
- Plans: All plans
- Last checked against the product: 2026-10-02
- Web page: https://agentsroom.dev/docs/synced-passwords

## What it does

Your SSH, AWS SSM, WinRM and database connections already follow your account to your other computers, but their passwords and key passphrases used to stay on the computer where you typed them, so you typed them again everywhere ("Password needed"). Turn on synced passwords and they follow too, end-to-end encrypted: each password is encrypted on your computer with a key that never leaves your computers, and AgentsRoom only stores data it cannot read. A password you change on one computer is updated on the others automatically, and passwords you typed before turning it on are sent the next time the computer syncs. Opt-in, off by default, since 2026-10-02.

## Where to find it

- Settings > **Account** > **Synced passwords** ("Find the passwords of your servers and databases on all your computers, end-to-end encrypted."). A badge on the closed card counts the computers waiting for your approval ("1 request").
- Under every password or passphrase field of a database or SSH connection form: the line that says whether this password is synced, with the checkbox **Sync this password to my other computers**, or "This password stays on this computer." and a link to turn the feature on (**Find it on my other computers**) or to connect this computer (**Connect this computer**).

## How to use it

1. On a first computer: Settings > **Account** > **Synced passwords** > **Turn on**. A password account must have [Two-Factor Authentication](https://agentsroom.dev/docs/two-factor-auth.md) on first; the card offers **Turn on two-factor authentication** until then.
2. Save the recovery key it shows (**Copy** or **Download**), then **I saved my recovery key**. It is shown once.
3. On each other computer: open the same card. It says "Your passwords are synced on your account, but this computer cannot open them yet. Connect it once:" with two ways:
   - **With another computer**: this computer shows a code. On a computer where synced passwords already work, open Settings > **Account** > **Synced passwords**: the request appears there ("A new computer asks for your passwords"); type the code and click **Approve**.
   - **With my recovery key**: paste the recovery key and click **Connect this computer**.
4. From then on, saving a connection sends its password; the other computers receive it at their next sync (on sign-in, when the window comes back to the front, when the network comes back).

Keeping one password local: untick **Sync this password to my other computers** in its connection form. Its copy is erased from your account, and each computer keeps the copy it already has.

Turning it off: **Turn off on all my computers**. The synced copies are erased from your account; each computer keeps the passwords it already has, and new changes are no longer shared.

## Settings

None in the settings files. The on/off state lives on your account; the per-password choice is the checkbox of each connection form.

## Agent tools (MCP)

None. Agents never receive a password: they use a connection by name or id and the desktop supplies the credential (see [SSH Connections](https://agentsroom.dev/docs/ssh-connections.md), [Database Connections](https://agentsroom.dev/docs/database-connections.md)).

## Providers

All providers, no difference.

## Mobile

Not available on the phone, and nothing to do there: the phone never handles connection passwords, it drives the desktop, which opens the connections.

## Limits

- Covers the passwords and passphrases of SSH, AWS SSM, WinRM and database connections only. Secrets of the [Secret Manager](https://agentsroom.dev/docs/secret-manager.md) and private key files are not synced.
- AgentsRoom cannot give you back the recovery key. If you lose it and all your computers at once, the synced passwords cannot be opened again.
- A computer approved once keeps the key: there is no way to revoke one computer. Turning the feature off and on again creates a new key.
- The computer that approves a request gets no notification: the new computer's screen tells you where to go, and the card shows the badge.
- A request expires after a few minutes ("This request has expired. Start again."). A wrong code cannot open your passwords: the new computer says the connection failed.
- A computer whose system keychain is unavailable cannot store the key and refuses to connect.

## Common questions

- **Can AgentsRoom read my passwords?** No. They are encrypted on your computer before they leave it, with a key that stays on your computers.
- **Why does it ask for two-factor authentication?** Syncing passwords makes your AgentsRoom account worth protecting: "Turn on two-factor authentication first". Accounts that sign in with Google or Apple are exempt.
- **My other computer still says "Password needed".** Open Settings > **Account** > **Synced passwords** on it and connect it once, with another computer or the recovery key. Until then it cannot open the synced passwords.
- **I changed a password on one computer.** The others pick up the new one at their next sync, no action needed.
- **Never type a code someone sends you.** The approval code is shown by YOUR new computer; approving a code that came from someone else would hand them your passwords.

## Related

- [Two-Factor Authentication](https://agentsroom.dev/docs/two-factor-auth.md): required first for a password account.
- [SSH Connections](https://agentsroom.dev/docs/ssh-connections.md): the connections whose passwords and passphrases sync.
- [Database Connections](https://agentsroom.dev/docs/database-connections.md): same for database passwords.
- [Secret Manager](https://agentsroom.dev/docs/secret-manager.md): the machine-local vault where each computer keeps its copy.
