OpenAI's Dots agent can now read sign-up codes from a user's email and enter them to finish two-factor authentication (2FA) when a site asks for one, according to a recent social media post that carries the OpenAI label.
Product update · OpenAI Dots agent
Dots can now read sign-up codes from email and complete two-factor prompts for you
The agent takes over a step that normally requires switching to your inbox, copying a one-time code, and pasting it back into a form. It is a clear move toward more autonomous, multi-step actions, and it touches a safeguard built to confirm a human is present.
What changes in the 2FA step
The same verification, with the user out of the loop in the second flow.
Before: user completes it
1. Switch to inbox
↓
2. Copy the one-time code
↓
3. Paste code into the form
Now: Dots handles it
1. Reads the code from email
↓
2. Enters the code on the site
↓
3. 2FA prompt completed
What it enables
Fewer manual steps in sign-up and login flows
Multi-step tasks completed end to end, with less user intervention
A concrete example of agents moving from filling forms to handling verification
What critics will question
2FA works because an attacker lacks the second factor
If the agent can read the inbox, protection depends on how that access is scoped and logged
A compromised agent or manipulated instruction could enable account takeover
The open questions
Reach depends on details not yet disclosed
Supported services
Which websites and services work
Email access
How access is granted and scoped
User approval
Whether each verification must be approved
Failure cases
Expired or failed codes
Other 2FA methods
Authenticator apps and hardware keys
Rollout
Availability across plans and regions
Continue reading The rest of this article is for AI News Blitz readers. Choose an option below to keep reading.
Already purchased? Sign in ✓ Signed in — this article isn’t included in your current plan.Unlocking the full article...