Andi now has a web browser. We built it with your safety first, because it is only worth having if it is secure. That includes a new way to keep your saved sign ins locked with a passkey.
What Andi can do with it
Ask Andi to find something at a store and add it to your cart, check on an order, book a table at a restaurant or fill out a simple form.
You can watch live in the chat, and you can take over at any time. When you are done, hand the browser back and Andi carries on.
You stay in charge
Adding an item to your cart never needs your approval. After each add, Andi opens the cart to check it. Then Andi reports the item, its price and the quantity the cart shows. If something looks wrong, Andi says so and asks what you want to do.
Andi always asks first before anything bigger, like placing an order, sending or posting something, deleting something or signing an agreement.
Some steps are yours. When a site asks for a password, a code or card details, Andi asks you to take over and you type them yourself. Andi never types them for you. Some sites also show a robot check, a little test to prove you are a person. Andi asks you to take over for those too.
Andi uses the browser only while you are chatting. Background check ins never use it.
Remembering your sign ins
When you sign in to a website in Andi's browser, the site hands the browser a small digital wristband, like one at a fair. It says "this is you" for a while. Andi can save that wristband, so next time Andi visits the site you are already signed in. Andi never saves your password. We only save the wristband.
Every wristband Andi saves is locked with your passkey.
What is a passkey?
A passkey is a digital key that lives on your phone, your computer or your password manager, and you open it with your fingerprint, your face or your device PIN. There is nothing to type and nothing to remember. Your passkey stays with you, and we never receive it.
The first time Andi could save a sign in for you, Andi asks you to set up your passkey. You do this once, on our separate vault page at vault.androcrew.com. Andi saves the sign in only after your passkey is set up.
During setup you also get a recovery code. Write it down and keep it somewhere safe. Only ever type it on vault.androcrew.com. Andi will never ask for it in chat or anywhere else.
You can add passkeys from your other devices too, like your phone and your laptop. Some devices and password managers do not support the passkey feature this needs. On those, Andi cannot save your sign ins with a passkey.
Your passkey holds the key
Your saved wristbands are encrypted so that only your passkey or your recovery code can open them. We do not have your passkey or your recovery code. So while your sign ins are stored, no one at Androcrew can open them.
Think of it like this. We put each wristband in its own lockbox. Then the keys to those lockboxes go into a safe that only your passkey or your recovery code can open. We can put things away, but we cannot take them back out without you.
When Andi needs your saved sign ins, you unlock them with your passkey on vault.androcrew.com. You choose to unlock all your saved sites or only the one Andi is starting on. The keys are sent sealed to your own private browser and are used only for that session. If you do not unlock, Andi carries on without your saved sign ins.
If you lose your passkey, your recovery code still opens your vault. If you lose every passkey and the recovery code, we cannot open your saved sign ins for you. That is the price of us never holding a key to them. You can forget them, or reset your vault. A reset asks you to sign in again with an extra security check. It takes effect after 72 hours, and you can cancel it during that time. After a reset, your old saved sign ins are deleted, and you sign in to those sites again.
Forget a site any time
Every saved site shows up on the Connected Sites page in the app. You can forget one site, or all of them, whenever you like. Saved sign ins do not expire on their own.
Did you save sign ins with Andi before passkeys? When we made the switch, we deleted every sign in saved the old way. Just sign in to those sites again in Andi's browser, and they will be saved under your passkey.
How we keep your browser safe
Keeping your accounts safe is our top priority. Here is how we protect you.
- Each person gets a private browser in our cloud, kept apart from everyone else. It cannot see the cookies, passwords or files on your own device.
- Andi never types passwords, one time codes or card numbers. You type them yourself.
- Andi asks before buying, sending, posting, deleting or signing anything for you.
- Website text is treated as untrusted, so a website cannot direct Andi to take actions.
- The live view of your browser is passed through to you and is not stored.
- Your saved sign ins are locked with your passkey. While they are stored, no one at Androcrew can open them.
To learn more, read the saved site sessions section of our privacy policy.