Dots by OpenAI add inbox-code autofill

This is a small feature with outsized importance: agents stop feeling autonomous when every authentication wall sends the user back to the keyboard.

• –Per-use versus always-allow is a sensible permission split, but sensitive accounts should default to one-time approval.
• –It strengthens Dots’ connected-email and isolated-browser workflow, which OpenAI documents as separate access layers.
• –Email OTPs and magic links are common blockers in SaaS onboarding, research, and administrative workflows.
• –The next trust challenge is auditability: each code should remain bound to the originating site, task, and approval scope.