OpenAI’s Dots agents can read your email for 2FA codes but hesitate to enter them

The new persistent AI agents can grab sign-up and verification codes from your inbox, if you let them OpenAI’s new AI agents, called Dots, can read verification codes from a user’s email and complete two-factor authentication when a service asks for it. That is a small sentence with a big implication. The extra login step built to confirm you are you can now be handled by software acting on your behalf. OpenAI launched Dots on September 29, 2026, at its DevDay event. The agents run on the GPT-6 Astra model and are designed to keep working in the background, not just respond when you type a prompt. What Dots actually do Think of a Dot as a digital assistant with its own desk. Each one operates on an isolated cloud computer, works independently, and remembers context from one interaction to the next. Dots connect to over 4,000 applications through plugins. They also plug into platforms people already use for work, including ChatGPT, Slack, and Microsoft Teams. The headline feature is email-based authentication. When a sign-up flow or login sends a code to your inbox, a Dot can fetch that code and enter it, provided the user has granted permission. For anyone unfamiliar, two-factor au...