Before logging in via a browser, verify: the credential comes from a vault rather than from chat or a model-readable file; the account holds only the minimum permissions required for the task; the 2FA second factor is delivered to the user rather than the agent; payment and security settings require user confirmation; you can view the sites the agent has logged into; you know how to revoke the session or token in one step; and the browser session is cleared or expired when the task ends.