Privacy and safety
Keeping keys safe
Keys are kept out of every chat: the web version keeps them in this browser, the desktop app in Windows Credential Manager, and Settings shows only their last four characters.
The AI models never get keys, passwords or tokens, so a model can only say where they are managed, never what they are (asked for one, GlirOS answers itself, with an Open Settings button). To add a key, the user pastes it into the field in Settings, never into the chat: a message that looks like it holds a key is stopped with a question first (a chat is saved, and a cloud model would get it).
On a shared computer, turn off Remember keys in this browser (Settings > Cloud models): the keys are then forgotten when the tab closes. A key can be deleted in the same place; it keeps working at the provider until it is revoked there.
This guide is the same text GlirOS itself uses to answer questions about GlirOS.