Does the agent see my passwords when it signs into my accounts?

Perplexity says credentials never pass into the sandbox. They're delivered from outside only at the moment they're needed — for example, SPACE can handle a Google sign-in flow without exposing the credentials inside the agent's environment.

Perplexity Mastery Free ~7 min read What's new · July 15, 2026

SPACE: the sandbox that makes Computer safer.

Q: What is Perplexity SPACE?

SPACE is the sandbox platform Perplexity announced on July 15, 2026. It's the secure environment where Perplexity Computer's agents run code, work with files, and carry out long tasks. It's live in Computer for all users.

Q: What are rolling snapshots?

SPACE captures the full session state — live memory plus files — as often as every minute, and can go back up to a week. Practically, you can walk away mid-task, come back days later, and the agent resumes exactly where it paused.

On July 15, 2026, Perplexity introduced SPACE — the sandbox platform now running underneath Perplexity Computer for all users. It's infrastructure, so you'll never click a SPACE button. But if you're handing an AI agent your files, your sign-ins, and hours-long tasks, where that agent runs is the question that matters most. Here's what changed and what it means for how much you can trust Computer with.

01 Why "where an agent runs" is the real question

Chatbots answer questions; agents do things — run code, edit files, sign into services, and work for hours on your behalf. That's useful precisely because it touches your real data, and risky for the same reason. The industry's answer is the sandbox: an isolated, disposable environment where the agent works, walled off from everything it wasn't given.

Perplexity's claim with SPACE is that existing sandbox tech forced a trade between functionality, efficiency, and security — and that Computer needed all three, so they built their own. Whether you buy the framing, the practical upgrades below are real and user-visible.

02 What SPACE actually does

Disposable by default

Sandboxes live only as long as the task

Each task runs in its own environment — a fully isolated microVM with its own operating system. When the task finishes, the sandbox and everything in it is destroyed. Nothing inside can touch the host or another task running in parallel.

Credentials stay outside

The agent never holds your passwords

Perplexity says credentials never pass into the sandbox — they're delivered from outside only at the exact moment they're needed. A sign-in to your Google account happens without the credentials ever sitting inside the agent's environment, and a compromised agent has no path to them by default.

A built-in time machine

Pause, resume, branch — and rewind up to a week

SPACE takes rolling snapshots of the full session — live memory plus files — as often as every minute. You can walk away mid-task, come back days later, and the agent picks up exactly where it paused. Sessions can also branch into parallel sandboxes.

The user-facing takeaway

The snapshot layer is the part you'll actually feel: long tasks in Computer survive restarts, interruptions, and multi-day gaps. "Start the research today, finish Thursday" becomes a normal way to work with an agent instead of a gamble.

Quick check

Computer is halfway through a long research task and you need to shut your laptop until tomorrow. What happens under SPACE?

03 Do you need to do anything?

No — and that's the point. SPACE is live in Computer for all users as of the announcement; there's no toggle, no tier gate mentioned, no setup. Perplexity says it has run millions of sandbox creations over the past week after two months of internal use. For enterprise buyers there's more underneath: bring-your-own encryption keys, and designs for on-prem and fully offline deployment.

These are Perplexity's own claims about Perplexity's own infrastructure — there's no independent audit cited in the announcement. Good architecture reduces risk; it doesn't erase it. The sensible posture with any agent, on any platform, stays the same: give it access to what the task needs, not everything you have, and keep truly sensitive data out of tools you haven't cleared for it.

Frequently asked

SPACE — your questions, answered

What is Perplexity SPACE?

The sandbox platform Perplexity announced on July 15, 2026 — the secure environment where Computer's agents run code, work with files, and carry out long tasks. It's live in Computer for all users.

Do I need to turn it on or pay for it?

No. SPACE is infrastructure, not a feature toggle — it already runs underneath Perplexity Computer for all users.

Why does a sandbox matter for an AI agent?

Agents do real work — running code, editing files, signing into services. A sandbox contains that activity so a misbehaving or compromised agent can't reach beyond the task it was given.

Does the agent see my passwords?

Perplexity says credentials never pass into the sandbox — they're delivered from outside only at the moment they're needed, so sign-in flows happen without exposing credentials inside the agent's environment.

What are rolling snapshots?

Captures of the full session state — live memory plus files — as often as every minute, going back up to a week. Walk away mid-task, come back days later, and the agent resumes exactly where it paused.

Put Computer to work

What Perplexity Computer actually does day to day — and how Deep Research fits inside it. Computer & Deep Research →