---
title: Security and Permissions
description: How TurnPanel controls access to your computer, shared information, credentials, and connected services.
updated: 2026-09-12
canonical: https://turnpanel.com/docs/security-and-permissions
markdown: https://turnpanel.com/docs/security-and-permissions.md
llms: https://turnpanel.com/llms.txt
---

# Security and Permissions

How TurnPanel controls access to your computer, shared information, credentials, and connected services.

## Command Guard

- Ask for any asks before every command and file change.

### Higher guard levels ask more often

**Context:** Command Guard

Command Guard lists approval levels from Ask for any through Off.

- **Ask for any** [active]: Every command and file change
- **High** [ready]: Read-only work allowed
- **Medium** [ready]: Still asks for edits, moves, stops, and irreversible actions
- High allows read-only commands without asking.
- Medium also allows some file creation and installation without asking.
- Low asks only for irreversible or especially dangerous actions.
- Off disables Command Guard.
- If you deny an action, the agent cannot bypass that decision by using another tool.


## Space and Job access

- A Job inherits its Space’s access rules and can be restricted further, but it cannot gain access the Space does not allow.
- General has separate permissions for reading resources, searching past Jobs, and changing shared memory, Skills, Scripts, or Apps.
- A Skill or integration gives the agent another way to work. It does not give the agent permission to use data or take actions that are otherwise blocked.


## Incognito

An Incognito Job exists only while it is open and is not used for long-term learning. The Job can also block updates to memory, Skills, or saved Scripts.


## Secrets and data leaving the computer

Enter passwords and keys only in trusted credential fields or the provider’s sign-in page. Do not put them in chat, memory, or source code. Local models keep model requests on this computer. Online models, search, integrations, and websites receive the information needed for each request.