# Agent 3 attempts to test, when it can't login, overrides all authentication
**URL:** https://replit.discourse.group/t/agent-3-attempts-to-test-when-it-cant-login-overrides-all-authentication/6990
**Category:** Bugs
**Created:** [September 11, 2025, 6:22pm UTC](https://replit.discourse.group/t/agent-3-attempts-to-test-when-it-cant-login-overrides-all-authentication/6990 "2025-09-11T18:22:49Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@shawn93](https://replit.discourse.group/u/shawn93)
#### Post date: [September 11, 2025, 6:22pm UTC](https://replit.discourse.group/t/agent-3-attempts-to-test-when-it-cant-login-overrides-all-authentication/6990/1 "2025-09-11T18:22:49Z")
I asked Agent to fix certain APIs because there was an error loading data on the page and make sure tables were properly implemented. App testing was turned on to make sure the form fill was properly saving a record to the database.
Agent ran into issues on the authentication page (it was typing in the wrong password). Agent took it upon itself to “fix” the issue by replacing the user’s password. A forced password reset by Agent seems like something that should be prevented.
---
### Author:  [@realfunnyeric](https://replit.discourse.group/u/realfunnyeric)
#### Post date: [September 11, 2025, 6:54pm UTC](https://replit.discourse.group/t/agent-3-attempts-to-test-when-it-cant-login-overrides-all-authentication/6990/2 "2025-09-11T18:54:39Z")
I experienced this also. It really struggles with auth, especially non-Replit auth (firebase, supabase etc.)
Use full autonomy with caution in these instances right now.
---
### Author:  [@CraigRT](https://replit.discourse.group/u/CraigRT)
#### Post date: [September 11, 2025, 10:56pm UTC](https://replit.discourse.group/t/agent-3-attempts-to-test-when-it-cant-login-overrides-all-authentication/6990/3 "2025-09-11T22:56:19Z")
Do you think that adding an instruction onto Replit.md to never change the auth system without specific instruction would help? How much does agent pay attention to the Replit.md file?
---
### Author:  [@realfunnyeric](https://replit.discourse.group/u/realfunnyeric)
#### Post date: [September 11, 2025, 11:07pm UTC](https://replit.discourse.group/t/agent-3-attempts-to-test-when-it-cant-login-overrides-all-authentication/6990/4 "2025-09-11T23:07:33Z")
replit.md instructions so far have been ineffective for me.
---
### Author:  [@CraigRT](https://replit.discourse.group/u/CraigRT)
#### Post date: [September 11, 2025, 11:15pm UTC](https://replit.discourse.group/t/agent-3-attempts-to-test-when-it-cant-login-overrides-all-authentication/6990/5 "2025-09-11T23:15:56Z")
Yeah. It sounds like a useful thing, but in reality it does not seem to work how it should.
---
### Author:  [@shawn93](https://replit.discourse.group/u/shawn93)
#### Post date: [September 20, 2025, 1:33pm UTC](https://replit.discourse.group/t/agent-3-attempts-to-test-when-it-cant-login-overrides-all-authentication/6990/6 "2025-09-20T13:33:22Z")
Looks like they fixed overriding authentication, Agent told me it failed logging in because it wasn’t given the right username/password just now.