Hi folks, just found open hands and wanted to try it. So I • chose a LLM & Model (openai / gpt-4o) • entered a valid api-key I am using with other tools • started a new conversation • did a first prompt • got an error message, that freaks me out. It tells me I entered the wrong key (which I didn't) and it shows me the stub of another key, that is either completely random or (which I really don't hope) is some other key by someone else. It is definitely not my key!!!! • So it seems to me, that the whole thing is just not working.

Hey @faint-rain-76340, sorry about this! 1. are you running this locally on your computer or on app.all-hands.dev 2. could you send a screenshot of your LLM settings window so we can see the settings?

Hi there. I use it in the cloud. I just copy and paste my key into the bottom most field. On an error with the key in the conversation, I would expect to see the stub of the key I just entered, but I see different ones. That is giving me goose bumps.

hmm, this is strange. cc @millions-afternoon-47582 who is probably away now but might be able to take a look later

OK, thank you.

I'm not Hiep but can you try: 1. Changing your language to English and trying to set things again. This would be a weird bug. 2. If you enable the “Advanced” toggle at the top, is the base url populated with something?

this is what I see, when switching to advanced mode. gpt-4o was selected before and after switching, there is no URL, just the suggestion. While testing around, I saw errors regarding the websocket connection not being established. But after a reload that was gone. But no matter what I try, the api key is either not saved, or not used in the conversation. I still see what seem to be real keys, but not from my account.

Hello everyone, I’ll take a look into this issue. Thank you very much! thankyou

Thanks so much @millions-afternoon-47582!

Was this resolved on your end now Oliver?

thx. To be honest, I stopped using openhands. This is really a very delicate issue regarding the handling of sensitive data. Something, that should never happen in a production environment. As a user, it makes me feel uncomfortable to trust the app.