Use a HeritageIQ device credential. The token stays on this device and is never embedded in the website.