From the source
Replit announced that all VNC connections to graphic repls are now automatically protected by the same token used for repl connections, with no user action required.
Users who want to access repls with a stock noVNC client can set a VNC_PASSWORD secret; only the first 8 characters of the password are considered due to Remote Framebuffer authentication limitations.



