Grok Bot can now save logins, cards and contact information in a new Vault, so it can sign in and check out for users without asking again
Grok Bot can now save your logins, cards, and contact information. Add them once, and Bot securely remembers them for the future.
Context
Letting an assistant hold login and payment details lets it finish tasks such as purchases end to end. It also raises the stakes on how those secrets are protected, which the company describes as write only storage.
This follows the October 22 deck's story on a 1Password integration that lets Grok Bot sign in with approved logins. The product changelog lists the Vault in version 0.75.5, and the help pages say passwords and card numbers are write only and not shown to the bot, while contact details and login metadata are visible. The post was published at 3:43 PM Eastern on October 23.
Deep dive
The Grok Bot account posted at 3:43 PM Eastern on October 23 that the bot can now save logins, cards and contact information, so users add them once and the bot remembers them. The attached video shows a Vault page in settings with separate tabs for logins, cards and contact info.
The product changelog lists the Vault in version 0.75.5 and says it enables signing in and checking out. The help page on storing secrets describes how it works: vault entries are write only, so passwords, card numbers and security codes are not shown to the bot, while contact details and login metadata are visible. The help page also says the Vault is not supported for team bots, which should use a separate secrets feature instead.
The security description comes from the company's own documentation, and no outside audit of the design was found. The feature builds on the 1Password integration covered on October 22, which let the bot sign in with logins a user approves. Together they move the assistant toward completing purchases and account tasks without a person typing credentials each time.
What to expect next
Watch for how purchase approvals work in practice, such as whether users must confirm each checkout, and whether the Vault comes to team bots. Security researchers are likely to probe the write only claim, so any independent review or reported issue would be the key signal. Wider adoption also depends on which sites the bot can reliably sign in to and pay on.