Grok Bot Vault is the place in Grok Bot where you save logins, cards and contact info so your Bots can sign in to websites and check out for you without ever seeing the secret values. You open it at Settings, then Vault, on desktop or on your phone, and it needs Grok Bot 0.75.2 or later, according to the official Vault docs.
📺 Watch: New Grok Bot Updates are INSANE!
🔥 Get the Agent OS as a free bonus: AI Profit Boardroom members get the full Agent OS zip, prompt libraries, daily tutorials and weekly live coaching calls. → Get inside
If you want a weekly walkthrough of setups like this one, the AI Profit Boardroom is where I share the trainings, the installable Agent OS and the coaching calls.
What Grok Bot Vault stores
Vault holds three kinds of item.
- Logins: a website, a username or email, and a password. A Bot uses a saved login to sign in on that website.
- Cards: the card number, expiry, security code, name on card and billing address.
- Contact info: names, addresses, phone numbers and emails for shipping and billing.
API keys go somewhere else: a separate secure secret card, covered further down.
The rule that matters most is simple. The docs put it this way: "A Bot never sees a saved password, card number, or security code."
What a Bot can see is your contact info and which logins you have saved. That lets it pick the right entry and type your contact details into forms.
How a Bot signs in with Vault
When a site asks for a login, a Bot works through a fixed order.
- A login saved in Vault.
- A connected password manager, such as 1Password.
- A Secure Form in the chat that asks you for the value.
Values from Vault and from a Secure Form are filled straight into the page. The Bot does not see them.
When a site emails a one-time code, the Bot can read it from a connected Gmail or Outlook account, or from its own inbox.
If you let a Bot choose the password when it signs up for a new site, Vault generates that password and saves the login. The Bot never sees that password either.
Some steps can't be done with a form, such as single sign-on, passkeys or a QR code. For those, choose Take over, finish only that step, choose I'm done, and tell the Bot to carry on. The signed-in session stays on the computer and is shared across your Bots.
📺 Watch: Grok Bot Can Now Control Apps on Your Phone!
Who can use each Vault item
Vault covers your whole account. Everything you save is available to every Bot on that account, and you can't limit an item to one Bot.
Team Bots are the exception. Your personal Vault is not available to a Team Bot, so a Team Bot can't use the logins, cards or contact info you saved.
A Team Bot can have logins of its own instead. If you own or manage it, choose the wrench, then Manage, and under General find Bot's accounts. Choose Add, then Bot's vault login, and enter the website, username or email, and password.
Only managers can see or change those logins. If you already run several Bots for a small team, my Grok Bot Teams guide explains how shared Bots are set up.
| Item | What the Bot can see | Where you change it |
|---|---|---|
| Login | That the login exists, not the password | Settings, Vault only |
| Card | Nothing of the number or security code; Vault shows the last four digits | Settings, Vault only (remove and re-add to change the number) |
| Contact info | The full details | Settings, Vault, or ask the Bot |
| API key (secure secret card) | Nothing; the value is masked | Replace it with a new value |
| Team Bot secret | The description, not the value | Secrets on the Team Bot |
📺 Watch: Grok Bot 1.0 Just Dropped: Hire AI Teammates for Your Team
How to set up Grok Bot Vault, step by step
- Update Grok Bot to 0.75.2 or later.
- Open Settings, then Vault, and choose New item.
- Pick Login, Card or Contact info.
- For a login, enter the website, username or email, and password, then choose Save login.
- For a card, choose Scan with camera or Upload a photo, or type it in, then choose Save card.
- For contact info, enter the name, address, phone and email, then choose Save contact info.
- Under Hints, tell your Bots when to use the entry, for example "Use for work purchases". A Bot follows the hint when it chooses between entries.
One known bug to check first. On Grok Bot for iPhone 1.18.0 with iOS 26 or later, New item, Login can't be saved. The docs say this is fixed in iPhone 1.19.0, and cards and contact info were never affected.
A small bakery is a good example. The owner saves the supplier portal login, the business card with a hint that says "Use for ingredient orders", and the shop address as contact info. From then on, a Bot can sign in to the portal and fill the delivery address without asking each time.
If you'd like help mapping which of your own logins and tasks to hand to a Bot, book a free AI strategy session with my team.
Import logins from another password manager
On desktop, you can import a CSV file. Choose New item, then Import from CSV, then Choose CSV file.
The docs list exports from 1Password, Chrome or Edge, Safari or Apple Passwords, Firefox, Bitwarden and LastPass.
The file is read on your computer and never uploaded, and it must be under 5 MB. Items already in your Vault are skipped. Rows with errors, such as a missing password or a site that isn't https, are not imported.
LastPass exports bring your cards along too. The export holds your passwords unencrypted, so delete it once the import finishes.
Change or remove an item
Select the item in Settings, Vault, and edit it or choose Remove. To change a card number, remove the card and add it again. Saved cards can't be edited on the phone yet.
A Bot can change contact info, nicknames and hints when you ask. Passwords, usernames, websites, card numbers and security codes change only in Settings, Vault, and logins and cards are removed only there.
Secure Forms and saving from a chat
When a page needs something only you should provide, the Bot shows a Secure Form in the chat. The form names the site it fills, and your answers go straight into the page.
If the form has a box called Securely save to Bot's vault, tick it to keep the value for next time. Leave it unticked and the value is used only for that chat.
A form without that box saves straight to Vault, so read the form before you submit it.
API keys and other secrets
For an API key, use the secure secret card when a Bot asks for one. The field is masked. Choose Save securely, and the value is not written into the chat or shown to the Bot.
On a Team Bot, open Secrets, choose Add secret, and enter an environment variable name, a description and the value. The Bot sees the description, never the value.
Saved values are write-only. Passwords stay hidden, cards show only their last four digits, and to change a secret you choose Replace and paste a new value. You can never read the old one back.
Recover, Reset and computer updates can remove secrets you typed into files or installed tools, but they don't touch Vault, the secure card or Team Bot Secrets. So never paste a password, one-time code or API key into ordinary chat, a Shell command or a file.
Inside my Agent OS the habit is the same: secrets live in a secure store, and prompts only name them. To pick the models for the pages and dashboards around your Bots, check the Goldie Bench leaderboard.
Paying with a saved card
This is the part people miss. A card saved in Vault fills in at checkout without asking you each time, and no setting requires your approval for each use.
If you want to approve every payment yourself, don't save the card. Leave Securely save to Bot's vault unticked on the Secure Form, or remove a card you already saved.
The approvals page also lets you add Ask first rules under Settings, General, Bot. A narrow rule such as "Ask first before buying anything" always stops a matching action for you.
Settings, Vault also lists Payment accounts, which are wallets such as Link, X Money or Shop Pay, and a Default payment method that Grok Bot pays with first. My Grok Bot shopping guide walks through the order cards in full.
To get the prompts and Ask first rules I'd start with, join the AI Profit Boardroom, or grab a free strategy session and we'll plan it with you.
FAQ
Can Grok Bot see my passwords in Vault?
No. Saved passwords, card numbers and security codes are filled into the page without the Bot seeing them. It can only see your contact info and which logins exist.
Can I import passwords from 1Password or Chrome into Grok Bot Vault?
Yes, on desktop. Export a CSV from 1Password, Chrome or Edge, Safari or Apple Passwords, Firefox, Bitwarden or LastPass, then use Import from CSV. The file must be under 5 MB and is never uploaded.
Can I limit a Vault login to one Bot?
No. Vault covers the whole account, so every Bot on it can use every item. Team Bots don't use your Vault and keep their own logins instead.
Will Grok Bot ask before paying with my saved card?
Not every time. A saved card fills in at checkout without asking, so to approve each payment, don't save the card, or remove it from Vault.
Set up Grok Bot Vault today, then book a free AI strategy session if you want my team to map the rest of your Bot setup.
