How this helps you
You save logins and cards once and the Bot uses them without seeing the secret itself.
✦ Try it
I want to approve every payment myself. When you need a card at checkout, ask me with a Secure Form and don't save the card to Vault.
What they did
Official from @bot: Grok Bot has a Vault for logins, cards and contact info, in Settings > Vault. Per the help page, your Bot never sees saved passwords or card numbers.
Who it's for: Everyone who lets a Bot sign in or buy things.
How to try it
- Open Settings, Vault and choose New item.
- Pick Login, Card or Contact info and save it. Add a hint, such as 'use for work purchases', so the Bot picks the right entry.
- To import from another password manager, choose Import from CSV on desktop, then delete the exported CSV.
- Think twice before saving a card: a saved card can be used at checkout without asking each time.
- Remove anything you no longer want used from the same screen.
What to expect
Saved logins and cards show hidden values. Cards show only the last four digits.
Common mistakes
- Saving a card when you want to approve every payment.
- Expecting a Vault item to work for only one Bot. Vault covers your whole account.
- Using Vault on a Team Bot. It isn't supported there; use Secrets instead.
Related tips
- Use your 1Password with Grok Bot: Connect 1Password, approve each login in the 1Password app, and it fills the sign-in without the Bot seeing the password.
- A safety baseline before sharing logins: All your Bots share one computer, so every Bot can use each login.
- Research to purchase, with your approval: It researched pet insurance, compared quotes and paid with Link only after the user said buy.
- Open your Bot's screen to watch or help: Each Bot works on a real desktop you can open, watch, sign in on, and take over.
- Let a team Bot answer requests in Slack: Install a team Bot in Slack so colleagues tag it directly, and give it a routine to catch missed tags.
- 0.75.5: denied approvals stick, forwarding, higher routine limits: Denied approvals stick, email forwarding with attachments, higher routine limit.
- Build a Tesla Bot with Tesla's Fleet API: A Bot that checks your Tesla, runs climate and charging, and asks before it unlocks anything, set up through Tesla's free developer Fleet API.
Worth knowingThere is no setting that requires your approval each time a saved card is used. To OK each payment, don't save the card. Vault is shared across all Bots on the account and isn't on Team Bots.Next in your path →Do it by hand, save a skill, then schedule
Learn more: How to Use Grok Bot: A Beginner's Guide (2026) · All Grok Bot security & vault tips