Grok Bot Vault is where you save logins, cards and contact details so your Bots can sign in and fill forms without ever seeing the secret values. xAI puts it plainly: “A Bot never sees a saved password, card number, or security code.” Here’s how to set it up, how to import from your password manager, and the payment settings you need to understand before you save a card.
Key takeaways
- Vault stores Logins, Cards and Contact info.
- Bots never see saved passwords, card numbers or security codes.
- Import from 1Password, Chrome, Safari, Firefox, Bitwarden or LastPass on desktop.
- A saved card can pay at checkout without asking each time.
- Want AI agents handling admin safely for your business? Claim a free strategy session.
What Grok Bot Vault is
The Vault docs (page title “Vault and secure sign-in”) describe three kinds of item:
| Item | What it holds |
|---|---|
| Logins | Website, username or email, password |
| Cards | Number, expiry, security code, name on card, billing address |
| Contact info | Names, addresses, phones and emails for shipping and billing |
Open it at Settings → Vault on desktop or phone. It needs Grok Bot 0.75.2 or later. A Bot can see your contact info and which logins you’ve saved, so it can pick the right one, but the secret values are filled into the page without the Bot seeing them.
1. Add your first items
- Go to Settings → Vault → New item.
- Pick Login, Card or Contact info, fill it in and save.
- For a card you can use Scan with camera or Upload a photo.
- Add Hints so Bots know when to use an entry, for example “use this card for work purchases”.
Known bug: on iPhone 1.18.0 with iOS 26 or later, a new Login can’t be saved. It’s fixed in iPhone 1.19.0, and cards and contact info aren’t affected.
Want AI agents doing admin without touching your passwords? Inside the AI Profit Boardroom you get the Agent OS — Hermes, OpenClaw, OpenCode, Claude and Codex in one place — plus step-by-step Hermes training and four live coaching calls a week.
Want a plan for your business first? Claim your free strategy session.
Join the AI Profit Boardroom →Claim Your Free SEO Strategy Session →
2. Import from your password manager
On desktop, choose New item → Import from CSV…. It accepts exports from 1Password, Chrome and Edge, Safari and Apple Passwords, Firefox, Bitwarden and LastPass. The file is read locally, never uploaded, and must be under 5 MB.
- Items already in Vault are skipped.
- Rows with errors, like a missing password or a site that isn’t https, aren’t imported.
- LastPass exports bring cards too.
- Delete the unencrypted CSV once you’re done.
3. How sign-in works
When a Bot needs to sign in, it tries Vault first, then a connected password manager such as 1Password, then a Secure Form asking you. A Secure Form names the site it fills. Tick Securely save to Bot’s vault to keep the value, or leave it unticked to use it for that chat only.
- A Bot can read emailed one-time codes from a connected Gmail or Outlook account, or its own inbox.
- If you let a Bot pick the password for a new sign-up, Vault generates and saves it. The Bot never sees it.
- For SSO, passkeys, a CAPTCHA it couldn’t pass, QR codes or bank card checks, you use Take over, then I’m done.
4. Understand payments before you save a card
This is the part to read twice. A saved card fills at checkout without asking each time, and there’s no setting that forces approval for every use. If you want to approve every payment yourself, don’t save the card: leave the Secure Form box unticked, or remove the card.
- Payment accounts (wallets such as Link, X Money and Shop Pay) and a Default payment method are listed in Settings → Vault.
- One order card can cover a batch of up to 500 card payments with a saved card. One approval lasts 24 hours, and payments stop if a card is declined.
- With Link connected, a Bot can ask you to approve a one-time card for a single purchase: Pay, Pay another way or Deny.
Want this set up for you instead of doing it yourself? Claim your free strategy session →
5. API keys and Team Bots
API keys go in the secure secret card when a Bot asks. On a Team Bot they go under Secrets, with an environment variable name, a description and the value. The Bot sees the description, not the value.
Your personal Vault isn’t available to Team Bots. A Team Bot has its own Bot’s vault login entries that only managers can see or change. And Vault covers your whole account: every Bot you own can use every item, and you can’t limit an item to one Bot.
Rules worth knowing
- Saved values are write-only. Passwords stay hidden and cards show only the last four digits.
- To change a card number, remove the card and add it again. Cards can’t be edited on the phone yet.
- A Bot can change contact info, nicknames and hints. Passwords, card numbers and codes only change in Settings → Vault.
- Recover, Reset and computer updates don’t touch Vault, the secure card or Team Bot Secrets.
- Never paste passwords, one-time codes or API keys into ordinary chat, a shell command or a file.
For the wider rules on what Bots can do, read xAI’s approvals, security and privacy page.
My verdict
Save logins and contact info first, import from your password manager, and only save a card if you’re happy for Bots to pay without asking each time. Set up that way, Grok Bot Vault lets your Bots get real work done without ever handling your secrets.
About Julian Goldie
I’m Julian Goldie — founder of Goldie Agency and the AI Profit Boardroom. I test new AI agents almost every day for 432K+ YouTube subscribers and run Hermes, OpenClaw, OpenCode, Claude and Codex side by side in my own Agent OS. Claim your free strategy session or join the AI Profit Boardroom.
Want another angle? Read the AI Profit Boardroom guide to Grok Bot Vault.
FAQ: grok bot vault
Can Grok Bot see my passwords in Vault?
No. Saved passwords, card numbers and security codes are filled into the page without the Bot seeing them. It can only see contact info and which logins exist.
Can I import passwords from 1Password or Chrome into Grok Bot Vault?
Yes, on desktop. Export a CSV from 1Password, Chrome, Edge, Safari, Firefox, Bitwarden or LastPass and use Import from CSV. The file must be under 5 MB and is never uploaded.
Can I limit a Vault login to one Bot?
No. Vault covers the whole account, so every Bot you own can use every item. Team Bots don’t use your Vault and have their own logins.
Will Grok Bot ask before paying with my saved card?
Not every time. A saved card fills at checkout without asking, so if you want to approve each payment, don’t save the card.
Where do I store API keys for Grok Bot?
In the secure secret card when a Bot asks, or under Secrets on a Team Bot. Never in chat, a shell command or a file.
Did a computer reset delete my Grok Bot Vault?
No. Recover, Reset and updates only remove secrets typed into files or installed tools. Vault, the secure card and Team Bot Secrets are separate.
Ready to put AI agents to work in your business? Join the AI Profit Boardroom for the Agent OS, setup training and daily updates.
Or claim your free strategy session and we’ll map out your setup.
Starting from zero? Get the free AI course and community.
Join the AI Profit Boardroom →Claim Your Free SEO Strategy Session →Get the FREE AI Course + Community →
Related reading
Last updated November 2026. This page is a living guide to grok bot vault — the facts here move fast and it is updated as they do.
