PARAS MADAN
All writing

Latest in AI

Grok Bot Vault: Saved Logins, Cards and Contact Details Explained

Grok Bot can now reuse saved details for sign-ins and checkout, but persistent access still needs clear approval boundaries.

Grok Bot has added a Vault for saved logins, cards and contact information. The October 23 release notes say Bots can reuse those details to sign in or check out, with Grok Bot 0.75.2 or later required. The practical change is less repeated setup between tasks.

An assistant can already know which task you want completed and still stop because a website needs information it does not have. Saving that information makes more of the workflow repeatable. It also makes the distinction between access and permission more important.

What Grok Bot Vault does

The Grok Bot changelog places Vault in Settings. It is part of the v0.75.5 release entry, which also includes changes from 0.75.3 and 0.75.4. The minimum app version listed for Vault is 0.75.2, so the release-entry number and feature requirement are different.

The official announcement describes adding the information once and having Bot remember it for future use. It presents the feature as available, rather than an upcoming preview.

This is more specific than remembering a preference in conversation. A preference tells an assistant which airline or delivery address someone usually chooses. A saved login or card can help it get through a step on an actual website. Those are different kinds of information and should have different handling rules.

The announcement does not publish Vault-specific details about encryption architecture, password-manager imports, export formats or recovery. It would be premature to describe it as a complete replacement for an established password manager on the basis of this release alone.

What changes from existing sign-ins

Grok Bot already had persistent browser sessions. Its computer and apps documentation explains that browser cookies and signed-in sessions are shared across the Bots on one user's cloud computer. A session can survive between tasks, though websites can expire it or request verification again.

Vault addresses a related but different problem: reusing saved details when information needs to be entered again. Keeping a browser signed in and retaining the information used to sign in are not interchangeable capabilities.

The changelog also documents an earlier 1Password integration. Vault is therefore a new built-in storage workflow, not Grok Bot's first ability to work with saved credentials. The announcement does not establish that existing 1Password items are automatically imported.

Saving details does not define permission to act

The same release adjusts Auto-review so it asks less often for actions the user explicitly requested. That should not be interpreted as blanket authority to use every saved item for every task.

Grok Bot's approval documentation describes separate Ask first and Allow automatically rules. Ask first wins when both match, and automated review can still stop an action. The documentation also warns that model-based review should complement least privilege rather than replace it.

Persistent information and persistent permission are separate design decisions. A saved delivery address can remove repetitive typing. It does not answer whether an assistant should place an order, which merchant is acceptable or how much the user intended to spend.

That distinction is useful for teams evaluating agent products. Look at whether a workflow makes its destination, account and consequential action clear. A system that remembers more information needs to make the scope of its actions easier to inspect, not harder.

What still needs clarification

Some general Grok Bot documentation describes older handoff and secure-form workflows for sensitive inputs. Those pages are useful background, but they do not fully explain the newly announced Vault. The launch should not be used to infer that passwords are visible to the model, or that they are never visible, without Vault-specific evidence.

Likewise, the posts do not provide a feature-specific price or a complete plan and platform matrix. Check the installed app and current account eligibility rather than assuming every supported Grok Bot surface has the same Vault controls.

For users, the meaningful test is a recurring workflow that previously stopped for the same information. Does Vault remove that interruption while leaving the final action understandable and reviewable? That is a more useful measure than counting how many fields the assistant can fill.

The broader product challenge is becoming clearer. As agents become better at navigating websites, the remaining friction moves toward identity, permissions and recovery. Remembering a login helps with one of those problems. A trustworthy workflow has to handle all three.

I'm Paras. I work at the intersection of AI, engineering and distribution.

I help AI founders explain technical launches and product decisions in content that developers and operators can understand and share.

Book a 30-minute call.