What is Grok Bot's Vault, and how does it work with 1Password?

Grok Bot's new Vault saves your logins, cards and contact info. Here's how to import logins, how it works with 1Password, and what hasn't been published yet.

All Grok Bot questions: https://www.soundminds.ai/faq.

Last updated Oct 23, 2026

Part of our Grok Bot Hot Topics series

Asked on X: https://x.com/ronaldpauleus/status/2113764388976873691. Asked on X: https://x.com/Cyberjackin/status/2113777299653116190. Asked on X: https://x.com/sophia_reel91/status/2113757579650142510

Short answer

Grok Bot got a Vault today, Oct 23, 2026. It's announced in the 0.75.5 notes and needs Grok Bot 0.75.2 or later. Your Bot can now save your logins, cards and contact info to a Vault in Settings and fill them in to sign in or check out for you (Grok Bot changelog: https://x.ai/changelog/bot).

I checked Cursor's Store secrets securely page (https://cursor.com/help/grok-bot/secrets#what-is-vault), and it says, "Your Bot never sees a saved password, card number, or security code." Your Bot can see your contact info and the list of logins you saved, so it can pick the right entry.

I like that Vault takes one tool out of the middle, so I think it's worth trying. If you already use 1Password, you can keep it, and you can use both.

How do I import logins?

On desktop, Vault reads a CSV export from your password manager: "Export your passwords as a CSV file from 1Password, Chrome or Edge, Safari or Apple Passwords, Firefox, Bitwarden, or LastPass."

Step 1: Export your passwords as a CSV file from your password manager.
Step 2: Open Settings, then Vault, choose New item, then choose Import from CSV.
Step 3: Pick the file. "The file is read on your computer and never uploaded. It must be under 5 MB."
Step 4: Review the list and import. Items already in your Vault are skipped, and rows with a missing password or a website that isn't https aren't imported.
Step 5: Delete the CSV file right away. "The exported CSV holds your passwords unencrypted, so delete it once the import finishes."

To add a card or contact info by hand, open Settings > Vault, choose New item, and pick Card or Contact info. For a card, you can scan it or type it in: "For a card, choose Scan with camera or Upload a photo to fill it from the card, or type it in. Then choose Save card." For contact info, "enter the name, address, phone, and email, then choose Save contact info."

Should I keep 1Password?

You don't have to choose. When your Bot needs a login, it uses Vault first: "your Bot uses a saved login first, then a connected password manager such as 1Password." The same order shows up on Cursor's Connect apps page (https://cursor.com/help/grok-bot/connect-apps): "Your Bots check Vault first."

To connect 1Password, "Select Connect apps and open 1Password. It's under Password Managers. On your computer, choose Connect 1Password." Your browser then opens so you can sign in to 1Password and approve Grok Bot.

Here is how the two differ:

Vault can hold your cards, with "the number, expiry, security code, name on card, and billing address." 1Password can't do that here, because "1Password does not fill payment cards."
With 1Password, "You approve each login in 1Password, and 1Password fills it in." With Vault, your Bot asks before it uses a saved card: "saved cards fill in at checkout, and your Bot asks before it uses one."
The 1Password integration "works with personal and Family 1Password accounts and needs 1Password 8.12.42 or later."
It also has a limit on which logins it offers: "1Password only offers logins from your own Personal vault, called Private on Family accounts."

If you like approving each login in 1Password, keep it connected. If you want your cards and logins in one place inside Grok Bot, try Vault.

Who holds the keys?

I didn't find anything in the Grok Bot docs about how Vault data is encrypted, where it is stored, or who holds the keys. What is published is that the values are write-only from the Bot's side: "Saved values are write-only." Passwords, usernames, websites, card numbers and security codes "change only in Settings > Vault," and logins and cards are removed only there too.

What card-security standard (PCI) applies?

Nothing has been published. I didn't find a PCI DSS statement or any other card-security certification for Vault in the Grok Bot docs or the changelog. Until something is published, whether to save a card is your call.

What Vault doesn't do yet

It doesn't work on Team Bots: "Vault isn't supported on Team Bots." On a Team Bot, add API keys under Secrets instead.
It doesn't protect the import file. The CSV export stays unencrypted on your computer until you delete it.
It doesn't let you edit cards on the phone yet: "On the phone, saved cards can't be edited yet."
Nothing has been published yet about encryption or PCI.

Save only what your Bot needs, and never paste a password or card number into a chat.

Follow me for the next Grok Bot Hot Topic.

Sources

Cursor, Store secrets securely: https://cursor.com/help/grok-bot/secrets

Your Bot never sees a saved password, card number, or security code.

Export your passwords as a CSV file from 1Password, Chrome or Edge, Safari or Apple Passwords, Firefox, Bitwarden, or LastPass.

The file is read on your computer and never uploaded. It must be under 5 MB.

The exported CSV holds your passwords unencrypted, so delete it once the import finishes.

For a card, choose Scan with camera or Upload a photo to fill it from the card, or type it in. Then choose Save card.

enter the name, address, phone, and email, then choose Save contact info.

your Bot uses a saved login first, then a connected password manager such as 1Password.

the number, expiry, security code, name on card, and billing address.

saved cards fill in at checkout, and your Bot asks before it uses one.

Saved values are write-only.

change only in Settings > Vault.

Vault isn't supported on Team Bots.

On the phone, saved cards can't be edited yet.

Cursor, Connect apps: https://cursor.com/help/grok-bot/connect-apps

Your Bots check Vault first.

Select Connect apps and open 1Password. It's under Password Managers. On your computer, choose Connect 1Password.

1Password does not fill payment cards.

You approve each login in 1Password, and 1Password fills it in.

works with personal and Family 1Password accounts and needs 1Password 8.12.42 or later.

1Password only offers logins from your own Personal vault, called Private on Family accounts.

xAI, Grok Bot changelog, v0.75.5 entry (Oct 23, 2026): https://x.ai/changelog/bot

Bots can save your logins, cards, and contact info to a Vault in Settings and fill them in to sign in or check out. Requires Grok Bot 0.75.2 or later.

See how I set up Grok Bot: https://www.soundminds.ai/setup.