Grok Vault Reveal Shows Saved Credit Cards Logins And Contacts
xAI added a Grok Vault tab that stores users' saved logins, contacts and credit card details, moving its Grok chatbot toward handling purchases and account-based tasks while raising security stakes.
Key Takeaways
- Grok Vault appeared in xAI’s Grok settings on Friday as a new tab for saved logins, contacts and credit card details
- TestingCatalog posted screenshots and said the feature was rolling out
- xAI has added web access, richer app settings and more persistent user context to Grok over recent months
- xAI has not publicly detailed how Grok Vault encrypts data, whether cards are tokenized, or what confirmation steps appear
TestingCatalog posted screenshots of the new Vault tab and said the feature was rolling out. A separate Grok settings page was also visible during the rollout. xAI builds the Grok assistant and has been adding web, voice and utility features to turn it from a chat product into a task tool.
Grok Vault Turns Memory Into Checkout
The change matters because stored payment and identity details are what separate a chatbot that answers questions from one that can finish a job.
Once an assistant can keep a card, a saved login and a contact record, it can move into travel booking, shopping and account management.
That also raises the risk profile. Password managers and browsers already store the same kinds of data, but a chatbot introduces a second layer.
It not only holds credentials, it also interprets prompts and decides when to use them, so errors can shift from bad storage security to bad execution logic.
Grok has added practical features in steps over recent months, starting with web access, then richer app settings and more persistent user context. Friday’s Vault tab looks like the next piece in that sequence because it supplies the account data an assistant needs before it can log in, autofill or pay.
Rivals are moving along the same path, though with different controls.
OpenAI and Anthropic have both spent the past year pushing their assistants toward more agent-like work, where software carries out multi-step tasks instead of stopping at a text response. The competitive gap now is less about clever wording and more about which assistant can safely hold state, identity and payment details long enough to complete a transaction.
Also Read: AI Agents Unlock Payments Beyond Credit Cards With Coinbase x402
What XAI Still Has To Prove
The screenshots do not answer the hard questions yet. xAI has not publicly detailed how Grok Vault encrypts data, whether cards are tokenized, or what confirmation steps appear before a purchase or login attempt.
Those details will decide whether Grok Vault becomes a convenience feature or a liability.
If xAI adds strong approval flows, device binding and clear permission prompts, Vault could support a broader push into agentic commerce. If it does not, every saved credential becomes a larger target.
How Stored Credentials Change Grok
Grok Vault changes the technical role of Grok inside xAI’s stack.
A normal chatbot is stateless for each turn, or it remembers only text context. A vault adds durable personal data that sits outside the conversation and can be fetched when the model needs it.
In practice, that usually means a separate encrypted store handles the card or password, while the model gets a limited token or a permissioned reference instead of the raw secret itself.
That distinction matters most for shoppers, frequent travelers and small business users who want Grok to do more than draft messages, and if xAI eventually lets Grok fill forms or check out across merchants, the assistant could compete less with search boxes and more with browsers, password managers and wallet apps.
The next thing to watch is whether xAI documents approval flows and merchant integrations, because those controls, not the tab itself, determine whether Grok Vault is a helper or a hazard.
Read Next: AI Chip Startup Infinity Grabs Meta Talent To Challenge Nvidia
