Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

You can use Grok to research products and prepare a shopping checkout while keeping card numbers, security codes, passwords, and one-time codes out of ordinary chat. When Grok Bot reaches a payment confirmation, take control and review the purchase yourself. Its documented Allow/Deny and Link steps do not establish that Grok, Link, or the retailer cannot see particular payment details.

Use Grok for shopping research, not for secrets

Ask Grok to find products, compare options, or prepare a cart. Set a clear boundary in the prompt, such as: “Research these items and prepare the cart, but do not submit an order, purchase anything, or save payment details without my approval.” SpaceXAI’s Grok Bot guidance recommends explicit limits for purchases and other consequential actions; approval applies to a proposed action, not to a blanket permission for later ones. Grok Bot approvals, security, and privacy

Keep card numbers and security codes, passwords, passkeys, and one-time verification codes out of ordinary chat. SpaceXAI’s consumer privacy policy also asks users not to include personal information in prompts, while noting that it cannot control what users submit. SpaceXAI Privacy Policy

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Take control for checkout and authentication

Grok Bot’s security guidance says it should hand control of the computer to the user for passwords, passkeys, two-factor codes, CAPTCHAs, and payment confirmations. It specifically says not to send a password or one-time code in ordinary chat. Enter these directly in the relevant site or prompt when you have control, rather than typing them into the conversation.

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

The documentation describes a supported secure-secret request that is masked, omitted from the transcript, and not shown to the model. That description applies to that specific secure-secret flow; it is not a guarantee about ordinary chat, every checkout field, or all payment information. Use the user-controlled handoff for sensitive steps instead of assuming a chat field is protected. Grok Bot approvals, security, and privacy

Check any address or phone-number form before answering

A retailer may need an address or phone number for delivery or order updates. Grok Bot documentation says it can present one form at a time in chat and fill the answers into the web page. That convenience does not mean the merchant receives less information than it would if you filled out the page yourself.

Rank #2
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
  1. Check that the browser is on the retailer’s intended site before sharing information.
  2. Read the exact fields requested and provide only what is needed to complete the order.
  3. Review the values Grok entered on the page before continuing or submitting.

For account sign-in, the documentation also describes browser use of a hardware security key such as a YubiKey when the setting is enabled and each use is approved. A security key can help protect sign-in; it does not conceal checkout details from a merchant. Grok Bot approvals, security, and privacy

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Review the approval card and Link payment step

SpaceXAI’s changelog documents a purchase flow in which Grok Bot displays the amount and asks the user to Allow or Deny; Link then completes payment. Changelog entries also describe selecting a saved card from a Link wallet using “Pay with” after approval. Grok Bot Changelog

Rank #3
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Before allowing a purchase, check the merchant, item, displayed amount, shipping details, and payment method in the checkout flow. Deny the request if anything is wrong or unexpected, then correct it yourself. The documented approval and wallet steps do not specify which payment credentials or transaction fields are visible to Grok Bot, Link, or the retailer, and do not establish that Link masks a card number from the merchant.

When deciding what you are comfortable sharing, check the retailer’s own checkout and privacy terms. The retailer and payment wallet have distinct roles, but the documented Grok materials do not enumerate which transaction fields they each receive. Avoid treating a wallet or approval screen as proof that a merchant collects less data.

Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Check which Grok service you are using

The policy that applies depends on how you access Grok. SpaceXAI’s consumer privacy policy covers direct use of its Grok websites and apps, but says third-party use is governed by the third party’s policy. It specifically identifies Grok on X as subject to X’s privacy policy and terms. Users in the European Economic Area, United Kingdom, and Switzerland are directed to a regional addendum. SpaceXAI Privacy Policy

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

SpaceXAI’s consumer terms say service features may take autonomous actions, including browsing the web and interacting with third-party services, including financial institutions. The terms also describe circumstances in which X account details and Grok-on-X conversation history may be brought into a SpaceXAI account when a user connects with X credentials. Review the terms for the account and route you actually use. SpaceXAI Consumer Terms of Service

Best Value
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified (Pack of 2)
  • The information below is per-pack only
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.

Do not confuse Grok Bot checkout with Go in Gopuff

Go is a separate shopping assistant inside Gopuff’s app, powered by Grok models. Gopuff describes personalized carts based on prior preferences and external signals. That product description is not evidence about Grok Bot’s Link checkout, nor does it establish a payment-data-minimizing flow. SpaceXAI: How Gopuff’s Go agent shops with Grok

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.