On November 10, Claroc Research reported that 35,578 of 37,571 Grok apps it tested opened without any sign-in, and some held confidential company and personal data. The fix sits in one setting you control: who can open each app you publish.
IN ONE SENTENCEIf you published an app with Grok using "anyone with the link", treat it as public and lock down any app that holds client or personal data.
Tap a step to tick it off as you go.
Sign in to Grok and open every app you published. Write down each grok.me address and what data it stores.
I built this app with an AI tool and published it with a link. Help me check it for private data. What the app does: [e.g. a lead form and order tracker for a bakery client] What people type into it: [e.g. name, phone number, address, order details] Who should be able to open it: [e.g. only the client and two staff] Give me: 1. Every kind of personal or business data this app stores, as a list. 2. Which access setting fits: Only you, Invited users, Anyone with the link, or the whole internet. 3. A two-line message I can send my client explaining the change. Do not assume anything about the app I did not describe.
For each app with private data, open the publish settings and switch access to Invited users or Only you. Then open the old link in a private window to confirm it now asks for sign-in.
Go to grok.com/share-links and select Remove next to any chat you no longer want shared.
Checked your apps? Reply with how many you had to lock down. If you build client tools, tell us which access setting you use now.
Malik Muzamil · Helping creators and freelancers make money with AI · Built AI courses and programs for top 1% companies
Back to the community