Vercel announced Vercel Passport is generally available to Enterprise customers…

Brief

Vercel Passport protects "vibe-coded" internal apps by reading verified visitor identity from an organization's IdP (examples: Okta, Microsoft Entra). The author asserts apps receive identities so they don't need to implement auth—"eliminating the security issues"—and that those identities enable secure backend connections and data-access enforcement; GA for Enterprise was announced 2026-07-31.

Key details

Vercel Passport injects verified user identity into apps so those apps "don't need their own auth," a claim that the author says "eliminates the security issues of having to build auth."

Those verified identities can be used to securely connect to backend systems and enforce data-access permissions for "vibe-coded" internal apps; Vercel also advertises access monitoring and the ability to create bypasses.

Vercel Passport protects your vibe-coded internal apps behind your IdP (Okta, Entra, etc.)

Apps are provided with the user identity so that they don't need their own auth (eliminating the security issues of having to build auth)

And that identity can be used to securely connect to backend systems to ensure data-access permissions even if the vibe-coder didn't think about this being a problem.

Vercel (@vercel)

Vercel Passport is now generally available for Enterprise customers.

• Protect projects with your native IdP
• Use verified identities across apps
• Monitor access and create bypasses
vercel.com/changelog/vercel-…

Link

Vercel Passport is now generally available - Vercel

Vercel Passport is now generally available. Protect your deployments with your own identity provider and read verified visitor identity in application code.
vercel.com

— https://nitter.net/vercel/status/2083193506940829949#m

Brief

Why it matters

Key details