Bring passwords from another app
At the end, the passwords from your old password manager or browser are in your Vando vault, approved once with your fingerprint, and the export file is deleted.
The short version
- Export your passwords from your old app, unencrypted.
- In Vando: Bring passwords from another app (on Home, in the Vault’s ⋯ menu, or Settings → Your data), and pick the file.
- Check what comes in, tap Import, approve once with your fingerprint.
- Keep Vando open until it’s done.
- Delete the export file, and its synced copies.
The file is read on your phone and never uploaded.
What it reads
| From | File |
|---|---|
| Bitwarden | JSON or CSV |
| 1Password | 1PUX or CSV |
| LastPass | CSV |
| KeePass | XML or CSV |
| Dashlane | zip or CSV |
| Keeper | JSON |
| Chrome, Firefox | CSV |
| Safari or Apple Passwords | CSV |
| Any project | .env files |
Up to 10 MB and 10,000 items a file. Bigger? Export in parts.
Encrypted exports are refused: a password-protected Bitwarden export, a PGP-encrypted file like Proton’s. The app says This export is encrypted. Export it unencrypted from your old app, then pick that file. Vando can’t open them, and it never asks for the old app’s password.
Before you pick the file: your kit
If you haven’t made your recovery kit yet, the import stops first: Save your recovery kit first. If you lose this phone without a kit, everything you import is gone for good. It takes two minutes. Tap Make my recovery kit. Import anyway is there too, but you’d be bringing hundreds of passwords onto a phone that is your only way back in.
Check what comes in
After you pick the file, Check what comes in shows, before anything is saved:
- Read as: which kind of file Vando thinks it is (Read as Bitwarden JSON), with Change if it guessed wrong.
- Where it goes: a vault and the level things start at (Goes in Personal · starts at Just me), with Change, or a new vault for the file.
- What comes in: the file’s folders, and how many logins, notes, cards and codes.
- Good to know: what changed on the way. 3 already in Vando (skipped, so nothing is added twice), repeated in the file (all kept), with extra details (kept in a section of their notes), deep folders joined, passkeys that can’t move between apps yet.

Nothing starts at Fort Knox from an import, because Fort Knox needs your security key: They start at Just me. Add your key to them after. If some look like bank logins, the result offers to move them to Fort Knox.
Then tap Import (it names how many). You approve once with your fingerprint for the whole file, up to 500 items at a time.
While it runs
One line shows progress: 120 of 400 · about 6 minutes left. It adds about 50 items a minute, so a big file takes a while: 1,000 items take about 20 minutes. Pause stops it; Continue carries on.
Keep Vando open until it’s done. If it stops (the phone killed the app, you closed it), pick the same file again: what’s already in is skipped, and you approve once more.
The result
Your passwords are in lists what came in by kind, what was already in Vando, what was left out and why (archived or deleted items in the old app, files, passkeys), and anything not saved, with Try again.
Delete the export file
Do this last, but do it
The export file holds your passwords in plain text. Anyone who opens it can read every one. Delete it as soon as the import finishes. If it is in a folder that syncs, like Google Drive, iCloud or Dropbox, delete it there too and empty that app’s trash. Vando can’t do this for you.
What can go wrong
- “This export is encrypted.”
- Export again without a password or encryption, then pick that file.
- “That isn’t an export Vando knows”
- Vando reads the formats above. A spreadsheet you made yourself may be missing columns: This CSV is missing columns the import needs.
- “That file is too big to import on this phone”
- Up to 10 MB and 10,000 items. Export in smaller parts, or leave out what you don’t need.
- “That export is a zip.”
- Vando couldn’t open this zip. Export as CSV or JSON instead.
- “Your last import stopped at 120 of 400.”
- Pick the same file to finish it: what’s already in is skipped.
A project’s .env files can also come in from your computer, as one folder per environment: a whole project.
Last verified
A whole project
At the end, a project’s .env files live in your vault as one folder per environment, and `vando run -- pnpm dev` gives the program everything it needs after one Give on your phone.
A new phone
At the end, your new phone opens your vault, and your old phone is cut off. With another phone of yours this takes a few minutes; with only your recovery kit, it takes 48 hours.