What Vando is

Things and locksCopy Anchor Link

Everything you save in Vando is a thing: a password, a note, an API key, a file, a one-time code. Every thing has a lock, and you choose how strong it is. You don’t pick one setting for everything. Netflix can be easy to open while your bank needs more.

The four levelsCopy Anchor Link

A lock has one of four levels. The level says what it takes to open the thing, every time.

EasyCopy Anchor Link

Opens whenever my vault is open. Your vault is open on a phone when you unlocked that phone in the last few minutes and haven’t pressed Lock now. Then Easy things open with no extra step. Keep Easy for things you’d lend a friend.

Just meCopy Anchor Link

Prove it’s me, now, for this thing. Your phone’s unlock (fingerprint, face or PIN) right now, on a phone of yours. This is where new things start. Good for email, banking and SSH keys.

Two devicesCopy Anchor Link

Your phone, plus a yes from your other phone. Just me on one phone, and an approval on a second phone of yours. For people who want more than Just me but have no security key.

Fort KnoxCopy Anchor Link

Nobody but me. Your fingerprint or face (not the PIN) plus a physical security key, like a YubiKey. For the few things that would really hurt to lose.

Making a lock tighter is quick. Making it looser first asks for what the current lock asks for, so a lock guards its own weakening. Your other devices are told either way.

Vaults and foldersCopy Anchor Link

A vault keeps things apart, like Personal and Work. New things in a vault start at its level, and each thing keeps its own lock. Folders sort things inside a vault, the way folders do on a computer. Moving a thing to another folder or vault never changes its lock.

Your devices: your phone holds, the rest askCopy Anchor Link

Vando treats devices in two ways.

• Your phone holds the keys. The Vando app on your phone keeps its keys in the phone’s secure chip. It opens your things, and it is where you approve. You can have more than one phone, and each one holds its own keys.
• Everything else asks. The laptop extension, the web and AI agents like Claude Code hold no keys and can’t approve anything. When they need a thing, they ask your phone, and you answer there.

One exception, on purpose: you can trust a laptop for a while, so Easy logins fill there without asking each time. It ends by itself. Anything above Easy still asks your phone.

Losing a phone never loses your things. Your other phones still open them, and your recovery kit gets you back in after a 48-hour wait that every device is told about.

ApprovalsCopy Anchor Link

When something asks, your phone shows a card in the Inbox: who is asking, what for, the lock, and what you’ll need to do. You tap Deny or the approve button; both are the same size. If you approve, you do the lock’s steps (your unlock, a security key, a yes on your other phone), and your phone signs a receipt over exactly what you saw. More on approvals.

Last verified 9 October 2026