A personal firewall

Nothing happens without you.

Your partner wants the Netflix password. “Mum” texts from a new number. An AI wants to push to production. A new phone wants into your account. With Vando, they all ask first, you see exactly what’s asked, and you approve it on your phone. Or you don’t.

What makes it different For developers

Your passwords live here too. Android first, then iPhone. Not open for sign-ups yet.

Requests5 waiting

Claude Code · MacBookWants to run a command

~/code/storefront $
git push --force origin main

Rewrites: main, 3 commits
Needs: Face ID · 4 min left

DenyRun it

What a password manager can’t do

Password managers keep secrets. Vando decides who and what gets to use them, and checks who’s really asking.

Know it’s really them

A cloned voice can’t answer for your mum’s phone.

Pair your phones once, in person. After that, any message, call or voice note that claims to be her can be checked in seconds: Vando asks her phone. Scammers can copy a voice, a photo or a number. They can’t copy that.

It’s really Mum · her phone confirmed it Not proof · answered from a phone added this week It’s NOT Mum · don’t send anything

Share without losing track

Hand over Netflix, not your peace of mind.

Share with the people you trust; they don’t need to understand Vando to receive it. It says plainly when a share means they can see and copy it, and you get a receipt either way. For your people →

AI asks, you approve

Your agents get one job, not your keys.

Risky commands and secrets wait for your phone. Passwords go into the command, never the chat. Later: a key that does one thing for twenty minutes, then expires. For developers →

Locks that match what’s at stake

A stolen, unlocked phone isn’t enough.

Every item gets its own lock. Everyday things open with your face; the things that matter can also need a security key, a person you trust, or a wait you can cancel from any of your devices.

NetflixFace ID
BarclaysFace ID + Sarah approves
Recovery codesFace ID + key + 24 h wait

Everything that wants something of yours, in one place

People, apps, devices and AI all come through the same door and follow the same rules. Deny is always one tap. Every decision is signed on your phone and leaves a receipt, so not even our servers can approve anything for you.

How it keeps you safe →

Sarahwants the Netflix passwordperson
Claude Codewants “npm token” for npm publishAI
Your accountantwants one document, for a weekperson
Claudewants to pay £38.20 at TescoAI
Chrome on MacBookwants your GitHub logindevice

And yes, all your passwords

Everything a good password manager does, underneath the rest.

Fills everywhereAny app on your phone, and your browser on Mac or Windows.
Passkeys and two-step codesKept and filled like passwords.
Move in, in minutesFrom Apple, Google, 1Password, Chrome or a file.
A way back inLose your phone without losing everything, and without an email reset anyone could trigger.

Start where you are

For you One place that asks before anything happens What makes it different → For your people Share safely, and know it’s really them For your people → For developers Your agents ask before they act For developers →

Where it’s at

Built in three steps. Each has to be genuinely useful before the next starts.

1 · Me Building nowYour devices ask your phone; locks per item; receipts; a way back in; AI coding agents that ask first. Passwords, passkeys and codes everywhere.
2 · UsYour people: share safely, and check it’s really them.
3 · Us + AIAI that pays, emails and deploys on short, narrow permissions you approve.