/
Menu

Import

Add many items at once by pasting a .env file or importing a password manager export, or add a single item by hand.

The Import page (titled Add your stack) gets data into your vault without typing it all by hand. It has three tabs: Paste .env, Password manager CSV and Add one item.

Everything you paste or upload is read on your device. It is encrypted before anything is saved, and the server never sees a plain value.

#Before you start

  • Unlock your vault. See Unlock your vault.
  • Choose where the items go with Add to project at the top of the page. Pick an existing project, or New project… and give it a name. The new project is created when you save. On the Free plan, a new project counts toward the limit of 2.

#Paste a .env file

Use this to bring in API keys and database connection strings from a .env file.

  1. Open the Paste .env tab and paste the file into Paste your .env.
  2. Select Find my secrets.
  3. Review the list. Values are masked. Each row shows the name, the guessed Provider, the Environment and Expiry / rotation. Untick a row to leave it out. Rows that look like non-secrets (such as true, a number or production) are listed under Skipped as non-secrets.
  4. Under Which account owns these?, answer once per provider. Choose an existing account, add a new one by entering its email or username, or choose No account / decide later.
  5. Tick An AI agent wrote this file or could read it if that applies.
  6. Select Save N to vault.

StackHangar guesses the provider from the variable name or value, and recognizes database URLs for Postgres, MySQL, MongoDB, Redis and others. The environment is guessed from the name or value (for example a live key becomes Production) and defaults to Production. Check both before you save.

Each saved item needs a reminder choice, with a provider-specific default: rotate every 90, 180 or 365 days, an expiry date, Never expires (no reminder), or I don't know (flag as Hygiene). Items left as unknown show under Hygiene on Home. See Findings.

Warning

A value that was in a plaintext .env file could be read by tools and agents on your machine. If an AI agent wrote or could read the file, tick An AI agent wrote this file or could read it so those keys are flagged for rotation. See Rotate a key.

Pasting is limited to 500 lines. Lines already in your vault show Already in your vault.

#Import a password manager export

Use this to bring in logins.

  1. Export a CSV from your password manager. Open How to export on the page for steps for Bitwarden, 1Password, LastPass, Chrome, Edge, Firefox and Safari or Apple Passwords.
  2. Open the Password manager CSV tab and drop the file in. The file can be up to 5 MB and 5,000 rows.
  3. Review the logins. You can filter by name, website or username, untick logins you don't want, and use Move ticked to… to send some to a different project. Each login can have its own project.
  4. Select Save N to vault.

Only logins are imported. Cards, identities, secure notes, custom fields and one-time-code (2FA) secrets are left out. Archived logins are marked Archived.

Warning

The export file holds your passwords in plain text. Delete it when you're done, and empty your trash or bin.

If the import stops partway, logins already saved are kept. Select the save button again to finish the rest.

#Add one item

Use this for a single item of any type. Choose the Provider and Type, the provider account, a Name and the Environment, then fill in the value and reminder fields for that type. Select Save to vault. See Items for what each type asks for.

The page links here from Add item on the Vault and project pages.

#Leaving the page

If you have pasted, reviewed or typed something that isn't saved, StackHangar asks Leave without saving? before you go. Choose Keep editing or Leave and discard.

  • Capture for saving a key straight from a provider's page.
  • Items