Exporting from Your Old App¶
Import reads the export file your old app makes. This page says, app by app, what to make and what comes across. The names are the ones in Import's help list, Tap here for help on exporting from other Password Managers (on the Mac, Click here…), which shows the same steps one app at a time.
An export file holds your passwords in plain text
Anyone who has the file can read every password in it. Make it only when you're ready to import, keep it on your own device, and delete it as soon as the import is done, from the Bin or Recently Deleted too. Import reminds you when it finishes.
Getting the file to Import¶
Put the export in Files on this iPhone, by AirDrop or iCloud Drive, then choose it with Choose File… on Import's first step.
Save the export anywhere on your Mac, then choose it with Choose File… on Import's first step, or drop it on the window.
Import tells the format from the file itself, so a file from any app on the list can be chosen. It reads zip files too, where an app writes its export as one. An export encrypted by your old app can't be read, with one exception: a Bitwarden export protected with a password, whose password Import asks for. Export again without encryption, and delete that file once it is imported.
At a glance¶
| On screen | What to make | Format |
|---|---|---|
| 1Password | An export of your account | 1PUX (best), 1PIF or CSV |
| Bitwarden | An export of your vault | JSON (best) or CSV |
| LastPass | An export of your vault | CSV |
| KeePass | An export of the database (KeePass or KeePassXC) | XML or CSV |
| Dashlane | An export of your data | A zip of CSV files |
| Apple Passwords | Export All Passwords to File, on a Mac | CSV |
| Chrome and Edge | The browser's password export (Brave too) | CSV |
| Firefox | The browser's password export | CSV |
| Proton Pass | An unencrypted export | JSON in a zip, or CSV |
| Enpass | An export of your vault | JSON |
| Keeper | An export of your vault | JSON |
| NordPass | An export of your items | CSV |
| RoboForm | An export of your data | CSV |
| Credential Exchange | Your manager's Credential Exchange export, where it offers one | JSON |
| CSV | Any table with a heading line | CSV |
Password managers¶
1Password¶
In 1Password on a Mac or a PC, choose File, then Export, and your account. Choose 1PUX where it is offered, or 1PIF in an older 1Password. A CSV is read too, though it carries logins alone.
Carries: every category with its fields, tags, vaults, when each item was made and changed, earlier passwords, one-time codes and archived items. Left out: documents and attachments, passkeys and the Trash.
Bitwarden¶
In Bitwarden's web vault, choose Tools, then Export vault. Choose the .json format, unencrypted, or the .csv. A .json protected with a password is read too: Import asks for that password, uses it once and keeps it nowhere. An export encrypted with your account key can't be read.
Carries (JSON): logins, notes, cards, identities and SSH keys with custom fields, folders, collections, dates and earlier passwords. The CSV carries logins and notes, with no dates. Left out: passkeys, attachments and the Trash.
LastPass¶
In LastPass, open the vault, choose Advanced Options, then Export. Save what it gives you as a .csv file, or copy it into a text file whose name ends in .csv.
Carries: sites with their one-time codes, and notes of every type, in their folders. Left out: dates, which the file doesn't have, and attachments.
KeePass and KeePassXC¶
In KeePass, choose File, Export, then KeePass XML (2.x). In KeePassXC, choose Database, Export, then CSV or XML. The database file itself (.kdbx) can't be read: export it first.
Carries: every entry with its fields, groups as folders, tags, dates, earlier passwords and one-time codes. Left out: attachments and the Recycle Bin.
Dashlane¶
In Dashlane, choose My account, Settings, then Export data as CSV. It writes a zip of several CSV files: choose the zip, or any one of the files inside it.
Carries: logins with their one-time codes, secure notes, payments, identity documents and personal details, each with its category. Left out: dates, which the files don't have.
Apple Passwords¶
In the Passwords app on a Mac, choose File, then Export All Passwords to File. It writes a CSV of your logins and their one-time codes.
Carries: logins with their notes and one-time codes. Left out: passkeys, Wi-Fi passwords and dates, which the file doesn't have.
Chrome, Edge and Brave¶
Use the browser's own Export passwords, in the settings of its password manager. It writes a CSV of your logins.
Carries: logins with their notes. Left out: dates, cards and addresses, which the file doesn't have.
Firefox¶
In Firefox, open Passwords, choose the menu at the top right, then Export Passwords.
Carries: logins, and when each was made, changed and last used. Firefox keeps no name for a login, so each comes in named after its site.
Proton Pass¶
In Proton Pass, choose Settings, Export, then the JSON format, not encrypted, or the CSV. The JSON comes as a zip: choose the zip.
Carries: logins with one-time codes, notes, cards, identities and aliases, vaults and dates. Left out: passkeys, attachments and the Trash.
Enpass¶
In Enpass, choose File, Export, then the JSON format.
Carries: every category and template, fields of your own, folders, tags, dates and earlier passwords. Left out: attachments and the Trash.
Keeper¶
In Keeper's web vault, choose Settings, Export, then JSON.
Carries: every record type with its fields, folders and shared folders, and one-time codes. Left out: dates, which the file doesn't have, and attachments.
NordPass¶
In NordPass, choose Settings, Export items, then CSV.
Carries: passwords, notes, cards and identities in their folders. Left out: dates, which the file doesn't have, and passkeys.
RoboForm¶
In RoboForm, choose Options, Account & Data, then Export, as CSV.
Carries: logins, bookmarks and safenotes in their folders. Left out: dates, and saved form fields.
Credential Exchange¶
Credential Exchange is a common format that password managers have agreed on. Where your manager offers to export in it, choose that.
Carries: logins, one-time codes, cards, notes, identities, API keys, SSH keys and Wi-Fi details, in collections, with dates. Left out: passkeys and files.
Any other app: CSV¶
Most password managers can export a CSV, a plain table. Choose CSV in the help list for Import's advice, then choose the file. It needs a heading line. On the Fields to fields step each column is shown, guessed from its heading as the name, the website, the username, the password, the notes or a field, for you to change. A column of dates, tags or a folder is read where its heading says so.
Authenticator apps¶
These bring in one-time codes: each code becomes an item of its own. QR code or link, Google Authenticator and Private Authenticator are chosen in the One-time codes panel on Import's first step. The next page gathers their codes from the camera, from pictures of QR codes, or from a link you paste. Aegis and otpauth list are files, chosen with Choose File….
A screenshot of an export QR code holds its keys
Anyone with the picture can make your codes. Once Import has read them, delete the screenshots, on both devices.
Private Authenticator¶
Private Authenticator gives you two ways, and Import offers both:
- Export QR codes. In Private Authenticator, tap the logo and choose Export, then Generate. It shows QR codes, ten codes to a QR code. Show each to the camera, or use screenshots of them. They carry codes of 6 or 8 digits that change every 30 seconds, and nothing else.
- Backup. A Private Authenticator backup, its QR code pictures and its recovery key, carries everything: Steam codes, every length and interval, tags and archived codes. Show its QR codes to the camera or choose its pictures, then type or paste the recovery key, as Private Authenticator showed it, and choose Open Backup.
Google Authenticator¶
In Google Authenticator, choose Transfer accounts, then Export accounts. It shows one or more QR codes: show each to the camera, or use screenshots of them.
Carries: time-based codes with their names. A counter-based code is passed over.
QR code or link¶
A single setup QR code, as a website shows it when you turn on two-step sign-in, or its setup link or key: show it to the camera, choose its picture, or paste it. See One-Time Codes.
Aegis¶
In Aegis, choose Settings, Import & Export, then Export, as JSON without encryption. An encrypted vault can't be read.
Carries: time-based and Steam codes with their names, notes, and groups as tags. Counter-based codes and other sorts are passed over.
otpauth list¶
A text file of otpauth:// links, one to a line, as Ente Auth and others write. A line that is a Google Authenticator export link is read for every code in it. A link that is counter-based or damaged is passed over.
Microsoft Authenticator and Oracle Mobile Authenticator¶
Neither app can export its codes, so there is nothing to import. Set each code up again from scratch, with its QR code or setup key: on each website, find its two-step sign-in setting, choose to set up an authenticator app again, and scan the new QR code into Private Passwords. Keep the old app until each site accepts a code from Private Passwords.
Continue to Undoing the Last Import.