Export password manager without revealing the safe
Moving passwords can create a file with secrets in an ordinary text. Check the format and location of the write before export.
In this guide
The export is useful for migration or backup, but not every format preserves the encryption of the safe. CSV and normal JSON may contain passwords in a readable form. The file extension itself does not confirm protection.
First read the instructions for both programs
Check the format supported by the old and new manager. Determine whether the export includes attachments, passkeys, notes, 2FA codes and shared data. The scope depends on the product and version; parts of the items may not be in the file.
For encrypted exports, check how to decrypt it after losing the original account. Some formats are associated with the account, others require a separate password. Do not assume that any manager will import them.
Prepare a trusted device
Execute migration on your own current device. Select a place that does not automatically sync the open file to the shared cloud. Do not send export by email and do not upload to the online CSV converter.
Do not open the file just to take a screenshot for support. If you need help with the format, use a separate demo file with the invented data.
Check import before removing the old safe
Compare the number of entries and selected non-secret fields. Check some valid logins and access to the account of the new manager from the second trusted device. Search for missing attachments and login methods.
Do not remove the old safe immediately after the “import completed” message. Make sure that important items are actually available and that the new manager has a ready recovery method. Avoid later adding passwords parallel to both safes, because they will quickly create incompatible copies.
Remove unnecessary open export
After verification, remove the temporary file according to device rules. Check the basket, download folder and possible copies in sync. Removing the file does not guarantee erasure of all of its historical copies or media sectors.
If the export went to an unauthorized person, treat the secrets contained in it as revealed and plan to change them. Just setting a new password for the main manager does not change the passwords stored in other services.