Yes, you can migrate safely. Use a direct importer when your new manager offers one; otherwise export a CSV, import it, verify everything, then delete the file. Don’t panic about doing this “perfectly.” Here’s your fast-start checklist:
- Method: Direct import beats CSV export whenever it’s available.
- Security: Exported files are plaintext. Never leave them in cloud storage. Delete them the moment you confirm the import worked.
- Setup: Create your new account first, turn on 2FA immediately, and keep the old manager active for a short overlap window.
⏱️ Expect roughly 30 minutes for the actual export and import, plus extra time for verification and re-enrolling two-factor codes.
Key Takeaways
A secure password manager migration depends on preferring direct import, verifying every entry before deleting the old vault, and never leaving an exported file in plaintext.
| Point | Details |
|---|---|
| Choose the safest export method | Use direct import when offered; fall back to CSV only when necessary. |
| Delete exports immediately | Plaintext CSV files must be removed from local storage and cloud backups right after import. |
| Verify before you commit | Match entry counts and manually test 5 to 10 priority accounts before deleting anything. |
| Handle 2FA and passkeys manually | Re-enroll TOTP codes and recreate passkeys since most won’t transfer automatically. |
| Compare destination managers first | Techstacktoday’s hands-on Best Password Managers rankings help you pick a vault worth migrating into. |
Table of Contents
- How to Prepare Before You Migrate a Password Manager
- How Do You Export Passwords From Your Old Manager?
- How Do You Import Passwords Into a New Manager?
- How Do You Verify a Password Manager Migration Worked?
- What Happens to Two-Factor Codes and Passkeys During Migration?
- What About Shared Vaults, Notes, and File Attachments?
- How Do You Securely Delete Files After Migrating?
- Is There a Safer Way to Migrate Without Exporting a File?
- What Do Most People Get Wrong When Switching Password Managers?
- Ready to Pick Your Next Password Manager?
- Sources
How to Prepare Before You Migrate a Password Manager
Do this prep work before you touch the export button.
- Install the new manager everywhere. Get it on your phone, laptop, and browser extension now, so you’re ready to test the moment the import finishes.
- Count what you’re moving. Open your current vault and note the total entry count. Pick 5 to 10 accounts you absolutely cannot afford to lose access to (bank, email, work login).
- Clean house first. Delete dead accounts and flag weak or reused passwords. Migration is the easiest moment to fix bad habits, and it’s a good time to review our guide to why password reuse is risky.
- Pause automation. Turn off cloud sync temporarily and close any app that might auto-upload files to Dropbox, Google Drive, or iCloud during the export.
Pro Tip: Screenshot your vault’s entry count before you start. It sounds trivial, but it’s the fastest way to catch missing logins later.
How Do You Export Passwords From Your Old Manager?
Every manager hides the export option somewhere slightly different, usually under Settings, Tools, or Advanced. Chrome, Edge, and most standalone managers export to CSV; some support JSON or a vendor-specific format instead. Before you trust the file, open it and confirm it has columns for url, username, and password at minimum.
Google’s own support documentation walks through the exact export and import steps for Chrome Password Manager, including the CSV column format the browser expects.
Save the file to a local folder, not a cloud-synced one. Import it right away. Then delete it and empty your Recycle Bin or Trash. Exported CSVs are plaintext, meaning anyone who opens that file can read every password inside it in seconds.
If your old manager blocks exports entirely, don’t force it. Use the two-at-a-time method covered below, and keep a manual count of accounts as you go.
How Do You Import Passwords Into a New Manager?
Getting credentials into your new vault correctly matters more than doing it fast.
- Check for a direct importer first. Many managers, including Bitwarden, support direct import from specific competitors or via Credential Exchange Protocols, which skips the plaintext file step entirely. Bitwarden alone supports CSV, KDBX, JSON, and several other filetypes.
- If you’re stuck with CSV, map fields carefully. Upload the file, preview the mapping, and confirm which vault or folder it’s landing in before you confirm the import.
- Scan for duplicates. A messy export sometimes creates two entries for the same site. Clean these up now rather than later.
- Match usernames to URLs. Spot-check a handful of entries to confirm the username field lines up with the correct site, especially for accounts with multiple logins.
- Mind the platform order. Some mobile apps only accept imports that were already processed through the desktop or web version first, so start there if you’re vault-hopping between phone and laptop.
How Do You Verify a Password Manager Migration Worked?
Don’t close the old app until you’ve confirmed the new one actually works.
- Compare the numbers. If your old vault had 340 entries and the new one shows 298, something didn’t transfer. Go find it before you delete anything.
- Manually log into your 5 to 10 priority accounts using the new manager’s autofill. Banking, email, and cloud storage first.
- Test autofill on every surface you use: browser extension, mobile app, and desktop client. A password that imports fine but won’t autofill on your phone still needs fixing.
- Keep both managers running. Community migration writeups consistently point to 1 to 4 weeks as a safe overlap window, longer if your vault is large or complicated.
| What to Check | Why It Matters |
|---|---|
| Entry count match | Confirms nothing silently dropped during import |
| Priority account logins | Verifies autofill actually works where you need it most |
| Cross-device autofill | Catches gaps between desktop, browser, and mobile |
| Overlap period | Gives you a safety net if something surfaces later |
What Happens to Two-Factor Codes and Passkeys During Migration?
Here’s the part people underestimate. Most CSV exports don’t carry your TOTP (time-based one-time password) codes at all. You’ll need to re-scan the QR code for each account and re-enroll it in the new manager, one at a time.
Passkeys are often tied to the platform that created them, so a straight transfer usually isn’t possible. Where that’s the case, delete the old passkey and generate a new one inside your new manager instead.
- Start with email. It’s the master key to resetting everything else.
- Then move to banking and financial accounts.
- Then cloud storage and employer systems.
- Batch this work in one sitting. Re-enrolling ten accounts back to back is faster than spreading it across a week.
Pro Tip: Keep a plain paper list of which accounts you’ve re-enrolled for 2FA. It’s the single easiest step to lose track of mid-migration.
What About Shared Vaults, Notes, and File Attachments?
Shared permissions almost never carry over automatically. Set up your shared vaults fresh in the new manager and re-share each item with family or teammates. Download any file attachments (scanned IDs, license photos, secure notes) before you touch the old vault, then re-upload them into the new manager’s attachment storage.
- Talk to family or coworkers before deleting anything shared, so no one gets locked out mid-transition. Our guide to sharing passwords safely with family covers the setup.
- Write down which shared items you’ve recreated. You’ll thank yourself in three weeks.
How Do You Securely Delete Files After Migrating?
Once verification is done, close the loop.
- Delete the exported file, then empty Trash on macOS or Recycle Bin on Windows. Don’t stop at drag-to-trash; that file lingers until the bin is emptied.
- Check cloud backups. If Dropbox or iCloud auto-synced that folder before you disabled sync, delete the file there too.
- Revoke active sessions in your old manager and sign it out of every device.
- Wait out your overlap period, then delete the old account and cancel its subscription.
Is There a Safer Way to Migrate Without Exporting a File?
If creating a plaintext file makes you nervous, especially for a highly sensitive vault, use the “two-at-a-time” method instead. Keep both managers open, log into each site manually, and let the new manager capture the credentials as you go.
- No export file ever exists, so there’s nothing to secure or delete.
- It’s slower. Expect to work through accounts one by one rather than in a single batch.
- Best suited for smaller vaults or when you’re only worried about a handful of sensitive accounts.
A no-export capture approach, where you let the new manager save logins as you sign into each site with both apps running, is a legitimate alternative for anyone who’d rather not create a plaintext export file at all.
What Do Most People Get Wrong When Switching Password Managers?
The mistake TechStackTeam sees most often isn’t the migration itself. It’s skipping verification because the import “looked fine,” and forgetting the CSV file sitting in Downloads for weeks afterward. Two-factor re-enrollment gets underestimated too. People budget 30 minutes and it turns into an evening.
Our minimal checklist: count entries, spot-check ten accounts, test autofill twice, delete the file once. If your vault includes business credentials or shared team access, consider a deeper audit before you finalize anything.
— TechStackTeam
Ready to Pick Your Next Password Manager?
Choosing where to migrate matters just as much as how. Techstacktoday runs hands-on testing on password managers rather than ranking by who pays the most, so what you read reflects how each vault actually performs with real imports, real autofill tests, and real 2FA setups.
If you’re still deciding on a destination, our Best Password Managers in 2026 rankings break down security features, pricing, and import support side by side. Curious how encryption actually protects your vault once you’re in? Our explainer on how password managers store credentials securely covers that in plain language. Pick your new manager from the rankings, confirm it supports direct import or CSV, and start your migration checklist today.
Sources
- Looking for a New Password Manager After the LastPass Data Breach? Here’s the Best Way to Switch | PCMag
- Importing to Bitwarden is easy! | Bitwarden
- How to Migrate Between Password Managers Without Losing Data | DapriPro®
- Import or export passwords and passkeys with Google Password Manager