Moving to vauly

vauly imports from 1Password, Bitwarden, LastPass, Dashlane, Keeper, NordPass, RoboForm, Proton Pass, KeePass, KeePassXC, Enpass, Apple Passwords, Chrome, Edge, Brave and Firefox, and from any CSV file with a password column. Your logins come over with their one-time codes, notes and folders. The export is read and encrypted in your browser, so its contents never reach the server in plain text.

How it works

1. In vauly, go to All items and choose Import. A new workspace also offers Import from… in Get started.
2. Pick the app you’re moving from. vauly shows how to export from it.
3. Export from that app, then drop the file into vauly. vauly works out the format from what’s inside the file, so it doesn’t matter what the file is called.
4. Check what comes over, and choose the vault it goes to. Items already in that vault are left out, so importing the same file twice does no harm.
5. Choose Import, then delete the export file and empty your trash. It holds your passwords in plain text.

Each app exports in its own way, so use the richest format it offers. The sections below say which one that is.

What comes over

In the other app	In vauly
Logins: username, password, website, one-time code (TOTP)	Logins
Secure notes	Notes
API credentials, and custom items that hold a key or token	API keys
SSH keys	SSH keys
Wi-Fi, servers, databases and email accounts	Logins, with the details in the notes
Folders, vaults, collections and groups	Tags, such as Work/Clients
Tags	Tags
Archived items	Items tagged Archived
More websites, custom fields, security questions	Lines in the notes
Earlier passwords (1Password, Bitwarden, KeePass)	Earlier passwords
Payment cards	Cards
Identities and addresses	Identities
Passport, licence and ID numbers on an identity	Hidden fields on the identity

Cards and identities come over from 1Password’s 1PUX, Bitwarden’s JSON, Proton Pass, Enpass, Keeper’s JSON and Dashlane’s ZIP. CSV exports leave out their details, so the review says to use one of those instead. vauly doesn’t store bank accounts, or passports and other documents as items of their own, so those stay behind. Files come over from 1Password’s 1PUX (Documents and the files attached to items), Bitwarden’s ZIP with attachments, and KeePass and KeePassXC (databases and XML exports alike), up to your vauly’s limit on files; the review names any that are too big. One import unpacks at most 256 MB from a ZIP, and files past that stay behind too. Other apps’ attachments stay behind, and so do passkeys (vauly’s browser extension makes new ones), Proton Pass email aliases and items in the trash. Before you import, the review lists everything that stays behind.

Favorites, sharing and permissions don’t come over either. Share vaults with your team in vauly once your items are in.

1Password

Use the 1PUX format. It keeps one-time codes, API credentials, SSH keys, tags, files and every vault. A Document comes over as a note with its file. 1Password’s CSV holds only logins and passwords.

1. Open the 1Password app on a Mac, Windows or Linux computer. You can’t export from 1Password.com or a phone.
2. On a Mac, choose File › Export and pick your account. On Windows or Linux, select ⋯ at the top of the sidebar, then Export, and pick your account.
3. Enter your account password.
4. Choose 1PUX as the format, select Export Data, and save the file.

Each item is tagged with the name of the vault it came from when the export has more than one vault. Business accounts can turn exporting off for their members; ask an administrator if you don’t see Export. 1Password’s help

Bitwarden

Use .json (Encrypted) with a file password. It keeps folders, custom fields, SSH keys and earlier passwords, and the file is never in plain text on your computer.

1. In the Bitwarden web app, go to Tools › Export vault. The browser extension has the same under Settings › Vault options › Export vault.
2. Under Export from, choose My vault. Export each organization separately to bring its collections along.
3. Choose .json (Encrypted) as the file format, then Password protected, and set a file password.
4. Select Export and confirm with your master password.
5. When you bring the file to vauly, enter the file password. vauly opens the file in your browser and doesn’t keep the password.

An Account restricted export is sealed with your Bitwarden account’s own key, so only Bitwarden can open it. The plain .json works too, and so does .zip (with attachments), which brings the attachments. Bitwarden names each item’s folder of files after the item, so when two items share a name, their files stay behind; the review counts them. Delete a plain export once it’s imported. Bitwarden’s help

LastPass

LastPass only exports a CSV file, from its browser extension.

1. Select the LastPass button in your browser’s toolbar and log in.
2. Go to Account › Fix a problem yourself › Export vault items.
3. Choose Export data for use anywhere, then Continue.
4. Enter your master password. LastPass saves a CSV file.

In Safari the CSV opens in a tab instead. Save the page with File › Save As, and import that file. LastPass leaves attachments and custom fields out of the export, and often the one-time codes too. Secure notes of the SSH key, server, database and Wi-Fi kinds come over as SSH keys and logins. LastPass’s help

Dashlane

1. Open the Dashlane web app and choose Settings from the Vault menu at the top left.
2. Choose Export data, then Export to CSV.
3. Unlock with your master password. Dashlane saves a ZIP file.

Import the ZIP as it is. The iPhone and Android apps save a folder of CSV files instead. From those, import credentials.csv for your logins and securenotes.csv for your notes. Dashlane’s help

Keeper

Use JSON. It keeps one-time codes, SSH keys, shared folders and each record’s type.

1. In the Keeper web vault or desktop app, open the account menu at the top right and choose Settings.
2. Choose Export.
3. Choose JSON, then Export.
4. Enter your master password and choose Export Now.

Keeper’s CSV works too. Your role must allow exporting. Keeper’s docs

NordPass

1. Open the NordPass desktop app or web vault. You can’t export from a phone.
2. Select the gear at the top left to open Settings.
3. Under Import and Export, select Export.
4. Enter your master password and save the CSV file.

NordPass’s help

RoboForm

1. Select the RoboForm button in your browser’s toolbar, then ⋯ › Settings.
2. Choose Account & Data, then Export.
3. Enter your master password and select Export. RoboForm saves a CSV file.

The CSV holds logins and safenotes, with their one-time codes. Identities and contacts stay behind, and so do bookmarks. RoboForm’s help

Proton Pass

Use the PGP-encrypted export.

1. Open Proton Pass on the web, in the browser extension or in the desktop app. You can’t export from a phone.
2. Open Settings and choose Export.
3. Choose PGP-encrypted and set a passphrase.
4. Select Export and save the file.
5. When you bring the file to vauly, enter the passphrase. vauly opens the file in your browser and doesn’t keep the passphrase.

The plain ZIP works too, and so does a .pgp file from an older export. Delete a plain export once it’s imported.

The export holds only the vaults you own. Each item is tagged with its vault and folder. Proton’s help

KeePass

Bring the .kdbx database itself; there’s nothing to export. It keeps groups, tags, custom fields, one-time codes, earlier passwords and attachments, which come as files.

1. Close the database in KeePass, so everything is saved.
2. Drop its .kdbx file into vauly.
3. Enter its password, and choose its key file if it has one.

vauly opens the database in your browser, in a worker that can’t connect anywhere, and the password never leaves it. It reads KDBX 3.1 and 4, with AES-KDF or Argon2, but not KDBX 2.x, from KeePass before 2.20: open such a database in a current KeePass or KeePassXC and save it first. A database whose key settings ask for more than 1 GiB of memory, 100 Argon2 passes, 16 lanes or 200 million AES-KDF rounds is turned away, with the setting to lower under Database Settings › Security.

A database that needs your Windows user account can’t be opened outside KeePass. For that one, choose File › Export › KeePass XML (2.x) and bring that file instead; it keeps the same things. Entries in the Recycle Bin stay behind either way, and so do attachments on an entry’s earlier versions. KeePass CSV (1.x) works too, but it has only titles, usernames, passwords, websites and notes. KeePass’s help

KeePassXC

Bring the .kdbx database itself, as for KeePass: close it in KeePassXC, drop the file into vauly, and enter its password and key file. It keeps groups, tags, custom fields, one-time codes, earlier passwords and attachments.

A database that needs a YubiKey (challenge-response) can’t be opened outside KeePassXC. For that one, choose Database › Export › XML File… and bring that file instead. KeePassXC’s CSV works too, with one-time codes but without tags and custom fields. KeePassXC’s user guide

Enpass

1. Open Enpass on your computer.
2. Choose File › Export. On Windows, the File menu is behind ☰.
3. Choose the vault and .json as the format.
4. Choose where to save it, then Export.

Enpass’s tags and folders become tags in vauly. Items with a password come over as logins, notes as notes. Enpass’s help

Apple Passwords

On a Mac with macOS Sequoia or later:

1. Open the Passwords app.
2. Choose File › Export All Passwords to File, then Export Passwords.
3. Save the CSV file.

On an iPhone or iPad, go to Settings › Apps › Safari, tap Export under History and Website Data, choose only Passwords and save to Downloads. In Safari 18 on a Mac, choose File › Export Browsing Data to File and select Passwords. Both save a ZIP file, which vauly reads as it is.

On older Macs, use Safari: File › Export › Passwords. Wi-Fi passwords, passkeys and passwords shared with you in a group aren’t exported. Apple’s help

Chrome

1. In Chrome, go to chrome://password-manager/settings.
2. Next to Export passwords, select Download file.
3. Confirm with your computer’s password if asked, and save the CSV file.

Google’s help

Edge

1. In Edge, select ⋯ › Passwords.
2. Select ⋯, then Export passwords.
3. Select Export, confirm with your computer’s password, and save the CSV file.

You can’t export passwords from Edge on a phone. Microsoft’s help

Brave

1. In Brave, go to brave://password-manager/settings.
2. Next to Export passwords, select Download file.
3. Confirm with your computer’s password if asked, and save the CSV file.

Firefox

1. In Firefox, open the ≡ menu and choose Passwords.
2. Select ⋯ at the top right, then Export Passwords…
3. Select Continue with export, confirm with your computer’s password or your Primary Password, and save the file.

Firefox’s CSV has no notes or one-time codes. Mozilla’s help

Another app

Most password managers can export a CSV file. vauly imports one whose first row names the columns, as long as one of them is called password or notes. It also reads these columns:

Field	Column names
Name	name, title, item, account
Username	username, user, login, email
Website	url, uri, website, site
One-time code	totp, otpauth, otp (an otpauth:// link or the setup key)
Notes	notes, note, comments, extra
Folder	folder, group, category
Tags	tags, separated by commas or semicolons

A vauly backup (Settings › Backup › Download a backup) imports too, and keeps each item’s kind and tags. For a backup protected with a password, vauly asks for the password you chose when you downloaded it. A backup ZIP brings each item’s files back too, within your vauly’s limits on files. Bitwarden imports a protected backup as .json (Encrypted), without its files.

Keep it safe

• Export on a computer you trust, and import right away.
• Delete the export file as soon as the import is done, and empty the trash. It holds every password in plain text.
• Check a few items in vauly, then delete or close your account with the old app once you’ve moved for good.