Import and export

Move in from 12 password managers. Leave whenever you like.

We recognise your export by what is in it, show what will come across before anything is saved, and remind you to delete the file. When you leave, take everything in one sealed file.

Sources How it works Export

PPNP

Sources

Every source the importer reads today.

Each one is recognised from the file's contents, never its name.

Google Password Manager and Chrome.csvEdge and Brave export the same file.

Microsoft Edge.csvThe same file as Chrome.

Brave.csvThe same file as Chrome.

Apple Passwords and Safari.csvFrom the Passwords app on a Mac.

Firefox.csvFrom about:logins.

Bitwarden.json or .csvThe unencrypted export.

1Password.1pux or .csvFrom the 1Password app on a computer.

LastPass.csvCards and other special notes are left out.

Dashlanecredentials.csvThe logins file of its export.

Proton Pass.csv

NordPass.csv

Enpass.json or .csv

KeePassXC.csv

KeePass.csvKeePass CSV 1.x.

Any other app.csvYou match its columns to ours.

How it works

Two steps, and the file is never kept.

You1Choose your appWe open its export page and show its steps.
Source app2Export the fileUnencrypted. An encrypted export is refused by name.
Vault3PreviewCounts, duplicates and rows it cannot read. Never a secret.
You4ImportEach new item is created and checked by the vault's rules.
You5Delete the fileWe remind you, because it holds every password in clear.

The upload is read twice, for the preview and for the import, and never stored.

What comes across

What each row becomes.

Logins

Title, web addresses, username, password, authenticator key and notes. Android app addresses are left out, and said so on the row.

Secure notes

Title and body.

Not imported

Payment cards are never imported; add them yourself. Identities are named and skipped.

Limits

Up to 2,000 rows and 5 MB a file. Duplicates of your vault, or of an earlier row, are named before you import.

2,000 rows5 MB

Export

Leave whenever you like.

Export your personal vault as one file sealed with a passphrase you choose. Nobody else can open it, including us.

A fresh step-up first
A passphrase of at least 12 characters
One-time-code keys and cards only if you choose them and confirm
Never the trash, attached files or organization items

Key derivation

Argon2id with 64 MiB of memory, three passes, one lane.

Argon2id m=64 MiB t=3 p=1

Encryption

AES-256-GCM, with the file's header bound in as associated data.

AES-256-GCM

Recorded

Every export writes an audit row.

credential.vault.exported

In which planImport from every source, and export, in every plan.See plans →

See plans

Put every secret behind one tap.

Create your vault, link your phone, and bring everything in from where it lives today.

Create your vault See plans