Skip to content

Import and export

Under Settings, Import, choose your old app’s export file. For Google Authenticator, tap Scan Google Authenticator’s code instead, or choose a screenshot of the code as the file.

Password managers: KeePass (KDBX 4), Bitwarden (JSON and CSV), 1Password (1PUX), LastPass, Dashlane, Enpass, NordPass, Keeper, Proton Pass, Apple Passwords, SafeInCloud, RoboForm, Chrome, Firefox, KeePassXC, and any other CSV by choosing which column is which.

Authenticators: Aegis, 2FAS, andOTP, FreeOTP+, Raivo, Ente Auth, and Google Authenticator’s migration QR code.

These importers were tested against sample files written by hand from each format’s published or observed layout, not against exports from every real app. Compare the count afterwards, and tell us if anything is missing.

Export writes .wmvault, KDBX, Bitwarden JSON, CSV or a printable HTML page. CSV and HTML are plain text, so delete them once you are done.

Each link below goes to that app’s own guide, which has pictures of every step. Menus move between versions, so if a step does not match what you see, follow the guide. Most exports are plain text: delete the file once WM Pass has read it.

  • 1Password, from the desktop app only. On a Mac, File, Export, then the account; on Windows and Linux, the ⋯ menu in the sidebar, then Export. Choose 1PUX, since CSV leaves custom fields out. 1Password’s guide
  • Apple Passwords. On a Mac, in the Passwords app, File, Export All Passwords to File. On an iPhone, Settings, Apps, Safari, Export, with only Passwords selected. Wi-Fi passwords and passwords shared in groups are not included. Mac guide, iPhone guide
  • Bitwarden. In the web vault, Tools, Export; in the app, Settings, Vault, Export vault. Choose .json, not .json (Encrypted). CSV leaves out cards, identities and passkeys. Bitwarden’s guide
  • Chrome and Google Password Manager. On a computer, ⋮, Passwords and autofill, Google Password Manager, Settings, Export passwords. On Android, Settings, Autofill and passwords, Google Password Manager, Settings, Export passwords & passkeys. Google’s guide
  • Dashlane, from the web app: Settings, Export data, Export to CSV. It gives a ZIP of several CSV files; choose the one named credentials. The DASH format is encrypted and cannot be read. Dashlane’s guide
  • Enpass, from the desktop app: File, Export, choose the vault, then .json. Enpass’s guide
  • Firefox. Menu, Passwords, then ⋯, Export Passwords. Mozilla’s guide
  • KeePass and KeePassXC need no export. Choose the .kdbx database itself, wherever you saved it, and enter its password. KeePassXC’s guide
  • Keeper, from the web vault or desktop app: Settings, Export, then JSON or CSV. A company account’s admin can turn export off. Keeper’s guide
  • LastPass, from the browser extension only: Account, Fix a problem yourself, Export vault items, Export data for use anywhere. It leaves out attachments and one-time code secrets. LastPass’s guide
  • NordPass, from the desktop app or web vault: Settings, Import and Export, Export. NordPass’s guide
  • Proton Pass, from the web app, browser extension or Windows app, not the phone app: Settings, Export. Choose CSV or the unencrypted ZIP, not the PGP-encrypted one. Proton’s guide
  • RoboForm, from the browser extension: ⋯, Settings, Account & Data, Export. RoboForm’s guide
  • SafeInCloud, from the desktop app only, as XML. Its guide names the formats but not the menu. SafeInCloud’s notes
  • Google Authenticator: Menu, Transfer codes, Export codes, choose the accounts, Next. A long list comes as several QR codes. In WM Pass, tap Scan Google Authenticator’s code and scan each one in turn, then import them together. A screenshot of each code works too, if your phone allows one there. Google’s guide
  • 2FAS: Settings, 2FAS Backup, Export. WM Pass reads the backup only without a password, so leave that blank. 2FAS’s guide
  • Ente Auth: Settings, Data, Export, then Plain text. Ente’s guide shows the encrypted export; the plain one sits beside it. Ente’s guide
  • Aegis: export from its settings with encryption turned off. Aegis has no export guide of its own. Aegis
  • andOTP: make a plain-text JSON backup from its backup menu. andOTP is no longer maintained and has no export guide. andOTP
  • FreeOTP+: export from its settings to a file. FreeOTP+
  • Raivo exports only a password-protected ZIP. Open it with the password and choose the JSON file inside. Raivo