Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The safe migration sequence is check compatibility, export, protect the file, import, verify, then clean up. Chrome and Edge normally export a CSV file, as does Firefox. Because that CSV can contain every password in your browser, keep it local and private, and do not delete browser entries until the new vault has been checked.
What you need before starting
Use a desktop browser if possible. Browser menus and export controls differ on phones and can change with updates. Have the password manager installed or open, and read its current import instructions before creating an export. The destination may accept a browser-specific import, a CSV file, or both.
| Destination or route | What the documented workflow supports | Important limitation |
|---|---|---|
| Bitwarden | CSV import for Chrome and Edge; its desktop app also documents direct import from Chromium browsers. | Importing the same file again can create duplicate entries because duplicate checking is not performed automatically. |
| 1Password | Browser-specific migration instructions for Chrome and Firefox, plus CSV import guidance. | Browser menus and labels can vary by version. |
| Google Password Manager | CSV password imports. | Google’s current help documentation states a maximum of 3,000 passwords per import and 10,000 passwords stored in a Google Account; these limits can change. |
If your chosen manager is not listed, look for its official import page and confirm the accepted browser and file format. Do not export first and hope the file will be usable: formats differ, and some managers preserve fields differently.
Export passwords from Chrome or Edge
Chrome on desktop
- Open Chrome’s password settings by entering
chrome://password-manager/settingsin the address bar. - Find the export-passwords control. Chrome may place it behind a three-dot or similar menu.
- Choose the export option and approve the device-authentication prompt if Chrome requests your operating-system password, PIN, fingerprint, or another sign-in method.
- Save the CSV to a local folder that only you can access. Do not save it to a shared computer, a public location, or a synchronization folder that will copy it to other devices.
1Password’s Chrome migration instructions also route users through Google Password Manager settings to download a CSV. Exact labels can differ after a browser update, but the control is in the saved-password settings rather than in the normal download menu.
#1 Best Overall
- ✅ PROTECT ONLINE ACCOUNTS – A password manager, two-factor security key, and secure communication token in one, OnlyKey can keep your accounts safe even if your computer or a website is compromised. OnlyKey is open source, verified, and trustworthy.
- ✅ UNIVERSALLY SUPPORTED – Works with all websites including Twitter, Facebook, GitHub, and Google. Onlykey supports multiple methods of two-factor authentication including FIDO2 / U2F, Yubico OTP, TOTP, Challenge-response.
- ✅ PORTABLE PROTECTION – Extremely durable, waterproof, and tamper resistant design allows you to take your OnlyKey with you everywhere.
- ✅ PIN PROTECTION – Locking your device means that if this device is stolen, data remains secure, after 10 failed attempts to unlock all data is securely erased.
- ✅ EASY LOG IN – No need to remember multiple passwords because by plugging OnlyKey to your computer, it automatically inputs your username and password. It works with Windows, Mac OS, Linux, or Chromebook, just press a button to login securely!
Microsoft Edge on desktop
- Enter
edge://wallet/passwordsin the address bar. - Open the menu associated with saved passwords and choose the export-passwords command. Edge may hide the command behind a menu button.
- Complete the device-authentication prompt if one appears.
- Save the CSV locally in a protected location and note where you saved it so you can remove it after the import.
Edge and Chrome use Chromium-based password stores, but the destination manager still needs to support the specific import route. A direct Chromium import in a desktop app can be preferable when available because it avoids handling a separate CSV; use that option only inside the manager’s trusted desktop application.
Export passwords from Firefox
- Open Firefox’s saved-logins page by entering
about:loginsin the address bar. - Open the page menu and select the password-export option.
- Confirm the warning and any operating-system authentication request.
- Save the CSV in a private local folder.
Mozilla documents Firefox’s export as CSV and gives this warning: “Your passwords in the exported file will not be encrypted and will be in a readable form to anyone who can view this file.” Firefox-based browsers may put the command somewhere else, so follow that browser’s current instructions if about:logins does not match.
Protect the exported CSV
Assume the file contains every login saved in the browser. A CSV is plain text, not a password-protected vault.
- Keep it local: do not email it, upload it to a website, attach it to a ticket, or send it through chat.
- Avoid automatic copies: temporarily pause backup software if it would copy the unencrypted file. 1Password specifically advises turning off backup software during export so the CSV is not placed in a backup set.
- Use a controlled folder: avoid shared computers, network drives, removable media that other people use, and sync folders that replicate to other devices.
- Limit exposure time: do not leave the file in Downloads or on the desktop after the import has been confirmed.
- Do not edit casually: changing delimiters, quotation marks, headers, or line breaks can make fields import incorrectly. If you must correct a row, retain a secure original until verification is complete.
On a computer used by other people, sign out of the operating-system account after the migration and clear the file from the recycle bin or trash. Whether deleted data can be recovered depends on the operating system and storage device, so the safest practice is to avoid creating extra copies in the first place.
Import the file or use a direct browser route
Bitwarden
Bitwarden documents two relevant approaches. In its desktop app, a direct Chromium-browser import can read the browser’s saved credentials without requiring you to manage a separate export file. If that route is unavailable or you are importing from Firefox, use the CSV route:
- Open Bitwarden and go to its import function.
- Select the source format that matches the file, such as the documented Chrome or Edge CSV format.
- Choose the CSV you saved locally and start the import.
- Wait for the operation to finish before closing the app.
Do not run the same import repeatedly while troubleshooting. Bitwarden warns that it does not check for duplicates, so each repeat can create another copy of the entries. If an import fails, fix the cause or remove the partial entries before trying again.
1Password
1Password publishes browser-specific instructions for Chrome and Firefox and also supports CSV import. Follow the path for your source browser rather than selecting a generic format at random. When prompted to choose a file, select the local CSV and let the import finish before moving or deleting it.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Afterward, use 1Password’s browser extension or app to test autofill on a few sites. The extension must be installed and signed in on each browser profile where you expect autofill to work.
Rank #2
- USB-C or tap via NFC for easy authentication on any compatible device. No drivers needed; optional Kensington software available for advanced management features.
- Works across Windows, macOS, iOS, Android, ChromeOS, and supports Passkeys and Apple ID.
- Slim, keychain-ready form for easy carry and on-the-go authentication
- IP68-rated for dependable performance
- FIDO CTAP 2.1 for enhanced security features (e.g. resident credentials, Passkey support) and backwards compatibility with CTAP 2. FIDO2 L2 certified security for phishing resistant protection against identity theft and unauthorized access.
Google Password Manager
Google’s current help page says password imports accept CSV only. Open the password-import control in the Google Password Manager interface, choose the CSV, and wait for the import report or completion message.
Google states that one import can contain up to 3,000 passwords and that a Google Account can store up to 10,000 passwords. These are operational limits from Google’s help documentation accessed October 13, 2026, not a guarantee that every future interface will use the same limits. If your file exceeds the per-import limit, split it into smaller files only if Google’s current instructions tell you how to do so safely; keep the original protected while checking each batch.
Google also warns that some app and site names may not migrate into the field you expect. A login can therefore appear to be missing even when part of it was imported. Search by the service name, username, and website address before concluding that the record was lost.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →Verify the new vault before deleting anything
There is no universal vendor-guaranteed completeness check. Perform a deliberate sample review, with extra attention to accounts you cannot afford to lose.
- Pick critical accounts: include your primary email, financial services, work or school accounts, cloud storage, government services, and any account protected by two-factor authentication.
- Check the username: confirm the imported email address or user ID is present and not truncated.
- Check the website field: make sure the address points to the legitimate sign-in domain. An unexpected app or site field may require editing.
- Check the password: reveal it only inside the trusted manager and compare it with the source entry. Look for missing characters, altered punctuation, or whitespace.
- Test autofill: open the real sign-in page in a private or secondary browser window and confirm that the manager offers the correct item. Do not test by pasting credentials into an untrusted page.
- Search for duplicates: sort or search the vault for repeated usernames and domains. Keep the complete record and remove only confirmed duplicates after you know which entry is correct.
- Recover exceptions from the browser: if a password is missing or malformed, leave the browser copy intact while you correct the destination record.
For a large vault, review accounts in batches and record which categories you have checked. A small sample can reveal field-mapping problems, but it cannot prove that every record imported correctly.
Finish the transition without locking yourself out
Delete the CSV
After the destination vault is verified, delete the exported CSV from its folder and empty the recycle bin or trash. Also check whether your backup or sync service made a copy while the file existed and remove that copy through the service’s own retention controls.
Install and test the new autofill tool
Install the password manager’s browser extension or enable its built-in autofill feature. Sign in to the extension, unlock it, and test a few logins in each browser profile you use. Keep the old browser manager available during this test.
Disable or remove the browser store last
Once the new manager fills the accounts you checked, turn off the browser’s password-saving and autofill options if you want one source of truth. 1Password notes that a browser can continue filling credentials even after its built-in manager is disabled, so disabling the setting is not the same as deleting stored entries.
Rank #3
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Delete browser-saved passwords only after you are certain the destination contains everything required. 1Password warns that deleting passwords from the source browser is permanent. If you are uncertain about an account, keep its browser entry until you have recovered and tested it in the new manager.
Common problems and fixes
The export button is missing
- Check that you are in the browser’s password-management settings, not the general privacy page.
- Open the local menu beside the saved-password heading; Edge may hide export there.
- Use the browser’s current help instructions if an update changed the label.
- Confirm that your operating-system account has permission to authenticate the export.
The manager rejects the CSV
- Return to the destination’s import screen and select the exact source format.
- Make sure the file is the browser’s password export, not a bookmarks, history, or autofill export.
- Do not rename columns or convert the file through a spreadsheet unless the manager explicitly requires that format.
- If a direct browser import is available, use it instead of repeatedly uploading a damaged file.
Entries imported into the wrong fields
Inspect the website, username, and password fields individually. Google documents that some app and site names may map unexpectedly. Edit the affected records in the destination and repeat the check on similar entries before deleting the source.
There are duplicates
Duplicates usually result from importing the same file more than once or from having multiple saved entries for one service. Bitwarden specifically warns that its import does not perform duplicate checking. Compare usernames, URLs, and passwords, retain the complete current record, and remove extras only after a successful sign-in test.
A password is missing
Search the destination by service name, domain, and username. Check whether the account was saved under an app name or an unexpected website field. If it is still absent, retrieve it from the browser while the source entry remains, add or correct it in the manager, and test autofill before cleanup.
Autofill still comes from the browser
Install and unlock the new manager’s extension, then disable the browser’s autofill setting. Some browsers can continue filling previously saved credentials even after password saving is turned off; remove source entries only after verification because deletion is permanent.
Choosing the safest migration route
| Situation | Prefer | Reason |
|---|---|---|
| You use Chrome or Edge and the desktop manager offers Chromium import. | Direct browser import | It can avoid creating a separate CSV file, reducing handling of plain-text credentials. |
| You use Firefox or the manager has no direct browser connector. | Protected CSV export and import | CSV is the documented interchange format, but it must be treated as unencrypted text. |
| You are importing into Google Password Manager. | CSV, in batches if necessary | Google documents CSV-only imports and the 3,000-password per-import limit. |
| You have a large or business-critical vault. | Staged import and manual verification | Field mapping and duplicate behavior can vary, and there is no universal completeness check. |
A final migration checklist
Use this order so a small mistake does not become a lockout:
- Write down the destination manager and the exact import format it accepts.
- Close unrelated applications and pause backup or sync tools that would copy an unencrypted export.
- Export once, save the CSV locally, and note its location.
- Import once using the matching browser format or the manager’s trusted direct-browser tool.
- Check critical accounts first, then review the rest in manageable batches.
- Correct field mapping, missing passwords, and duplicates while the browser copy remains available.
- Install and test the destination extension in every browser profile you actually use.
- Delete the CSV and any backup copies, then disable browser saving and autofill.
Pause instead of deleting anything if the import report is incomplete, the manager displays unexpected fields, or you cannot sign in to a critical account. Keeping the original browser entry temporarily is safer than trying to reconstruct a password later.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRemember that a direct import reduces handling of a plaintext file but does not remove the need to verify the destination. Conversely, a CSV route is workable for Firefox and unsupported direct connections, provided the file stays private and is destroyed promptly after confirmation.
Rank #4
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Frequently Asked Questions
How do I transfer passwords from Chrome to a password manager?
Check that the manager accepts Chrome’s format, open chrome://password-manager/settings, export a CSV locally, import it through the manager’s Chrome or CSV option, and verify important accounts before deleting anything. Bitwarden also documents a direct Chromium-browser import in its desktop app.
How do I export saved passwords from Firefox?
Open about:logins, use the page menu, and choose the password-export option. Firefox creates a CSV. Mozilla warns that the file is unencrypted and readable by anyone who can access it, so keep it local and delete it immediately after a successful import.
Can I import browser passwords into Bitwarden or 1Password?
Yes. Bitwarden documents Chrome and Edge CSV imports, a direct Chromium-browser route in its desktop app, and CSV use for other sources. 1Password publishes browser-specific Chrome and Firefox instructions as well as CSV import guidance.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Can Google Password Manager import a browser export?
Google’s current help page documents CSV-only password imports. It states a limit of 3,000 passwords per import and up to 10,000 passwords in a Google Account. Check the current interface because limits and labels can change.
Is it safe to email the exported CSV to myself?
No. Treat the CSV as a readable copy of every saved password. Do not email, upload, chat, or place it in an automatically synchronized or backed-up folder. Store it locally under your control and delete it after verification.
Why did importing the same file create duplicate passwords?
Some managers do not perform duplicate checking. Bitwarden specifically warns that repeating an import can create duplicates. Stop repeating the import, compare usernames and domains, keep the complete record, and remove confirmed extras only after testing sign-in.
When should I delete passwords from my old browser?
Only after the destination contains the required logins, website fields and passwords are correct, autofill works in your normal profiles, and the temporary CSV and its copies are gone. 1Password warns that deleting source-browser passwords is permanent.
Free tools Windows power users keep installed
One-click scans. No signup required.
The Bottom Line
Use the sequence check the format, export once, protect the file, import, verify critical logins, test autofill, then delete the CSV and old browser entries. A direct Chromium import can reduce file handling, while Firefox and unsupported routes generally require a carefully protected CSV.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
