Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesiTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
The safest way to move saved passwords is to prepare the new vault first, export the old passwords only when you are ready to import them, verify several logins, and delete every plaintext export before removing the old vault. Most browser migrations use a CSV file that can expose every password in readable text, so treat the file like a temporary master key.
This guide explains the setup and migration process for browser-saved passwords, Apple Passwords, Google Password Manager, and other password managers. Menu labels and supported features vary by browser, operating system, app version, and account plan; use the current help steps for your exact source and destination when a label differs.
What you need before moving anything
Have the destination manager selected and working before you export. You should be able to sign in on every computer and phone where you need passwords, and you should know how the destination handles autofill, passkeys, shared items, notes, payment cards, and addresses.
Choose the destination by compatibility and transfer scope
No single manager is the universal best choice for every migration. Compare the source and destination on the points that affect whether the move will be complete and usable:
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
| Check | Why it matters |
|---|---|
| Device and operating-system support | The manager must offer an app or usable browser extension on each computer and phone you rely on. |
| Source formats | Some destinations accept a browser CSV, while others support imports from another manager or a direct credential transfer. |
| Data types | A route may move passwords but omit passkeys, cards, addresses, secure notes, Wi-Fi credentials, or shared entries. |
| Duplicate handling | Some importers add every row again instead of merging it with an existing item. |
| Account protection | Check available two-step methods, recovery options, and whether a hardware security key is supported on your devices. |
| Autofill behavior | Two active password managers can produce competing prompts or fill the wrong account. |
Make an inventory of what is currently saved
Before exporting, note which browser profiles, phones, computers, and other managers contain credentials. Include accounts stored in a work profile, an old laptop, a second browser, or a family vault. Decide whether those records belong in one personal vault, a shared vault, or separate work and personal accounts.
Also list information that a normal password export may not contain. Passkeys, payment cards, addresses, identity documents, secure notes, recovery codes, and shared items often require separate migration. Treat the export as a password move, not automatically as a complete copy of your digital identity.
Set up and secure the new password manager
Install the apps and browser extension
- Install the destination manager’s official desktop or mobile app on the devices you use.
- Install its browser extension for each browser profile that should offer autofill.
- Sign in and confirm that the vault opens on every required device before importing anything.
- Leave the old manager enabled for now. You need it available for comparison and recovery during the check.
Keep the extension and app versions current. A direct transfer feature may depend on the operating system version, the desktop installation source, or whether both applications are installed locally.
Create a strong account password
Use a long, unique password for the manager account. Do not reuse a password from email, banking, or another site. The manager account is the gateway to the vault, so a password that was used elsewhere is a serious weakness even if the vault itself uses strong encryption.
Store the new account password in a safe recovery method that does not depend on the same device being unlocked. Follow the provider’s recovery instructions before you begin the import; some encrypted vaults cannot be restored if the account password and recovery method are both lost.
Turn on two-step login for the vault
Enable two-step login in the manager’s account-security settings before importing. Bitwarden’s documentation specifically recommends protecting the vault this way and lists authenticator apps and FIDO2/WebAuthn security keys among its supported methods. Other providers offer different methods or restrict some options to particular plans.
Rank #2
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
A hardware security key, including a FIDO2 key, is optional rather than required for migration. Confirm that the key’s connector or wireless method works with your computers and phones, and register a backup sign-in method before relying on it.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Vault two-step login and website two-factor authentication are separate. The first protects access to the manager; the second protects an individual website. After migration, add two-factor authentication to important websites independently and store their recovery codes in the new vault.
Export saved passwords without exposing them unnecessarily
CSV password exports are usually unencrypted plaintext. Anyone who can read the file can read the passwords, and some backup or synchronization tools may copy it automatically. Export only when the destination is ready, and keep the file on a private local location for the shortest possible time.
General export procedure
- Open the source browser or password manager and authenticate if it asks for your device or account password.
- Open its password settings and choose the export or download option. The exact label changes between versions.
- Confirm that the destination accepts the offered format. If it requires CSV, use the source’s supported CSV export rather than manually copying rows.
- Save the file to a private folder on the device, not an email attachment, shared drive, cloud-synchronized folder, or removable drive that other people use.
- Do not open or edit the file in a spreadsheet unless the destination specifically requires it. Spreadsheet software can change URLs, leading zeros, or special characters.
- Import it immediately, then delete it as soon as you finish verification. Empty the recycle bin or trash and remove any copies created by file-sync or backup software.
Chrome or Edge exports
Chrome and Edge expose saved-password export from their password-management settings. The current screens generally offer a download-to-CSV action after device authentication, but labels and placement can change. Follow the browser’s current password-export instructions and select the CSV format required by the destination.
For a Chrome-to-1Password transfer, the documented workflow saves Chrome passwords as CSV and imports that file through the 1Password app or its website. The 1Password guide advises temporarily pausing backup software before export so an unencrypted copy is not captured, then restoring backups after the export has been deleted.
Apple Passwords exports
Apple documents exporting website and account passwords to CSV and warns that the file is not encrypted. Its export flow does not include Wi-Fi passwords, passwords shared with a group unless you created the group, or Sign in with Apple account passwords. Plan to recreate or transfer those categories separately where the destination supports them.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Import the file into the new vault
Use the destination’s import tool
- Open the destination’s import page in its app, web interface, extension, or command-line tool, depending on what it supports.
- Select the source format that matches the file, such as Chrome CSV, Edge CSV, Apple CSV, or another manager’s format.
- Choose the correct personal or shared vault. A successful import into the wrong vault can look like missing data later.
- Select the file and start the import. Do not close the app until it reports completion or an error.
- Record any warning about skipped rows, unsupported fields, or duplicates. Treat a warning as a reason to inspect the result, not as proof that the transfer is complete.
- Keep the source manager available until you have tested the new entries.
Bitwarden documents imports through its web app, browser extension, desktop app, or command-line interface. It says imported data is encrypted locally before being sent to its server. Direct browser import is also available for selected desktop configurations, but operating-system and installation-source restrictions apply. An import does not deduplicate records, so repeating the same import can create duplicate vault items.
Chrome to 1Password
1Password’s Chrome importer creates Login items from the passwords in the CSV. It does not import Chrome credit cards, addresses, passkeys, or other non-password information through that workflow. After importing, install and sign in to the 1Password browser extension. Do not turn off Chrome’s built-in manager or delete Chrome passwords until you have confirmed the new entries and tested logins.
Importing into Google Password Manager
Google’s current support documentation requires a CSV and recommends these column headings: url, username, and password. Google permits up to 3,000 passwords per import and says one Google Account can store up to 10,000 passwords. Those limits are Google-specific product limits, not a general limit for password managers.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteIf an app or site name appears in an unexpected field, inspect the imported record rather than assuming the password is wrong. Google also warns that anyone with access to the device could open the CSV, so delete it after the import and verification are complete.
Importing into Apple Passwords on iPhone
Apple’s iPhone import instructions use Settings > Apps > Safari > Import. The importer accepts a CSV or ZIP file. Apple cautions that passwords may not be encrypted while they are inside the file, so delete the imported file after the records are checked.
Apple’s documented exclusions still apply when moving data into Apple Passwords: Wi-Fi passwords, certain group-shared passwords, and Sign in with Apple account passwords are not included in the website-and-account CSV export. Add any missing credentials through the supported method for that account.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Moving between other managers
Some destinations list dedicated importers for Chrome, Firefox, Edge, Brave, Safari, Bitwarden, Dashlane, KeePass, Keeper, LastPass, and other applications. A destination may also support a direct Credential Exchange transfer on particular operating-system versions when both applications implement the standard. Treat direct transfer as source-and-destination-specific; it is not a universal replacement for CSV export, and passkey coverage can differ from password coverage.
Check the new vault before deleting the old one
An import that reports success can still be partial or malformed. Verification is the point at which you discover missing records while the original data is still available.
Use a representative test set
- Search for several high-value accounts, such as email, banking, work, shopping, and your primary cloud account.
- Open each item and confirm the website address, username, password, and any required notes.
- Use a private browser window or sign out, then test autofill and a real sign-in on each device you will use.
- Check records with unusual characters, multiple usernames, subdomains, ports, or long passwords. These are more likely to reveal field-mapping problems.
- Search for duplicates created by an earlier import or by records that existed in both the source and destination.
- Compare the number of source records with the destination’s count, allowing for items that the destination intentionally excludes.
- Look for passkeys, cards, addresses, secure notes, shared items, and recovery codes separately. Do not assume they moved with passwords.
Fix field and duplicate problems before cleanup
Google notes that some app or site names may land in unexpected fields. Other importers can similarly map a title, URL, username, or note differently than you expect. Edit a small number of affected records manually and use the destination’s documented format for any re-import.
If duplicate entries exist, compare them before deleting. One may contain a newer password, a second username, or a note that the other lacks. Keep the complete record, remove only confirmed duplicates, and avoid running the same full import again.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Switch autofill and remove old copies carefully
Make the new manager the active autofill provider
- Enable the new extension in each browser profile that should fill passwords.
- Set the new manager as the preferred autofill service in the operating system or browser, where that setting is available.
- Turn off the old browser manager’s autofill prompts only after the new extension fills the test accounts correctly.
- Repeat the test on your phone. Mobile autofill settings are separate from desktop browser settings.
Keep the old vault or browser data until all important accounts work. 1Password’s Chrome guidance warns that deleting Chrome passwords is permanent, so do not use deletion as a troubleshooting step.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Delete the export and other temporary copies
After verification, delete the CSV or ZIP from the original folder, downloads folder, desktop, cloud-sync locations, backup staging areas, and recycle bin or trash. If you paused backups for the export, turn them back on after the file and its recoverable copies are gone.
Best Value
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Universal Connectivity (USB-A ): Features a built-in USB-A connector—simply unfold the key and plug it into your compatible PC or laptop for seamless authentication on the go.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Ultra-Durable & Portable: Featuring a rotating metal cover, this key is water, crush, and tamper-resistant. It fits easily on a keychain and requires no batteries or network connectivity.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID, and NFC is NOT supported.
Only then remove the old browser passwords or close the old manager, and only if that matches your intended setup. Keep a separate, secure recovery plan for accounts that were excluded from the export.
Troubleshoot common migration failures
The destination rejects the file
- Confirm that you selected the matching source format rather than a generic or different manager format.
- Open the file only long enough to check that it contains the expected header row and records; avoid saving it through software that changes delimiters or encoding.
- Re-export from the source if the file is empty, truncated, or shows an export warning.
- Check whether the destination requires the desktop app, web app, extension, or a particular operating system for that importer.
Only some passwords appear
Check the destination’s documented exclusions first. A Chrome-to-1Password import covers passwords but not cards, addresses, passkeys, or other information. Apple excludes specified Wi-Fi, group-shared, and Sign in with Apple credentials from its CSV export. Google imports are also subject to its 3,000-password-per-import limit; split a larger source into supported batches only if the destination provides a safe way to do so.
The same login appears several times
Repeated imports commonly create duplicates because the importer does not compare every record with existing vault items. Stop importing, compare the duplicate records, preserve the newest complete entry, and remove confirmed copies. Keep a temporary note of any record whose password differs until a successful login confirms which value is current.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Autofill uses the wrong account or does not appear
Disable the old extension’s autofill, confirm that the new extension is enabled for the current browser profile, and check the operating system’s autofill provider. Verify that the saved URL matches the site’s actual sign-in domain. A login stored under a different subdomain may not trigger automatically even though the password is present.
A passkey or shared item is missing
Passkeys and shared records may use a different synchronization system from ordinary passwords. Check the source and destination documentation for that credential type, then transfer or recreate it through the supported account or sharing workflow. Do not delete the source item until the new sign-in method has been tested.
Keep the vault secure after migration
- Use the manager’s two-step login and maintain a backup method or recovery plan.
- Use unique passwords for the manager and for important websites; change reused or exposed passwords after the migration.
- Review security alerts and update old passwords, starting with email, financial, work, and cloud accounts.
- Store recovery codes in the vault only after confirming that you can still access them during account recovery.
- Review browser extensions and mobile autofill permissions so only the manager you trust can fill credentials.
- Periodically check for duplicate, outdated, or shared records and remove access that is no longer needed.
Setting up the manager is complete when the destination vault contains the records you actually need, autofill works on each device, the excluded data has a separate plan, and every plaintext export has been deleted.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
