ThisCalculator

Everyday

Move Passwords from Cloud Manager to KeePassXC

Updated · Standard formula, shown below

Move Passwords from Cloud Manager to KeePassXC

This guide walks you through moving your saved passwords from a cloud-based password manager (like LastPass, 1Password, or Bitwarden) into KeePassXC, a free and open-source offline manager. You’ll export your data from the cloud service, import it into KeePassXC, and then secure your new local database. Before starting, make sure you have your master password for the cloud manager and can access its web vault or desktop app.

What You’ll Need

  • Access to your current cloud password manager (web vault or desktop app)
  • KeePassXC installed on your computer (download from the official site)
  • Your master password for the cloud manager
  • A strong new master password for KeePassXC (or a key file if you prefer)

Step-by-Step

  1. Create a new KeePassXC database. Open KeePassXC and click Create a new database. Choose a location and filename (e.g., MyPasswords.kdbx). Set a strong master password—this is the only password you’ll need to remember. Optionally add a key file for extra security, but keep it separate from the database file.
  2. Export from your cloud manager. Log into your cloud manager’s web vault or desktop app. Look for an export option—usually under Settings or Tools. Choose CSV format (most common). Some services may require you to re-enter your master password to export. Save the CSV file to a secure location on your computer.
  3. Check the CSV file. Open the exported CSV in a text editor or spreadsheet app. Verify it has columns like name, url, username, and password. If there are extra columns (e.g., notes, TOTP), that’s fine—KeePassXC will map them. Remove any rows that are not actual entries (like headers or empty lines) if they cause issues.
  4. Import into KeePassXC. In KeePassXC, go to Database → Import → CSV file. Select your CSV file. A dialog will appear asking you to map columns. Match each field: Title to the name column, URL to the url column, Username to the username column, Password to the password column. Leave others as ignore unless you want them imported. Click Import.
  5. Review and organize. After import, browse your new entries. KeePassXC may create a single group called Imported. You can drag entries into existing groups or create new ones. Check a few entries to ensure usernames and passwords are correct—especially if the CSV had unusual formatting.
  6. Save and secure. Save your database (Ctrl+S). If you used a key file, store it separately from the .kdbx file. Consider enabling a database timeout and locking on minimize for better security.
  7. Delete the exported CSV. Once you’ve confirmed everything imported correctly, securely delete the CSV file from your computer. Use a shredder tool or at least empty the recycle bin. This prevents plaintext passwords from lingering.
  8. Change your master passwords (optional but recommended). If you’re leaving a cloud manager entirely, change the master passwords for your important online accounts. This ensures that even if the cloud service had a breach, your new passwords are different.

Common Mistakes

  • Not checking the CSV before import. Some services export with extra headers or different column names. If you don’t map them correctly, you’ll get empty fields.
  • Forgetting to include TOTP secrets. If you used two-factor authentication codes in your cloud manager, the CSV may not include the secret. You’ll need to re-add those manually in KeePassXC.
  • Keeping the CSV file around. Leaving the exported file on your desktop is a security risk. Delete it after import.
  • Using a weak master password for KeePassXC. Your local database is only as strong as its master password. Avoid common phrases or short passwords.
  • Importing into an existing database without a backup. If you import into a database that already has entries, you might get duplicates. Always back up your database before importing.

Tips

  • Use groups to stay organized. Create groups like Personal, Work, Finance before importing, then drag entries into them.
  • Enable browser integration. KeePassXC has a browser extension that works with Firefox and Chrome. It auto-fills passwords without storing them in the cloud.
  • Set a database timeout. In Database → Database Settings → Security, set a timeout (e.g., 5 minutes) to auto-lock the database when idle.
  • Use a key file for extra security. A key file is a separate file that must be present to unlock the database. Keep it on a USB drive or another device.
  • Back up your database regularly. Copy the .kdbx file to an external drive or a secure cloud storage (encrypted) after major changes.

Troubleshooting

  • Import fails with “CSV parse errorâ€�. This usually means the CSV has special characters or line breaks. Open it in a text editor and re-save as UTF-8 without BOM. Or try exporting again from your cloud manager in a different format (e.g., JSON) if available.
  • Passwords are missing after import. Check the CSV column mapping. If the password column was misidentified, re-import with the correct mapping. Also verify the CSV has data in that column—some services leave it blank for entries without passwords.
  • URLs are not clickable. KeePassXC expects the URL field to start with http:// or https://. If your CSV has URLs without the protocol, you can add it using a bulk edit or leave as is—they’ll still be stored.
  • Duplicate entries appear. If you’re importing into a database that already has some entries, duplicates are possible. Use the Tools → Duplicate Passwords or manually delete duplicates after import.
  • Cannot open the database after setting a key file. You must have the key file present every time you open the database. If you lose it, you cannot access your passwords. Keep a backup of the key file in a safe place.

Frequently Asked Questions

Can I import from 1Password or LastPass directly?

Yes, both export CSV files. 1Password also offers a 1pif format, which KeePassXC can import directly. LastPass exports CSV. The steps are the same—just choose the correct file format.

Will my two-factor codes transfer?

Usually not. Most CSV exports do not include TOTP secrets. You’ll need to manually add them in KeePassXC under each entry’s Advanced tab → OTP.

Is KeePassXC safe to use?

Yes, it’s open-source and stores your data in an encrypted database using AES-256. Because it’s offline, your passwords aren’t stored on any server, reducing the risk of cloud breaches.

Can I sync my KeePassXC database across devices?

You can store the .kdbx file in a cloud folder (like Dropbox) or use a sync tool. However, you must ensure the file is closed properly before syncing to avoid corruption. KeePassXC supports merging changes.

What if I forget my KeePassXC master password?

There is no recovery. If you forget it, your database is locked permanently. That’s why it’s crucial to choose a password you can remember or store a hint in a secure place.

Can I keep using my cloud manager alongside KeePassXC?

Yes, but you’d have two sets of passwords to maintain. It’s better to migrate fully to avoid confusion. If you want to keep both, export periodically and import the new entries.

Related

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.