Before you export: what should you prepare?
An exported CSV is every password you own, in plain text, in one file. Treat the next twenty minutes as a sensitive operation and prepare for it.
- Use a trusted computer that only you use, with disk encryption turned on.
- Pause cloud sync for your Downloads folder if it syncs to a cloud drive, so the file is not uploaded.
- Have the destination ready. Create your new vault first, so the CSV exists for minutes, not days.
- Know your master password. Most tools ask for it again before exporting.
Menu names change between versions. If a path below does not match exactly, look for "Export" in the settings or tools menu, or check the vendor's help centre.
The good news is that the process is similar everywhere: unlock the vault, find the export option, confirm your identity, save a CSV. The steps below cover the five sources teams ask about most, followed by the safety steps that apply to all of them. Plan to export, import and delete in one sitting.
What does a password CSV contain?
Most exports share the same core columns, even if the names differ slightly:
| Column | What it holds |
|---|---|
| name or title | A label such as "Company email" |
| url | The sign-in page address |
| username | Email address or user ID |
| password | The password in plain text |
| notes, folder, totp | Extra fields, depending on the tool |
Extra fields such as notes, folders or 2FA secrets may or may not survive the move. Spot-check a few important logins after import, especially ones with 2FA, and add any missing authenticator secrets by hand.
How do you export passwords from Zoho Vault?
- Sign in to Zoho Vault in your browser.
- Open Tools and choose Export.
- Select CSV as the format and confirm with your passphrase if prompted.
- Save the file to a local folder you will remember.
If you are an admin, check whether you are exporting only your own passwords or those shared with you too. Shared items owned by others may need to be exported by their owners.
Zoho's sharing permissions map neatly to new access levels. Zoho "manage", "view" and "logon" roughly match Edit, View and Login only in BobWork Vault. More on that on the Zoho Vault alternative page.
How do you export passwords from LastPass?
- Open LastPass in your browser and sign in.
- Go to Advanced Options and choose Export.
- Re-enter your master password when asked.
- Save the CSV file. Depending on version, it may download directly or open as text that you save as a .csv file.
Check that special characters such as ampersands came through correctly by opening a few rows in a plain-text editor, not a spreadsheet that might auto-format values.
How do you export passwords from 1Password?
- Open the 1Password desktop app and unlock it.
- Choose File › Export, then pick the account or vault.
- Select CSV as the format and enter your account password.
- Save the file locally.
1Password may offer other export formats. Choose CSV for the widest compatibility with other tools. Export each vault you need, since shared vaults may be separate.
How do you export passwords from Bitwarden?
- Open the Bitwarden web vault or desktop app.
- Go to Tools › Export vault.
- Choose the .csv format.
- Confirm with your master password and save the file.
Organisation items may be exported separately from your personal vault. If you manage an organisation, check whether you need a second export for it.
How do you export passwords from Chrome?
- In Chrome, go to
chrome://password-manager/settings. - Find Export passwords and click it.
- Confirm with your computer's password or fingerprint when asked.
- Save the CSV file.
Edge, Brave and other Chromium browsers have similar options in their own password settings. Many teams find that browser-saved passwords are the messiest part of a migration, with old and duplicate entries, so this export is worth a quick review.
How do you keep the exported CSV safe?
The CSV is not encrypted. Anyone or anything that reads it gets every password. Follow these rules:
- Never email, message or upload it, not even to yourself.
- Do not open it in an online spreadsheet. A local plain-text editor is enough for a spot check.
- Import it the same day. The shorter its life, the smaller the risk.
- Delete it, then empty the trash or recycle bin. A file in the trash is still a file on disk.
- Check your Downloads folder and any synced folders for stray copies.
- Resume cloud sync only after the file is gone.
How do you import the CSV into a team vault?
Most password managers have an import screen that accepts the CSVs above. In BobWork Vault the process looks like this:
- Create your account at vault.bobwork.ai and save your Emergency Kit.
- Open the import page and choose the source: Chrome, Zoho Vault, 1Password, Bitwarden, LastPass or any CSV.
- Select the file. It is read and encrypted in your browser, so the plain-text file never reaches the server.
- Review the result. Duplicates are skipped automatically.
Full details are on the import page.
What are the common import problems and fixes?
- Empty or garbled passwords: the file was opened and re-saved in a spreadsheet. Export a fresh copy and import it untouched.
- Wrong columns: choose the preset for the tool you exported from, or the generic CSV option, and check the column names.
- Missing shared items: you exported only your personal vault. Export shared or organisation vaults separately.
- Too many duplicates: import the cleanest source first, such as your old password manager, and the browser export second.
- Non-English characters broken: make sure the file is saved as UTF-8.
If an import goes wrong, delete the imported items, fix the file and try again. Nothing is lost while the original tool is still active.
What should you do after importing?
A migration is a good moment to tidy up, because you are looking at every login anyway.
- Organise shared folders by team, such as Marketing, Finance and Operations, and move imported items into them.
- Set access levels deliberately. Give fill-only access where people only need to sign in.
- Run a password health check to find reused or breached passwords and change them on the site.
- Turn off the old tool's autofill and Chrome's built-in password saving, so two managers do not compete.
- Close or downgrade the old account once everyone has moved, after checking its data retention terms.
For the people side of the switch, see how to set up a password manager for a small team.
Try BobWork Vault — free for your whole team
BobWork Vault is a free, zero-knowledge password manager for teams, made by BobWork (BobOffice, LLC). Shared folders, login-only access, 2FA codes and guided offboarding, end-to-end encrypted. Add it to Chrome or create a free account.
Keep reading
- The best free password manager for teams in 2026: a fair buyer's guide
- How to set up a password manager for a small team: a 10-step rollout plan
- Import passwords into BobWork Vault
- Free Zoho Vault alternative
More: free team password manager · free company password manager · company password manager · password management software · how to share passwords with teammates · compare password managers
Questions
Is it safe to export passwords to CSV?
It is safe enough if you do it on a trusted computer, import the file the same day, and then delete it and empty the trash. The CSV is plain text, so never email, upload or sync it.
Can I import a CSV from any password manager?
Most tools accept a generic CSV with name, URL, username and password columns. BobWork Vault has presets for Chrome, Zoho Vault, 1Password, Bitwarden and LastPass, plus a generic CSV option.
Will shared folders and permissions come across in the export?
Usually not. CSV exports contain the logins, not the sharing structure, so plan to rebuild shared folders and access levels in the new tool.
What happens to duplicate entries when I import into BobWork Vault?
Duplicates are skipped during import, so you can safely import exports from two sources, such as Chrome and LastPass.
Does BobWork Vault upload my CSV file?
No. The file is read and encrypted in your browser, and only encrypted items are sent to the server.