How to move your passwords out of 1Password

Yes, you can export your passwords from 1Password. In 1Password 8 on desktop you choose Export, pick the 1PUX or CSV format, and save the file. The file is not encrypted, so the rest of this guide is about moving it into your next manager and deleting it safely.

Secure It Password Manager is a zero-knowledge password manager that stores your encrypted vault in your own Google Drive: no company servers, not even ours. It is a one-time purchase of US$4.99 (local prices vary by country on Google Play), not a subscription.

Before you start

People leave 1Password for a few reasons: the subscription, the fact that the account lives on someone else's servers, or just wanting fewer recurring bills. 1Password has polished apps on every major platform and publishes independent audits, so this is a choice about how you want to pay and where your vault lives, not a rescue from a bad product.

Two things to know before you begin:

• Do not cancel 1Password yet. Keep it until you have checked every login in the new place.
• Check platform fit. Secure It has a Windows app and a Chrome extension today, and an Android app that is in closed testing. There is no iOS app yet (coming soon, no date). If you rely on 1Password on an iPhone, keep it there for now. See download options for what is live.

Step 1: Export from 1Password

These steps are for 1Password 8, from 1Password's own export guide (dated 3 Sep 2026).

1. Open and unlock 1Password on your computer.
2. Mac: choose File > Export, then select the account. Windows and Linux: select the ellipsis at the top of the sidebar, then Export, and choose the account.
3. Enter your account password (or sign in through your identity provider if you use SSO).
4. Choose a format and select Export Data.
5. Choose where to save the file.

Which format: CSV or 1PUX?

The export file is plaintext. 1Password warns that anyone with access to your exported files can read your passwords, that you should not email them or store them online, and that you should delete them when you are done. Save the file somewhere local, not in a synced folder. OWASP's Secrets Management Cheat Sheet makes the same general point: keep secrets out of plain files and limit how long they exist.

Step 2: Move the logins into Secure It

Secure It's documented import route is saved passwords from a browser (Chrome, Edge, Opera, Brave and Firefox). 1Password exports a file rather than writing into a browser, so the logins pass through a browser on the way. This is the only route we describe here, and it takes a few minutes:

1. Export a CSV from 1Password (Step 1).
2. Open the CSV in a spreadsheet and make sure the first row uses the column names Chrome expects: url, username and password. 1Password's CSV calls the first of these "Website", so rename that header. Chrome's import help says only .csv files work and imports are limited to 3,000 passwords at a time.
3. In Chrome, open Passwords and autofill > Google Password Manager > Settings, and under Import passwords select the file.
4. Import the saved passwords from that browser into Secure It.
5. Remove the imported passwords from the browser's password store.

Keep in mind that this puts your passwords in a browser for a short time. If Chrome is signed in to a Google Account with password saving on, they are saved to that account until you remove them. Do this on a device you trust and finish all five steps in one sitting.

If you already use another browser as your main one, the same idea applies: load the CSV there, then import from that browser.

Step 3: Delete the export and check your logins

1. Delete the CSV or 1PUX file from your computer, then empty the recycle bin. Chrome's own guide gives the same advice: anyone who uses the device can open a leftover file.
2. Spot-check your logins. Open ten that matter most: email, banking, your domain registrar, client accounts. Chrome warns that not every site or app name lands in the right field, so search for anything that looks missing.
3. Write down your recovery phrase. Secure It gives you a 12-word recovery phrase and an Emergency Kit PDF with an offline recovery script. Store them somewhere that is not the same device.
4. Then cancel 1Password, once you are sure everything arrived.

What may not move

• Passkeys. 1Password says passkeys can only be exported from its iOS and Android apps. A desktop export does not include them, so you need to create new passkeys on each site.
• Custom fields and security questions. The CSV leaves them out, and 1Password notes that custom fields can include two-factor backup codes. Use the 1PUX file as a reference and copy anything you need by hand before you delete it.
• One-time password (TOTP) secrets. The CSV includes them, but a browser import only handles URL, username and password. Re-add your authenticator codes by hand, or set up two-factor again on each site.
• Linked items and apps. Also left out of the CSV.
• Non-login items. The CSV covers Login and Password items only, so cards and documents are not part of it.

Pay once or subscribe

Prices below were checked on 19 Oct 2026. Check 1Password's pricing page before you decide, because promotions change.

On price alone, a year of 1Password at the regular US$3.99 a month comes to US$47.88, about ten times the US$4.99 one-time price. We are a small independent developer and have not had an independent security audit yet. We would rather say that than have you find out later. You can read how the encryption works (Argon2id and AES-256-GCM, done on your device) on our security page and see the pricing details.

Using the same vault on several devices needs a Google account, because sync goes through your own Google Drive. One device works without one.