Short answer

Open LastPass, go to Advanced Options > Export (web vault) or Account > Fix a problem yourself > Export vault items (browser extension), confirm with your master password, and save the CSV. Import that file into your new manager, then delete it. The CSV is plain text, so only do this on a device you trust.

Menu names checked against LastPass's community help, Bitwarden's import guide and a PCWorld walkthrough in Oct 2026. LastPass changes its interface from time to time, so if a label differs, look for "Export" under account or advanced settings.

One thing to know first. Secure It Password Manager is made by us, and we haven't yet confirmed and documented a direct LastPass CSV import. So this page is a manager-neutral export guide and doesn't promise that path. See Where Secure It fits below.

Export your LastPass vault to CSV

Before you start

  • Use your own computer, signed in to your own account, not a shared or work machine.
  • If you have a LastPass Business or Teams account, an administrator can switch on a "Prohibit export" policy. If Export is missing, ask your admin.
  • Make sure you know your master password. The export asks for it.
  • Pick where the file will land. A folder on a fully encrypted drive is better than Downloads on a synced desktop.

Option 1: the web vault

  1. Sign in to the LastPass web vault.
  2. In the left sidebar, choose Advanced Options.
  3. Under Manage Your Vault, choose Export.
  4. LastPass emails you a confirmation. Open it and click the continue link.
  5. Go back to Advanced Options > Export, confirm your credentials, and save the file (usually lastpass_export.csv).

Option 2: the browser extension

  1. Open the LastPass extension and go to Account.
  2. Choose Fix a problem yourself, then Export vault items, then Export data for use anywhere.
  3. Enter your master password.
  4. Save the CSV. In some browsers the data prints on screen instead of downloading. If so, copy it into a new text file named export.csv.

Older versions of the extension used Account Options > Advanced > Export > LastPass CSV File.

What the CSV does and doesn't contain

  • It contains logins, notes and other basic item data as plain text.
  • It leaves out file attachments and TOTP codes for password items, and custom item types and fields don't survive an export. Re-create or move those by hand.
  • Special characters such as &, < and > can appear HTML-encoded (for example &amp;) in the printed export. Bitwarden's guide suggests a find-and-replace before importing.

LastPass also offers an encrypted export, but it is meant for restoring into LastPass. Other managers generally import the plain CSV.

After you export: protect the file, then rotate what matters

Treat the CSV like a master key

Anyone who can open the file can read every password in it. OWASP's guidance on credential storage is built on the idea that passwords should never sit in the clear. A CSV export does the opposite, so keep its life short:

  1. Save it to an encrypted drive or container.
  2. Import it as soon as you can.
  3. Delete it permanently, and empty the Recycle Bin. A deleted file in the bin is still readable.
  4. Check cloud sync folders (Drive, OneDrive, Dropbox) for copies the sync client may have made.

Decide what to rotate

LastPass disclosed in December 2022 that an attacker had copied a backup of customer vault data. LastPass said website usernames, passwords, secure notes and form data stayed encrypted with keys derived from each customer's master password, while website URLs and some account information were not encrypted. In December 2025 the UK ICO fined LastPass UK Ltd £1.2 million over the August 2022 breach. The full timeline is on our LastPass alternatives page.

Because the vaults were encrypted, your risk depends mostly on how strong your master password was and which settings your account used. A practical order:

  • Change first: email, banking, cloud storage, and any account that can reset others. Also anything where the master password was ever reused or short.
  • Change next: shopping, social and work accounts.
  • Leave for later: low-value accounts with unique passwords.
  • Turn on two-factor authentication at each account you rotate, and keep authenticator codes outside the exported CSV, since TOTP secrets aren't included.

If your master password was long and unique and your account was on current settings, rotating high-value passwords is still cheap insurance, but a panic reset of every account isn't required.

Running two managers during the move

Yes, you can use two password managers at once, and for a few days it is the safest way to move.

  1. Leave LastPass untouched until you've checked the import.
  2. Import the CSV into the new manager and spot-check 10 to 20 entries, including ones with odd characters, notes and multiple URLs.
  3. Log in to a few real sites using only the new manager.
  4. Re-add attachments and TOTP codes by hand.
  5. Delete the CSV.
  6. Only then remove your LastPass data (delete your account or empty the vault) and uninstall the extension.

Disable autofill in one of the two so they don't fight over the same login form. Don't keep both long term: duplicated, diverging entries are how people end up with stale passwords.

Where Secure It fits

Secure It is a zero-knowledge password manager that stores your encrypted vault in your own Google Drive: no company servers, not even ours. Encryption is Argon2id key derivation plus AES-256-GCM, done on the device, with a 12-word recovery phrase. More detail is on our security page.

What we can say today about moving in:

  • The app imports saved passwords from a browser (Chrome, Edge, Opera, Brave, Firefox).
  • We haven't confirmed a direct LastPass CSV import, so we won't tell you to rely on it. If you want to know before you leave LastPass, email talhaaslamdev@gmail.com.
  • Keep LastPass until you've confirmed your new manager has everything.

The limits matter too:

  • Android is in closed testing on Google Play and can't be bought by the public yet. The price will be a one-time purchase of US$4.99 (local prices vary by country), with the Windows app and Chrome extension included.
  • There is no iOS app yet (coming soon, no date).
  • Secure It has no independent security audit yet, and it comes from a small independent developer.
  • Using the vault on several devices needs a Google account for sync. On one device, no account is needed.

Alternatives that import LastPass today

If you need to move this week, these are established options with documented LastPass imports or free tiers:

  • Bitwarden is open source with a free plan, and its help site documents a LastPass import. See our Secure It vs Bitwarden comparison.
  • KeePassXC is free and keeps a local file. See Secure It vs KeePassXC.
  • 1Password and Proton Pass are polished subscription options with iOS apps.

If you mainly want to stop paying monthly, our guide to password managers with no subscription compares the options with dated prices.