Skip to main content

Command Palette

Search for a command to run...

LastPass Migration Guide — Export to CSV and Import Into VaultKeepR

Updated
7 min readView as Markdown

LastPass Migration Guide — Export to CSV and Import Into VaultKeepR

Leaving LastPass? You're not alone. After multiple security incidents and policy changes, many users are looking for alternatives that give them more control over their data.

This guide walks you through exporting your vault from LastPass and importing it into VaultKeepR — the whole process takes less than 5 minutes.

Before You Start

Make sure you have:

  • A LastPass account with your current vault
  • A browser with the VaultKeepR extension installed, OR access to the VaultKeepR web app
  • An Ethereum wallet (MetaMask, WalletConnect, or any EIP-191 compatible wallet)

Step 1: Export Your LastPass Vault

Via the LastPass Web Vault

  1. Log in to lastpass.com
  2. Click Advanced Options in the left sidebar
  3. Select ExportLastPass CSV File
  4. Re-enter your master password when prompted
  5. Save the .csv file to your computer

Via the LastPass Browser Extension

  1. Click the LastPass extension icon
  2. Go to Account OptionsAdvancedExport
  3. Choose LastPass CSV File
  4. Save the downloaded file

Important Security Note

The exported CSV file contains all your passwords in plaintext. Handle it carefully:

  • Don't email it to yourself
  • Don't store it in cloud storage (Google Drive, Dropbox, etc.)
  • Delete it immediately after import
  • If possible, do this on a trusted, malware-free device

Step 2: Set Up VaultKeepR

If you haven't already:

  1. Visit vaultkeepr.xyz or install the Chrome extension
  2. Connect your Ethereum wallet (MetaMask recommended)
  3. Create your master password — this will be combined with your wallet signature to derive your encryption key
  4. Your empty vault is now ready

Choosing a Strong Master Password

Since VaultKeepR combines your master password with your wallet signature via Argon2id, even a moderately strong password becomes extremely resistant to brute-force attacks. But we still recommend:

  • At least 12 characters
  • Mix of uppercase, lowercase, numbers, and symbols
  • Not reused from any other service
  • Something you can remember — there's no password reset

Step 3: Import Your LastPass Export

Via the VaultKeepR Web App

  1. Open your vault at app.vaultkeepr.xyz
  2. Go to SettingsImport / Export
  3. Select ImportLastPass CSV
  4. Choose the CSV file you exported in Step 1
  5. Review the preview — VaultKeepR will show you how many entries were detected
  6. Click Import to add all entries to your vault

Via the Chrome Extension

  1. Click the VaultKeepR extension icon
  2. Open Settings (gear icon)
  3. Navigate to Import
  4. Select LastPass CSV as the source format
  5. Upload your file
  6. Confirm the import

What Gets Imported?

LastPass Field VaultKeepR Field Notes
Name Entry title Preserved as-is
URL Website URL Used for autofill matching
Username Username Preserved
Password Password Encrypted immediately on import
Notes Notes Preserved
Folder Folder Folder structure is recreated
TOTP Secret TOTP (Premium) If you have Premium, TOTP secrets are imported

Step 4: Verify Your Import

After importing:

  1. Scroll through your vault — check that entries look correct
  2. Test autofill on a few websites — the extension should recognize saved URLs
  3. Check folders — make sure your organizational structure was preserved
  4. Verify a few passwords — click "show" on sensitive entries to confirm accuracy

Once you've verified everything:

  1. Your vault will auto-sync to IPFS if you've connected your wallet
  2. Check the sync status in the header — you should see a "Vault Sync" indicator
  3. This creates a decentralized backup of your encrypted vault

Step 6: Clean Up

Delete the Export File

This is critical. The CSV file contains all your passwords in plaintext:

  • macOS: Move to Trash, then Empty Trash
  • Windows: Shift + Delete (permanent delete)
  • Linux: shred -u lastpass_export.csv

Consider Deleting Your LastPass Account

If you're committed to the switch:

  1. Log in to LastPass web vault
  2. Go to Account SettingsMy Account
  3. Click Delete Account
  4. Follow the confirmation steps

Don't Rush This

We recommend keeping your LastPass account active for 2-4 weeks while you verify that VaultKeepR works perfectly for your workflow. Once you're confident, then delete.

Troubleshooting

"Some entries weren't imported"

This can happen with:

  • Secure Notes with custom formats — these may need manual recreation
  • Form fills (addresses, payment cards) — import these manually in VaultKeepR's Identity/Card sections
  • Shared folders — shared items need to be imported from your own export

"My TOTP codes aren't showing"

TOTP (2FA) is a Premium feature in VaultKeepR. If your LastPass export includes TOTP secrets:

  • Upgrade to Premium (part of Premium tier)
  • Re-import or manually add the TOTP secrets

"The CSV file looks garbled"

LastPass sometimes exports with encoding issues. Try:

  1. Open the CSV in a text editor (not Excel)
  2. Save as UTF-8
  3. Re-import into VaultKeepR

Why VaultKeepR After LastPass?

If you're leaving LastPass because of security concerns, here's how VaultKeepR addresses them:

LastPass Issue VaultKeepR Solution
Centralized vault storage (breached 2022-2023) Decentralized IPFS storage — no central target
Email + password accounts Wallet authentication — no email required
Server-side key derivation concerns 100% client-side Argon2id + XChaCha20-Poly1305
Master password the only protection Master password + wallet signature (two factors by default)
"Passwordless" tied to their app Wallet signature IS passwordless auth

Keep Reading


Ready to switch? The migration takes less than 5 minutes. Your passwords deserve decentralized, zero-knowledge protection.

Follow our step-by-step migration guide with screenshots and troubleshooting at /migrate/lastpass.

Start migrating →

FAQ

How do I export my passwords from LastPass?

Open the LastPass browser extension, go to Account Options > Advanced > Export, and select LastPass CSV File. Enter your master password when prompted. The CSV file will download to your computer.

How do I import my LastPass CSV into VaultKeepR?

Open VaultKeepR, go to Settings > Import, and drag-and-drop your LastPass CSV file. The parsing is done entirely in your browser — no data is sent to any server. Your passwords are encrypted locally before anything is stored.

Will I lose any data when migrating from LastPass to VaultKeepR?

Most standard fields (URLs, usernames, passwords, notes) import cleanly. TOTP secrets and some custom fields may require manual re-entry. Always verify your imported entries before deleting your LastPass export file.

Is it safe to migrate from LastPass after the breach?

Yes. LastPass suffered major breaches in 2022-2023 exposing encrypted vault data. Migrating to VaultKeepR with XChaCha20-Poly1305 encryption and Argon2id key derivation provides stronger protection against offline brute-force attacks. Your new vault is encrypted locally and stored on IPFS, not on centralized servers.

Should I delete my LastPass account after migrating?

Yes, but only after verifying all your entries imported correctly. Delete the CSV export file securely first, then deactivate your LastPass account from the Account Settings page. Change any passwords that were stored in LastPass for maximum security.

How long does it take to migrate from LastPass to VaultKeepR?

The migration takes under 5 minutes. Export from LastPass (1 minute), import into VaultKeepR (1 minute), verify entries (2-3 minutes). The entire process happens locally in your browser.