October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

How to Set Up a Password Manager and Import Your Passwords Safely

Prepare the new vault first, follow its current import instructions, verify important logins, and delete the plaintext export when finished.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Set up and secure the new password manager first, check its import requirements, then transfer your passwords and verify the important entries before deleting the export file. Keep the old vault available until you have confirmed the new one works.

Before you start: choose and prepare the destination

Pick a password manager that works on the devices and browsers you use, supports your source manager’s export format, and suits your recovery and sharing needs. Check whether it can transfer non-login records, attachments, or passkeys; a password CSV should not be treated as a complete vault backup.

As an Amazon Associate I earn from qualifying purchases.

Install the manager’s app or browser extension, create your account or vault, and set a unique master password or passphrase you can reliably recall. Confirm the service’s recovery options before you move anything. Turn on two-step login if it is available. Bitwarden, for example, documents authenticator apps and FIDO2/WebAuthn credentials, including hardware security keys, as options for protecting vault access (Bitwarden’s two-step login guide).

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check what the import can carry

Open the destination manager’s current import instructions before exporting. Supported file types, column names, and transferable item types vary. Bitwarden supports multiple manager and browser formats, but notes that some item types may not import (Bitwarden import instructions). Its browser-specific guidance covers Chrome, Edge, and Chromium browsers (Bitwarden’s browser import guidance).

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Google Password Manager accepts CSV files with the headers url, username, and password (Google Account Help). Apple documents CSV import to Passwords on iPhone and import to iCloud Passwords on Windows (Apple’s iPhone instructions; Apple’s iCloud for Windows instructions).

Passkeys and other non-login data may require a separate transfer process. Google’s Chrome help covers passkey import and export, but support at one end does not establish that every destination accepts those passkeys (Google Chrome Help). Check both the exporting app and the destination’s current documentation.

Export and import your passwords

  1. In the source manager or browser, use its official export process. Save the file only on a device you control, in a location other people cannot access. Treat an ordinary CSV as readable plaintext unless the exporting app explicitly documents encryption.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
    Rank #2
    Sale
    Password Safe
    • Requires 3 "AAA" batteries (included)
    • Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs
  2. In the destination manager, open its documented import flow and choose the matching source or file format. Follow the current instructions for your app and operating-system version; menu labels can change.

  3. Avoid editing the export unless the destination requires a format or header adjustment. If you must adjust it, preserve the required field names and check the resulting records carefully.

  4. Import once. Bitwarden says its import process does not check for duplicates, so importing the same file again can create duplicate entries. It also notes that some item types may need to be added separately. Bitwarden says data is encrypted locally before it is sent for server storage (Bitwarden import instructions).

Google Password Manager limits

Google’s current guidance requires a CSV with url, username, and password headers. It allows up to 3,000 passwords in one import and up to 10,000 passwords stored in a Google Account. If your file has more than 3,000, Google instructs you to split it and import the files separately. These are Google-specific limits, not general password-manager limits (Google Account Help; Google Chrome Help).

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Apple import paths

On iPhone, Apple’s documented path is Settings > Apps > Safari > Import; select the exported CSV or ZIP and import it into Safari (Apple’s iPhone instructions). On Windows, import the other manager’s CSV through the iCloud Passwords app (Apple’s iCloud for Windows instructions).

Verify the new vault before relying on it

A success notice confirms that an import ran; it does not prove that every record or field transferred correctly. Review any failed, invalid, or skipped entries shown by the destination manager. Then search for several important accounts and inspect the site address, username, and password fields. Test sign-in where practical.

Rank #4
Yubico - YubiKey Bio C (FIDO Edition) - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C, Biometric, FIDO Certified - Protect Your Online Accounts
  • FIDO-ONLY FUNCTIONALITY: Supports FIDO2 (passkeys) and FIDO U2F protocols for passwordless and second-factor authentication. Does not support OTP, TOTP, Smart Card (PIV), or other advanced features - upgrade to YubiKey 5 Series for extended functionality
  • SECURE AND CONVENIENT: Passwordless MFA login with the YubiKey Bio authenticator and biometric information using a fingerprint, with a PIN as a fallback. Simply plug in via USB and use your fingerprint to authenticate
  • DEVICE & OS COMPATIBILITY: Compatible with Windows, macOS, ChromeOS, and Linux. Works seamlessly with supported services like Google and Microsoft accounts, and major password managers. See the full compatibility list at "Works With YubiKey"
  • DURABLE & RELIABLE: Resistant to tampering, water, and crushing. No batteries or network connectivity required, offering dependable authentication without any downtime. Securely manufactured in USA & Sweden
  • Yubico Authenticator App - Fingerprint enrollment, passkey management and PIN configuration available via the app app - Upgrade to YubiKey 5 Series to generate one-time-passwords (OTP) via Yubico Authenticator and for advanced compatibility (OATH, PIV)

Google warns that some app or site names may not land in the right field and provides Password Checkup for reviewing weak or exposed passwords (Google Chrome Help). In iCloud Passwords on Windows, Apple says you can review passwords that could not be imported, and that imported entries do not replace existing entries (Apple’s iCloud for Windows instructions).

Keep the source vault or browser records until you have checked the new vault and confirmed you can access it on the devices you need. There is no universal waiting period: the practical checkpoint is successful access and verification of the entries you depend on.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Delete the export file

Once you have verified the destination, delete the exported CSV or other temporary file. Google warns that anyone with access to the device can open an undeleted password file (Google Account Help; Google Chrome Help). Apple cautions that imported passwords might not be encrypted and could be visible to anyone who can access the file (Apple’s iPhone instructions; Apple’s iCloud for Windows instructions). Bitwarden likewise instructs users to delete exported data files after import (Bitwarden import instructions).

Quick platform reference

Destination Import format or path Important detail
Google Password Manager CSV with url, username, and password headers Google allows 3,000 passwords per import and 10,000 stored in a Google Account; delete the export afterward. Google Account Help
Passwords on iPhone Settings > Apps > Safari > Import; select a CSV or ZIP Apple warns the imported file may not be encrypted; delete it after import. Apple Support
iCloud Passwords on Windows Import the other manager’s CSV in the iCloud Passwords app Imported entries do not replace existing ones; failed imports can be reviewed. Apple Support
Bitwarden Select the matching source format in the import flow; supported Chromium-browser imports are also documented Duplicate entries are not detected, and some item types may not transfer. Delete the export afterward. Import guidance; browser guidance

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.