What's in a password manager export?

A password manager export is your whole vault in one file: every login with its title, username, password and website, plus notes, folders, one time password (TOTP) secrets and custom fields. Most managers can export plain CSV or JSON with no encryption, so anyone who opens the file can read every password. KeePass keeps everything in a KDBX database locked with a master password.

Looking inside one helps when you need a password from an old backup, want to check an export before importing it, or have a KeePass file on a computer without KeePass.

Tool description

Drop a file and the viewer works out its format, such as KeePass KDBX 4.0 or LastPass CSV. The table lists the title, username, password, website and folder of each entry, and search looks through titles, usernames, websites, folders and notes.

Click an entry to see everything it holds: the TOTP secret, notes, and any other fields under "Other fields", each with a copy button. Passwords show as dots until you tick "Show passwords". For a KeePass database or a password protected Bitwarden export, type the password in "File password" and click "Open".

The file is read and decrypted in your browser and never uploaded. The viewer can't change or save the file. The two buttons under the table save the list as CSV or JSON with the passwords in plain text, so delete those files when you're done.

Supported formats

  • KeePass KDBX 3 and 4 databases, encrypted with AES or ChaCha20, and KeePass XML
  • Bitwarden JSON, plain or password protected, and Bitwarden CSV
  • 1Password 1PUX and CSV, Proton Pass, Keeper and Enpass JSON
  • CSV from LastPass, Dashlane, NordPass, Proton Pass, Keeper, RoboForm, KeePass, KeePassXC, Chrome, Edge, Brave, Firefox and Apple Passwords
  • ZIP exports from Dashlane, Proton Pass and Bitwarden

Limitations

A KeePass database that also needs a key file can't be opened here, and neither can KeePass 1.x .kdb files or databases encrypted with Twofish. Export a Bitwarden vault again as password protected or unencrypted if its export uses your account key, and export PGP encrypted files again without encryption.