How to Migrate From LastPass to VaultKeepR (Step-by-Step)
How to Migrate From LastPass to VaultKeepR
Leaving LastPass? You're not alone. After multiple security incidents and policy changes, many users are looking for alternatives that give them more control over their data.
This guide walks you through exporting your vault from LastPass and importing it into VaultKeepR — the whole process takes less than 5 minutes.
Before You Start
Make sure you have:
- A LastPass account with your current vault
- A browser with the VaultKeepR extension installed, OR access to the VaultKeepR web app
- An Ethereum wallet (MetaMask, WalletConnect, or any EIP-191 compatible wallet)
Step 1: Export Your LastPass Vault
Via the LastPass Web Vault
- Log in to lastpass.com
- Click Advanced Options in the left sidebar
- Select Export → LastPass CSV File
- Re-enter your master password when prompted
- Save the
.csvfile to your computer
Via the LastPass Browser Extension
- Click the LastPass extension icon
- Go to Account Options → Advanced → Export
- Choose LastPass CSV File
- Save the downloaded file
Important Security Note
The exported CSV file contains all your passwords in plaintext. Handle it carefully:
- Don't email it to yourself
- Don't store it in cloud storage (Google Drive, Dropbox, etc.)
- Delete it immediately after import
- If possible, do this on a trusted, malware-free device
Step 2: Set Up VaultKeepR
If you haven't already:
- Visit vaultkeepr.xyz or install the Chrome extension
- Connect your Ethereum wallet (MetaMask recommended)
- Create your master password — this will be combined with your wallet signature to derive your encryption key
- Your empty vault is now ready
Choosing a Strong Master Password
Since VaultKeepR combines your master password with your wallet signature via Argon2id, even a moderately strong password becomes extremely resistant to brute-force attacks. But we still recommend:
- At least 12 characters
- Mix of uppercase, lowercase, numbers, and symbols
- Not reused from any other service
- Something you can remember — there's no password reset
Step 3: Import Your LastPass Export
Via the VaultKeepR Web App
- Open your vault at app.vaultkeepr.xyz
- Go to Settings → Import / Export
- Select Import → LastPass CSV
- Choose the CSV file you exported in Step 1
- Review the preview — VaultKeepR will show you how many entries were detected
- Click Import to add all entries to your vault
Via the Chrome Extension
- Click the VaultKeepR extension icon
- Open Settings (gear icon)
- Navigate to Import
- Select LastPass CSV as the source format
- Upload your file
- Confirm the import
What Gets Imported?
| LastPass Field | VaultKeepR Field | Notes |
|---|---|---|
| Name | Entry title | Preserved as-is |
| URL | Website URL | Used for autofill matching |
| Username | Username | Preserved |
| Password | Password | Encrypted immediately on import |
| Notes | Notes | Preserved |
| Folder | Folder | Folder structure is recreated |
| TOTP Secret | TOTP (Premium) | If you have Premium, TOTP secrets are imported |
Step 4: Verify Your Import
After importing:
- Scroll through your vault — check that entries look correct
- Test autofill on a few websites — the extension should recognize saved URLs
- Check folders — make sure your organizational structure was preserved
- Verify a few passwords — click "show" on sensitive entries to confirm accuracy
Step 5: Sync to IPFS (Recommended)
Once you've verified everything:
- Your vault will auto-sync to IPFS if you've connected your wallet
- Check the sync status in the header — you should see a "Vault Sync" indicator
- This creates a decentralized backup of your encrypted vault
Step 6: Clean Up
Delete the Export File
This is critical. The CSV file contains all your passwords in plaintext:
- macOS: Move to Trash, then Empty Trash
- Windows: Shift + Delete (permanent delete)
- Linux:
shred -u lastpass_export.csv
Consider Deleting Your LastPass Account
If you're committed to the switch:
- Log in to LastPass web vault
- Go to Account Settings → My Account
- Click Delete Account
- Follow the confirmation steps
Don't Rush This
We recommend keeping your LastPass account active for 2-4 weeks while you verify that VaultKeepR works perfectly for your workflow. Once you're confident, then delete.
Troubleshooting
"Some entries weren't imported"
This can happen with:
- Secure Notes with custom formats — these may need manual recreation
- Form fills (addresses, payment cards) — import these manually in VaultKeepR's Identity/Card sections
- Shared folders — shared items need to be imported from your own export
"My TOTP codes aren't showing"
TOTP (2FA) is a Premium feature in VaultKeepR. If your LastPass export includes TOTP secrets:
- Upgrade to Premium (€14.99/year)
- Re-import or manually add the TOTP secrets
"The CSV file looks garbled"
LastPass sometimes exports with encoding issues. Try:
- Open the CSV in a text editor (not Excel)
- Save as UTF-8
- Re-import into VaultKeepR
Why VaultKeepR After LastPass?
If you're leaving LastPass because of security concerns, here's how VaultKeepR addresses them:
| LastPass Issue | VaultKeepR Solution |
|---|---|
| Centralized vault storage (breached 2022-2023) | Decentralized IPFS storage — no central target |
| Email + password accounts | Wallet authentication — no email required |
| Server-side key derivation concerns | 100% client-side Argon2id + XChaCha20-Poly1305 |
| Master password the only protection | Master password + wallet signature (two factors by default) |
| "Passwordless" tied to their app | Wallet signature IS passwordless auth |
Keep Reading
- What Is a Zero-Knowledge Password Manager?
- VaultKeepR vs Bitwarden — The Complete Comparison
- 5 Password Manager Mistakes That Put Your Data at Risk
Ready to switch? The migration takes less than 5 minutes. Your passwords deserve decentralized, zero-knowledge protection.
Ready to take control of your passwords?
VaultKeepR is the first decentralized password manager. Zero-knowledge. Wallet-native. Yours.
Try VaultKeepR →