Moving from LastPass to Bitwarden (Open Source Password Manager)

Hey there, Darian here. Let’s talk about password managers. Look, we’ve all seen the headlines over the last couple of years. Trust in some of the big, closed-source players has been shaken. I used to spend way too much time worrying about the security of my team’s credentials and my own. For my peace of mind and for our production secrets, I made the switch to Bitwarden a while back. It’s open-source, it’s regularly audited, and you can even self-host it for ultimate control. This guide is the exact, no-fluff process I use to migrate data securely and efficiently. Let’s get it done.

Prerequisites

Before we start, make sure you have the following ready:

• An active LastPass account containing the data you want to migrate.
• A new Bitwarden account. The free tier is excellent and more than enough for this process.
• Python 3 installed on a secure, trusted machine.
• Access to your terminal or command prompt.

The Guide: Step-by-Step Migration

Step 1: Export Your Data from LastPass

First, we need to get your vault out of LastPass. This is the most sensitive part of the process because the export will be an unencrypted plain text file.

1. Log in to your LastPass web vault.
2. Navigate to Advanced Options in the left-hand menu.
3. Click Export. You will be prompted to enter your Master Password again as a security measure.
4. Your browser will download a file named `lastpass_export.csv`.
5. Crucial: Move this file to a secure, temporary folder on your machine. Do not leave it in your Downloads folder. We will delete this file securely at the end.

Step 2: Prepare Your Python Environment

We’ll use a small Python script to make the import process clean and repeatable. I’ll skip the standard `mkdir` or `virtualenv` setup steps since you likely have your own preferred workflow for that. Just make sure you’re working within a dedicated project folder and an activated Python virtual environment.

To interact with Bitwarden, we need the official CLI tool and its importer. You can typically install the necessary package via pip. In your terminal, you would run the command to install the `bitwarden-cli-importer` package, which handles the heavy lifting for us.

Step 3: Authenticate the Bitwarden CLI

Now, let’s connect to your Bitwarden account from the command line.

1. In your terminal, run the command to log in: `bw login`.
2. It will ask for your email and Master Password. If you have 2FA enabled, it will prompt for that as well.
3. After logging in, your vault is still locked. Unlock it by running `bw unlock`.
4. Upon unlocking, the CLI will output an environment variable command to set your session key (e.g., `export BW_SESSION=…`). Copy and run that full command in your terminal. This session key authenticates your subsequent commands.

Pro Tip: This session key is temporary. If you have a very large vault and the import takes a long time, it might expire. I always run `bw unlock` and export the new session key right before I execute the import script to ensure the session is fresh.

Step 4: The Import Script Logic

While you can run the import command directly, I prefer wrapping it in a simple Python script. This gives us better control, error handling, and makes the process easily repeatable if something goes wrong.

Create a file named `migrate_vault.py` and add the following code:

import subprocess
import os

# --- Configuration ---
# Place your LastPass CSV export in the same directory as this script.
LASTPASS_CSV_FILE = 'lastpass_export.csv'

def run_import(file_path):
    """
    Executes the Bitwarden importer CLI tool.
    """
    if not os.path.exists(file_path):
        print(f"Error: The file '{file_path}' was not found.")
        print("Please make sure your LastPass export is in the same directory.")
        return False

    # Check if the BW_SESSION key is set.
    if 'BW_SESSION' not in os.environ:
        print("Error: BW_SESSION environment variable not set.")
        print("Please run 'bw unlock' and export the session key first.")
        return False
        
    print(f"Starting import for '{file_path}'...")
    
    # The command to execute. 'bw-importer' is the tool we're using.
    command = ['bw-importer', 'lastpass', file_path]
    
    try:
        # We use subprocess.run to execute the command.
        # capture_output=True means we grab stdout/stderr.
        # text=True decodes them as text.
        # check=True will raise an exception if the command returns a non-zero exit code.
        result = subprocess.run(
            command, 
            capture_output=True, 
            text=True, 
            check=True
        )
        print("--- Import Successful ---")
        print(result.stdout)
        return True
    except FileNotFoundError:
        print("Error: 'bw-importer' command not found.")
        print("Is the Bitwarden CLI importer installed and in your PATH?")
        return False
    except subprocess.CalledProcessError as e:
        print("--- Import Failed ---")
        print("The importer returned an error:")
        print(e.stderr)
        return False

if __name__ == "__main__":
    run_import(LASTPASS_CSV_FILE)

Step 5: Execute the Import and Verify

With your session key exported and the script ready, run it from your terminal:

python3 migrate_vault.py

The script will call the Bitwarden importer and show you the progress. Once it’s complete, log in to your Bitwarden Web Vault (or use the desktop/browser client). Spot-check several entries, especially complex ones with secure notes or custom fields, to ensure everything migrated correctly.

Step 6: Critical Cleanup

Do not skip this step. That `lastpass_export.csv` file is a plain text treasure trove of all your secrets.

1. Securely Delete the CSV: Do not just drag it to the trash. Use a secure delete or file shredder utility for your OS to permanently erase it. If you don’t have one, on macOS or Linux you can use `srm`, and on Windows `cipher`.
2. Deactivate LastPass: After you’ve used Bitwarden for a few days and are 100% confident all your data is safe and sound, go back to your LastPass account and permanently delete it. Don’t leave a dormant account with all your data sitting there.

Common Pitfalls (Where I Usually Mess Up)

• The Lingering CSV File: I’m mentioning it again because it’s that important. I’ve seen engineers leave this file in their Downloads folder for weeks. It completely negates the security of your password manager. Delete it right after a successful import.
• Character Encoding Issues: Very rarely, the LastPass CSV might have an encoding that the importer doesn’t like. If you get a strange parsing error, open the CSV in a proper editor like VS Code, and use the “Save with Encoding” option to save it as standard “UTF-8”. This almost always fixes it.
• Forgetting the Session Key: The script will catch this, but it’s the most common reason for failure. I’ll get distracted between `bw unlock` and running the script, and the key either isn’t exported or has expired. Make it the last thing you do before running `python3 migrate_vault.py`.

Conclusion

And that’s it. You’ve successfully moved your digital life to a more transparent, secure, and community-trusted platform. The small amount of upfront effort here pays huge dividends in peace of mind. You’re now in full control of your credentials, with the flexibility to use Bitwarden’s cloud or even host the server yourself. Welcome to the club.

Darian Vance

Lead Cloud Architect & DevOps Strategist

With over 12 years in system architecture and automation, Darian specializes in simplifying complex cloud infrastructures. An advocate for open-source solutions, he founded TechResolve to provide engineers with actionable, battle-tested troubleshooting guides and robust software alternatives.

🤖 Frequently Asked Questions