Moving to NordPass is easier when existing logins can be imported, but most migration files are unencrypted CSV, JSON or archive files. During the brief period between export and import, a file may contain every username and password in readable form. A safe migration therefore includes preparation, verification and secure cleanup.
Prepare before exporting
Install NordPass from its official source, create a strong unique Master Password and configure recovery and multi-factor authentication. Update the old browser or password manager, then review its export instructions. Do not use online conversion websites with a real vault export.
Perform the migration on a trusted, malware-free personal device. Avoid public computers, shared user profiles, cloud-synchronized Downloads folders and public Wi-Fi where possible.
General migration process
- Export from the old manager using its supported format.
- Open NordPass Settings and locate Import and export.
- Select the exact source manager or the documented spreadsheet option.
- Upload the exported file without editing it unnecessarily.
- Review the import summary and any rejected rows.
- Test important accounts and inspect notes, URLs and custom fields.
- Securely remove every local and cloud copy of the export.
Why CSV files are sensitive
CSV is convenient because many services understand it, but it normally has no vault encryption. Antivirus scans, search indexing, cloud backup, recent-file lists and shared folders can create additional copies. Save it only as long as needed and know where the browser or old manager placed it.
Emptying the recycle bin reduces casual recovery, though flash-storage behavior makes guaranteed erasure difficult. The safest approach is minimizing the file’s existence and ensuring the device uses full-disk encryption.
How to verify the result
- Compare the item count with the source.
- Open a representative login, secure note and payment item.
- Check that website URLs point to correct domains.
- Test autofill on several trusted sites.
- Review duplicate items before deleting either copy.
- Keep the old vault temporarily until critical entries are confirmed.
Common import problems
An incorrect source format can shift columns or omit notes. Spreadsheet software may alter line breaks, encodings or long values. If import fails, use the official template and modify only a copy that contains the minimum necessary fields. Never email the export to support.
After migration
Disable the old browser’s password saving so two tools do not compete for autofill. Run Password Health, replace reused or weak credentials gradually, and prioritize email, banking and cloud accounts. Migration changes storage, not the strength of imported passwords.
A successful NordPass import ends only when the vault is verified and plaintext exports are gone. Move deliberately, keep one temporary recovery path and never upload credentials to unofficial conversion tools.
Official reference: NordPass Support — Import passwords.