How do you set up a password manager and move old passwords?
Step by step: set up Bitwarden or 1Password and move every password saved in your browser over in a single file.
Short answer
Open a free Bitwarden account and install the phone app plus the browser extension. In Chrome, go to Settings > Autofill and passwords > Google Password Manager > Settings > Download passwords for a CSV. In the Bitwarden web vault pick Tools > Import data and upload it. Then delete the CSV permanently and turn off the browser's password saving. Takes 45-60 minutes.
What you need
Step by step
Build your master passphrase and write it down
Join five unrelated words with hyphens or spaces so the result is at least 25 characters, for example "rooftile-vapour-clothespin-orange-lantern". Never reuse this passphrase on any website. Write it on paper and keep it in a locked drawer, because a lost master passphrase cannot be reset and nobody can open the vault without it.
Create the Bitwarden account
Go to bitwarden.com and choose Get Started > Create account, then enter your email, name and master passphrase. Set the region to EU so your data stays on European servers. Click the verification link in your inbox to activate the account. The free plan covers unlimited passwords and unlimited device sync.
Install the browser extension and phone app
Add the "Bitwarden" extension from the Chrome Web Store or Firefox Add-ons, then pin it using the puzzle icon to the right of the address bar. On your phone, download Bitwarden from Play Store or the App Store and sign in with the same account. Each device takes two or three minutes.
Export the old Chrome passwords as CSV
In Chrome, open the three-dot menu and follow Settings > Autofill and passwords > Google Password Manager > Settings. Press Download on the "Download passwords" row and enter your Windows or macOS account password. The file lands in Downloads as passwords.csv. In Safari, use Settings > Passwords > three dots > Export All Passwords.
Import the CSV into the Bitwarden vault
Sign in to the web vault at vault.bitwarden.eu and pick Tools > Import data from the left menu. Choose "Chrome (csv)" in the file format list, select passwords.csv with Choose File, then press Import data. A green banner shows how many items came across, and you can confirm the count on the My Vault screen.
Delete the CSV file permanently
passwords.csv holds every password in plain text and must not stay on the machine. Delete it with Shift+Delete, or on macOS move it to the Trash and choose Empty Trash. Also clear the Downloads folder and any copies you sent through email or messaging apps.
Turn off the browser's own password saving
In Chrome, go to Settings > Autofill and passwords > Google Password Manager > Settings and switch off "Offer to save passwords", then disable "Auto Sign-in". Keeping passwords in two places causes conflicts and lets stale entries autofill. Once you have verified the import, delete the Chrome entries one by one.
Enable two-step login and refresh weak passwords
In the web vault open Account settings > Security > Two-step login, press Manage on the Authenticator app row and scan the QR code with Google Authenticator or Aegis, then write the recovery code on paper. Next open Reports > Reused passwords and change the top ten accounts to fresh 16-character passwords from the Generator. Allow 20-30 minutes.
Tips
Watch out
If you lose your master passphrase there is no way back into a Bitwarden vault: there is no password reset and every entry becomes unreachable. Write the passphrase on paper, store it physically, and keep the two-step login recovery code somewhere separate. Also, if you skip deleting the exported CSV, anyone with access to your computer can read all your passwords in plain text.
Frequently asked questions
+Is Bitwarden really free, or will it start charging later?
The free plan gives unlimited passwords and unlimited device sync with no expiry date. The Premium plan at roughly 10 dollars a year adds file attachments and advanced reports, which basic use does not need.
+Does my data leave the country, and is it safe?
If you pick the EU region at signup, your data is stored on European servers. The vault is end-to-end encrypted on your device before it reaches the server, so not even Bitwarden can see your master passphrase.
+I use Safari or Firefox instead of Chrome. Is the export different?
The menu names change but the logic is identical. In Safari use Settings > Passwords > three dots > Export All Passwords, and in Firefox use about:logins > three dots > Export Logins, then pick the matching format in Bitwarden.
+If my phone is stolen, can someone reach the passwords in my vault?
Not if the app is locked. In Bitwarden settings set Vault timeout to 15 minutes and the timeout action to Lock, and you can sign every device out from Account settings > Security > Deauthorize sessions in the web vault.
+Can I share the same vault with my partner?
Yes. The free plan lets you create a two-person Organization and add a Collection for shared accounts. Your personal passwords stay in your own vault and are not shared.
Sources and verification
Last verified: September 15, 2026. tell us. Menu paths reflect English-language Chrome, Safari, Firefox and Bitwarden interfaces; names differ in localised builds.
This content is for information only; for official procedures the relevant institution’s current announcements take precedence. Details: disclaimer.