NAME¶

pimport — A passwords importer swiss army knife

SYNOPSIS¶

pimport [options...] dst src [src]

DESCRIPTION¶

pimport is a passwords importer swiss army knife allowing you to import your password database to a password store repository conveniently. It natively supports import from 62 password managers, and export to 8 destination password managers. More manager support can easily be added.

Passwords are imported into the existing default password store, therefore the password store must have been initialized before.

By default, pass imports entries at the root of the password store and only keeps the main data (password, login, email, URL, group). This behaviour can be changed using the provided options. It handles duplicates and imports OTP secret.

COMMAND¶

pimport [options...] dst src [src]

dst: Refer to one of the supported destination password managers to which you want to export your data. The complete list of supported destination managers can be found in the section SUPPORTED DESTINATION MANAGERS. It can also be found with pimport --list-exporters.
src [src]: Can refer to two things: the path to the data to import or to the password manager name followed by the path to the data to import. If only the path to the data to import is given, pass-import automatically detects the data format to import. The complete list of supported managers can be found in the section SUPPORTED MANAGERS. It can also be found with pimport --list-importers.
--out=<prefix>, or -o <prefix>: Provide a path where the destination password manager lives. It can be a file, a directory, or even a login depending on the manager.
--root=<path>, -r <path> and --path=<path>, -p <path>: Specific root source and destination directory to use in the password store. Where --root refer to the source repository and will only import the password from a specific subfolder. --path refer to the destination repository and will import the passwords to a specific subfolder.
--key=<path>, -k <path>: If required by a password manager, a key file can be given using the --key or -k option along with the path to the keyfile to use.
--all, -a: Conserve and import all the data present in the backup file. Otherwise, only title, password, login, URL, comments, and group data are imported.
--force, -f: The import process will overwrite existing password entry if it already exists.
--clean, -c: Clean the password path in order to be more command line friendly.
--convert, -C: Convert the invalid characters present in the paths before import. Invalid characters for both Windows and Unix systems are supported. The default separator replaces the invalid characters: `-'
--sep=<char>: Provide a character of replacement for the path separator. Default: `-'
--del=<char>: Provide an alternative CSV delimiter character. Default: `,'
--cols=<char>: Set the expected CSV columns to map columns to credential attributes. Only used for the generic csv importer.
--config=<path>: pass-import will consider this config file instead of the default one .import.
--list-importers, -l: Print the list of the available source password manager. With the verbose option (-v) it provides the python class name to use to be given as src. It can be useful to bypass the automatic format detection. Also support the quiet option (-q).
--list-exporters, -e: Print the list of the available destination password manager. Support the quiet option (-q).
--help, -h: Print the program usage. If the option is specified along with an argument and if this argument is a supported password manager, prints usage for this manager.
--verbose, -v: Be more verbose. This option can be specified multiple times to set the verbosity level.
--quiet, -q: Be quiet

BASIC USAGE¶

To import password from any supported password manager simply run:

pimport <new_pm> path/to/passwords --out path/to/destination/pm

If pimport is not able to detect the format, you need to provide the password manager you want to import data from:

pimport <new_pm> <former_pm> path/to/passwords --out path/to/destination/pm

If you want to import data to a pass, run:

pass import <pm> path/to/passwords

EXAMPLES¶

Import Lastpass file to a keepass kdbx db¶

pimport keepass lastpass.csv --out keepass.kdbx
(*) Importing passwords from lastpass to keepass


 .  Passwords imported from: lastpass.csv


 .  Passwords exported to: keepass.kdbx


 .  Number of password imported: 6


 .  Passwords imported:


          Social/mastodon.social


          Social/twitter.com


          Social/news.ycombinator.com


          Servers/ovh.com/bynbyjhqjz


          Servers/ovh.com/jsdkyvbwjn


          Bank/aib

Import a password store to a CSV file¶

pimport csv ~/.password-store --out file.csv`

Import passwords from keepass to bitwarden in a subfolder¶

pimport bitwarden  keepass.kdbx --out <login> -p Import/
(*) Importing passwords from keepass to bitwarden


 .  Passwords imported from: keepass.kdbx


 .  Passwords exported to: <login>


 .  Root path: Import


 .  Number of password imported: 6


 .  Passwords imported:


          Import/Social/mastodon.social


          Import/Social/twitter.com


          Import/Social/news.ycombinator.com


          Import/Servers/ovh.com/bynbyjhqjz


          Import/Servers/ovh.com/jsdkyvbwjn


          Import/Bank/aib

Other examples¶

•: If the manager is not correctly detected, you can pass it at source argument

pimport pass dashlane dashlane.csv --out ~/.password-store

•: Import NetworkManager password on default dir

pimport pass networkmanager --out ~/.password-store

•: Import a NetworkManager INI file

pimport pass nm.ini --out ~/.password-store

•: Import a One password 1PIF

pimport pass 1password.1pif

•: Import a One password CSV

pimport pass 1password.csv

•: Import a Passman JSON file

pimport pass passman.json

•: Import Lastpass file to a keepass db

pimport keepass lastpass.csv --out keepass.kdbx

•: Import a password store to a CSV file

pimport csv ~/.password-store --out file.csv

SECURITY CONSIDERATION¶

Direct import¶

Passwords should not be written in plain text form on the drive. Therefore, when possible, you should import it directly from the encrypted data. For instance, with an encrypted keepass database:

pimport pass keepass file.kdbx --out ~/.password-store

Secure erasure¶

Otherwise, if your password manager does not support it, you should take care of securely removing the plain text password database:

pimport keepass lastpass data.csv
shred -u data.csv

Encrypted file¶

Alternatively, pimport can decrypt gpg encrypted file before importing it. For example:

pimport keepass lastpass lastpass.csv.gpg

Mandatory Access Control (MAC)¶

AppArmor profiles for pimport are available in apparmor.d. If your distribution support AppArmor, you can clone the repository and run:

make
sudo make install pass-import

to only install these apparmor security profiles.

Network¶

pimport only needs to establish network connection to support cloud based password manager. If you do not use these importers you can ensure pimport is not using the network by removing the network rules in the apparmor profile of pass-import.

CONFIGURATION FILE¶

Some configurations can be read from a configuration file called .import if it is present at the root of the password repository. The configuration read from this file will be overwritten by their corresponding command-line option if present.

Example of the .import configuration file for the default password repository: zx2c4@laptop ~ $ cat .import

---
# Separator string
separator: '-'
# The list of string that should be replaced by other string. Only activated
# if the `clean` option is enabled.
cleans:


  ' ': '-'


  '&': 'and'
# The list of protocol. To be removed from the title.
protocols:


  - http://
# The list of invalid characters. Replaced by the separator.
invalids:


  - '<'


  - '>'

SUPPORTED DESTINATION MANAGERS¶

csv (csv)¶

You should use the –cols option to map columns to credential attributes. The recognized column names by pass-import are the following: `title', `password', `login', `email', `url', `comments', `otpauth', `group' title and group field are used to generate the password path. If you have otp data, they should be named as otpauth. These are the standard field names. You can add any other field you want.

Command: pimport csv src [src]

gopass (gopass)¶

Website: https://www.gopass.pw/

Command: pimport gopass src [src]

keepass (kdbx)¶

Website: https://www.keepass.info

Command: pimport keepass src [src]

keepassx2 (kdbx)¶

Website: https://www.keepassx.org

Command: pimport keepassx2 src [src]

keepassxc (kdbx)¶

Website: https://keepassxc.org

Command: pimport keepassxc src [src]

lastpass (cli)¶

Website: https://www.lastpass.com

Command: pimport lastpass src [src]

pass (pass)¶

Website: https://passwordstore.org

Command: pimport pass src [src]

sphinx¶

Website: https://github.com/stef/pwdsphinx/

Command: pimport sphinx src [src]

SUPPORTED SOURCE MANAGERS¶

1password (csv) v8¶

Website: https://1password.com

Export: See this guide: https://support.1password.com/export

Command: pass import 1password file.csv

1password (1pif) v4¶

Website: https://1password.com

Export: See this guide: https://support.1password.com/export

Command: pass import 1password file.1pif

1password (csv) v4¶

Website: https://1password.com

Export: See this guide: https://support.1password.com/export

Command: pass import 1password file.csv

1password (csv) v6¶

Website: https://1password.com

Export: See this guide: https://support.1password.com/export

Command: pass import 1password file.csv

aegis (json)¶

Website: https://github.com/beemdevelopment/Aegis

Export: Settings> Tools: Export Plain

Command: pass import aegis file.json

aegis (json)¶

Website: https://github.com/beemdevelopment/Aegis

Export: Settings> Tools: Export encrypted

Command: pass import aegis file.json

andotp (json)¶

Website: https://github.com/andOTP/andOTP

Export: Backups> Backup plain

Command: pass import andotp file.json

apple-keychain (keychain)¶

Website: https://support.apple.com/guide/keychain-access

Export: See this guide: https://gist.github.com/santigz/601f4fd2f039d6ceb2198e2f9f4f01e0

Command: pass import applekeychain file.txt

bitwarden (csv)¶

Website: https://bitwarden.com

Export: Tools> Export Vault> File Format: .csv

Command: pass import bitwarden file.csv

bitwarden (csv)¶

Website: https://bitwarden.com

Export: Tools> Export Vault> File Format: .csv

Command: pass import bitwarden file.csv

bitwarden (json)¶

Website: https://bitwarden.com

Export: Tools> Export Vault> File Format: .json

Command: pass import bitwarden file.json

bitwarden (json)¶

Website: https://bitwarden.com

Export: Tools> Export Vault> File Format: .json

Command: pass import bitwarden file.json

blur (json)¶

Website: https://abine.com

Export: Settings: Export Data: Export Blur Data

Command: pass import blur file.json

blur (csv)¶

Website: https://abine.com

Export: Settings: Export Data: Export CSV: Accounts: Export CSV

Command: pass import blur file.csv

buttercup (csv)¶

Website: https://buttercup.pw

Export: File > Export > Export File to CSV

Command: pass import buttercup file.csv

chrome (csv)¶

Website: https://support.google.com/chrome

Export: In chrome://password-manager/settings under 2Export passwordsDownload File

Command: pass import chrome file.csv

chrome (csv)¶

Website: https://support.google.com/chrome

Export: See this guide: https://support.google.com/chrome/answer/95606#see

Command: pass import chrome file.csv

clipperz (html)¶

Website: https://clipperz.is

Export: Settings > Data > Export: HTML + JSON

Command: pass import clipperz file.html

csv (csv)¶

Export: Nothing to do

Command: pass import csv file.csv –cols `url,login,,password'

dashlane (csv)¶

Website: https://www.dashlane.com

Export: File > Export > Unsecured Archive in CSV

Command: pass import dashlane file.csv

dashlane (json)¶

Website: https://www.dashlane.com

Export: File > Export > Unsecured Archive in JSON

Command: pass import dashlane file.json

encryptr (csv)¶

Website: https://spideroak.com/encryptr

Export: Compile from source and follow instructions from this guide: https://github.com/SpiderOak/Encryptr/issues/295#issuecomment-322449705

Command: pass import encryptr file.csv

enpass (json) v6¶

Website: https://www.enpass.io

Export: Menu > File > Export > As JSON

Command: pass import enpass file.json

enpass (csv)¶

Website: https://www.enpass.io

Export: File > Export > As CSV

Command: pass import enpass file.csv

firefox (csv)¶

Website: https://www.mozilla.org/en-US/firefox/lockwise/

Export: In about:logins Menu: Export logins

Command: pass import firefox file.csv

firefox (csv)¶

Website: https://github.com/kspearrin/ff-password-exporter

Export: Add-ons Prefs: Export Passwords: CSV

Command: pass import firefox file.csv

fpm (xml)¶

Website: http://fpm.sourceforge.net

Export: File > Export Passwords: Plain XML

Command: pass import fpm file.xml

freeotp+ (json)¶

Website: https://github.com/helloworld1/FreeOTPPlus

Export: Settings> Export> Export JSON Format

Command: pass import freeotp+ file.json

gnome (libsecret)¶

Website: https://wiki.gnome.org/Projects/GnomeKeyring

You can provide a gnome-keyring collection label to import. It can be empty to import all collections.

Export: Nothing to do

Command: pass import gnome-keyring

gnome-auth (json)¶

Website: https://gitlab.gnome.org/World/Authenticator

Export: Backup > in a plain-text JSON file

Command: pass import gnome-authenticator file.json

gopass (gopass)¶

Website: https://www.gopass.pw/

Export: Nothing to do

Command: pass import gopass path/to/store

gorilla (csv)¶

Website: https://github.com/zdia/gorilla/wiki

Export: File > Export: Yes: CSV Files

Command: pass import gorilla file.csv

kedpm (xml)¶

Website: http://fpm.sourceforge.net

Export: File > Export Passwords: Plain XML

Command: pass import kedpm file.xml

keepass (kdbx)¶

Website: https://www.keepass.info

Export: Nothing to do

Command: pass import keepass file.kdbx

keepass (csv)¶

Website: https://www.keepass.info

Export: File > Export > Keepass (CSV)

Command: pass import keepass file.csv

keepass (xml)¶

Website: https://www.keepass.info

Export: File > Export > Keepass (XML)

Command: pass import keepass file.xml

keepassx (xml)¶

Website: https://www.keepassx.org

Export: File > Export to > Keepass XML File

Command: pass import keepassx file.xml

keepassx2 (kdbx)¶

Website: https://www.keepassx.org

Export: Nothing to do

Command: pass import keepassx2 file.kdbx

keepassx2 (csv)¶

Website: https://www.keepassx.org

Export: Database > Export to CSV File

Command: pass import keepassx2 file.csv

keepassxc (kdbx)¶

Website: https://keepassxc.org

Export: Nothing to do

Command: pass import keepassxc file.kdbx

keepassxc (csv)¶

Website: https://keepassxc.org

Export: Database > Export to CSV File

Command: pass import keepassxc file.csv

keeper (csv)¶

Website: https://keepersecurity.com

Export: Settings > Export : Export to CSV File

Command: pass import keeper file.csv

lastpass (cli)¶

Website: https://www.lastpass.com

Export: Nothing to do

Command: pass import lastpass

lastpass (csv)¶

Website: https://www.lastpass.com

Export: More Options > Advanced > Export

Command: pass import lastpass file.csv

myki (csv)¶

Website: https://myki.com

Export: See this guide: https://support.myki.com/myki-app/exporting-your-passwords-from-the-myki-app/how-to-export-your-passwords-account-data-from-myki

Command: pass import myki file.csv

network-manager (nm)¶

Website: https://wiki.gnome.org/Projects/NetworkManager

Support import from the installed network configuration but also from a specific directory of NetworkManager configuration file or from a given file.

Example:

- From directory of ini file: pass import networkmanager dir/.

- From ini file: pass import networkmanager file.ini.

Export: Also support specific networkmanager dir and ini file

Command: pass import networkmanager

nordpass (csv)¶

Website: https://nordpass.com/

Export: Settings > Export Items

Command: pass import nordpass file.csv

padlock (csv)¶

Website: https://padloc.app

Export: Settings > Export Data and copy text into a .csv file

Command: pass import padlock file.csv

pass (pass)¶

Website: https://passwordstore.org

Export: Nothing to do

Command: pass import pass path/to/store

passman (csv)¶

Website: https://passman.cc

Export: Settings > Export credentials > Export type: CSV

Command: pass import passman file.csv

passman (json)¶

Website: https://passman.cc

Export: Settings > Export credentials > Export type: JSON

Command: pass import passman file.json

passpack (csv)¶

Website: https://www.passpack.com

Export: Settings > Export > Save to CSV

Command: pass import passpack file.csv

passpie (yaml) v1.0¶

Website: https://www.enpass.io

Export: passpie export file.yml

Command: pass import passpie file.yml

pwsafe (xml)¶

Website: https://pwsafe.org

Export: File > Export To > XML Format

Command: pass import pwsafe file.xml

revelation (xml)¶

Website: https://revelation.olasagasti.info

Export: File > Export: XML

Command: pass import revelation file.xml

roboform (csv)¶

Website: https://www.roboform.com

Export: Roboform > Options > Data & Sync > Export To: CSV file

Command: pass import roboform file.csv

safeincloud (csv)¶

Website: https://safeincloud.ladesk.com/

Export: File > Export > Comma-Separated Values (CSV)

Command: pass import safeincloud file.csv

saferpass (csv)¶

Website: https://saferpass.net

Export: Settings > Export Data: Export data

Command: pass import saferpass file.csv

upm (csv)¶

Website: http://upm.sourceforge.net

Export: Database > Export

Command: pass import upm file.csv

zoho (csv)¶

Website: https://www.zoho.com/vault

Export: Tools > Export Secrets: Zoho Vault Format CSV

Command: pass import zoho file.csv

zoho (csv)¶

Website: https://www.zoho.com/vault

Export: Tools > Export Secrets: Zoho Vault Format CSV

Command: pass import zoho file.csv

AUTHORS¶

pimport was written by Alexandre Pujol (alexandre@pujol.io).

February 2024

Source file:	pimport.1.en.gz (from pass-import 3.5-2.2)
Source last updated:	2024-03-15T09:04:14Z
Converted to HTML:	2024-12-27T01:08:57Z