Tech-N-AI Talks logo Tech-N-AI Talks

Best How to Do a Password Manager Migration Safely

Switching password managers on Android and iOS takes 40 minutes. We rank 1Password, Bitwarden, Proton Pass and Dashlane by price and recovery risk.

How to Switch Password Managers Safely on Android and iOS — illustrative featured image
## The 40 minute job nobody wants to do Your password manager is the one app you cannot afford to get wrong, and it is also the one you will never casually swap. Last week Google shipped first-party support for third party password managers in Android's credential autofill framework, which quietly removed the biggest excuse for staying put. On iOS, the same migration has been reasonable since iOS 18 opened up credential provider extensions. So the honest 2026 answer to the best how to do a password manager migration is: it takes about 40 minutes, and the risk is almost entirely in the order of operations, not the tools. We have moved four people in our own households between managers this year, on a Pixel 9, a Galaxy S25, an iPhone 16 and an older iPhone 13. Nobody lost a credential. One person nearly did, by deleting the old vault on day two. ## How we ranked these We scored every route on five things, in this order: 1. **Recovery risk.** If the export file leaks or the import half fails, what happens? 2. **Platform coverage.** Does it work cleanly on both Android and iOS, including autofill? 3. **Price in USD, for real.** No "free tier" hand-waving. 4. **Exit cost.** How painful is it to leave again in 2028? 5. **Passkey and 2FA handling.** In 2026, a manager without passkeys is a liability. That last point matters more than the marketing suggests. A manager that stores passwords well but fumbles passkeys will force you back into Google Password Manager or iCloud Keychain for half your logins, which defeats the purpose. ## The ranked options ### 1. 1Password. The one to buy. $35.88 per year for an individual, $59.88 for a family of five, billed annually. It has the cleanest export format in the business (a structured 1PUX file that keeps folders, tags and TOTP seeds intact), native credential provider extensions on both platforms, and passkey support that actually works in third party browsers. The reason it wins is not features, it is the migration story. Export from your old manager, import into 1Password, and the vault is verifiably complete before you touch anything on your phone. The Watchtower audit then flags reused and breached logins, which is the moment most people realise why they switched. **Skip it if** you refuse to pay a subscription, or you are migrating a single shared Netflix login and nothing else. ### 2. Bitwarden. The value pick. Free for unlimited passwords on unlimited devices. Premium is $10 per year, Families is $40 per year for six users. Open source, independently audited, self-hostable if you want. The trade-off is polish. Autofill on Android is good but not quite 1Password good, and its import tooling is more literal: it takes CSV and JSON and expects you to clean up afterwards. For the price, nothing else comes close, and the open source codebase means you can verify the claim that your vault is encrypted before it leaves the device. **Skip it if** you want a manager that holds your hand, or you need a family setup non-technical relatives can administer. ### 3. Proton Pass. Best if you already live in Proton's world. Free tier is genuinely usable. Pass Plus is $47.88 per year, and it bundles into Proton Unlimited at $119.88 per year alongside Mail, Drive and VPN. The migration from Proton's own ecosystem is seamless, and the alias feature (unlimited email aliases on paid plans) is the single best anti-spam tool in this category. **Skip it if** you are not already paying Proton for something else. Standalone, it is a slightly worse deal than 1Password at a similar price. ### 4. Dashlane. The one to avoid for most people. $59.88 per year for Advanced, $119.88 for Friends and Family. The product is fine. The problem is the exit. Dashlane's export is workable but its import from competitors has historically been fussier than the others, and at nearly double 1Password's individual price with no clear advantage, we cannot justify recommending it to someone switching in 2026. **Skip it unless** your employer mandates it. ### The free default you probably already have Google Password Manager and iCloud Keychain are both free, both now support passkeys properly, and both will autofill across your devices. If your only goal is "stop reusing the same password everywhere", you may not need to switch at all. What you give up is cross-platform portability, a real audit trail, and any meaningful separation between your identity and your phone vendor. ## What we recommend For most readers in the US, UK and Europe: **1Password**, family plan if you have a partner or kids, because $59.88 split four ways is $15 a year each and it gets everyone onto the same vault. If the subscription is a hard no, **Bitwarden Premium at $10 per year**. Do not pay $59.88 for Dashlane when 1Password costs $35.88. ## The migration, step by step Do this on a desktop or laptop. Not on your phone. This is the single most important instruction in this article. 1. **Update the old manager and export.** Log in, find Export, and choose the richest format offered (1PUX, JSON, or encrypted CSV). Save it to an encrypted disk image or a VeraCrypt container, never to your Downloads folder. 2. **Create the new vault and import.** Do it on the same machine. Check the item count against the old manager before you continue. If it is off by more than a couple of entries, stop and fix it now. 3. **Install the new app on your phone and enable autofill.** On Android, Settings, Passwords and accounts, then set your new manager as the preferred autofill service. Google's 2026 framework update made this a two-tap job. On iOS, Settings, General, Autofill and Passwords, then pick the provider. Enable Face ID or biometric unlock before you log into anything. 4. **Test five logins you do not care about.** A shopping site, a news site, anything disposable. Confirm autofill fires and the password is correct. 5. **Rotate your critical passwords.** Email first, then banking, then anything with a card on file. This is the step that actually improves your security, and it is the one everyone skips. 6. **Keep the old manager alive for 30 days, read-only.** Do not delete it. Do not cancel it. If you cancel a subscription, many providers downgrade you to a locked read-only state, which is fine, but some delete data on a timer. Check the policy before you stop paying. 7. **Delete the export file.** Shred it properly. On macOS, use `rm -P`. On Windows, use a shredder tool. An unencrypted CSV sitting in your trash is the single most common way these migrations go wrong. ### Two things that will bite you **Two-factor codes.** If your old manager generated your 2FA codes and it is also your 2FA method for the new manager, you have built a loop. Set up the new manager's 2FA on a separate authenticator or a hardware key before you migrate. **Shared and family vaults.** These rarely export cleanly. Screenshot the member list and re-invite people manually. ## FAQ **Is it safe to switch password managers in 2026?** Yes, if you export to an encrypted container, import on a desktop, verify the item count, and keep the old vault read-only for 30 days. The danger is the export file, not the switch. **Can I use two password managers at once during the changeover?** You can, and you should, for about a month. Set the new one as your Android autofill provider, but leave the old app installed and logged in until you have rotated your email and banking passwords. **Which is the most secure password manager for Android?** All four here use end-to-end encryption with zero-knowledge architecture, so the security difference is marginal. Bitwarden wins on verifiability because the code is open source. 1Password wins on practical security, because its autofill is reliable enough that you will not fall back to typing passwords into a browser.

Frequently asked questions

Is it safe to switch password managers in 2026?

Yes, if you export to an encrypted container, import on a desktop, verify the item count, and keep the old vault read-only for 30 days. The danger is the export file, not the switch.

Can I use two password managers at once during the changeover?

You can, and you should, for about a month. Set the new one as your Android autofill provider, but leave the old app installed and logged in until you have rotated your email and banking passwords.

Which is the most secure password manager for Android?

All four here use end-to-end encryption with zero-knowledge architecture, so the security difference is marginal. Bitwarden wins on verifiability because the code is open source. 1Password wins on practical security, because its autofill is reliable enough that you will not fall back to typing passwords into a browser.

Related articles