BlogReleasesIssuesDocsDownloadsStatusLooking GlassContact Sales

Import

Open your vault and go to Import. There are three ways in: a file, a TOTP QR code, or a pasted entry. Files are read and encrypted in your browser, and the vault receives the entries already sealed.

From another password manager

Export your data from the other manager, then drop the file on Drop a file (or click the card to choose it). Accepted files are .csv, .json, .zip, .txt, .xml, .1pux and .clvx.

The importer recognises exports from Proton Pass, Bitwarden, 1Password, LastPass, Dashlane, KeePass, KeePassXC, NordPass, Keeper, RoboForm, Enpass, Safari, Chrome and Firefox. Chromium-based browsers such as Edge and Brave export in the Chrome format. The format is detected from the file's contents; you do not pick it.

Next, choose how to import:

  • Smart import sorts entries into scopes by domain and recognises API keys. If it finds API keys in notes or fields, you choose whether to copy them into separate API Key entries (the default), move them, or leave them where they are.
  • Basic import brings everything in as is, with no classification.

You then see a preview. Duplicates inside the file are merged and the newest copy is kept. Untick anything you do not want, then click Import →. When it finishes, the page reports how many entries were imported, updated, skipped or failed.

What Smart import sends to Clavitor

Smart import asks a classifier for help. The browser sends the request to clavitor.ai, which passes it to a hosted language model (Fireworks AI) and caches the answer. Basic import sends nothing. With Smart import:

  • The domain names found in the entries' URLs, and in titles that look like domains, are sent.
  • For entries with no URL, the entry's title and its notes are sent too, so the model can guess the service. API keys the importer detects in those notes are masked first.
  • Passwords and other field values are not sent.

If your notes hold secrets the importer would not recognise as API keys, use Basic import.

A TOTP QR code

On Scan a TOTP QR, click Scan with camera → and hold up the QR code. If you only have a screenshot, click Choose a screenshot, paste the image with Ctrl+V, or drop it on Drop a file. Both otpauth:// codes and Google Authenticator's export codes (otpauth-migration://) work. Each code becomes a TOTP entry.

From another Clavitor vault

  • A Clavitor export (.clvx). Drop the file and enter the export password. The file is opened in your browser.
  • A single entry. In the other vault, open the entry and click Copy without secrets. Paste the JSON into Paste JSON and click Import pasted entry. The title, URLs and plain fields arrive. Passwords and other secrets do not.

After the import

Check the scopes Smart import gave your entries before you enroll an agent, because scopes decide which entries an agent can reach.