Plan and verify password manager migrations using metadata and checklists, without handling actual passwords or vault secrets.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install password-manager-migrator
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install password-manager-migrator using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Password Manager Migrator?
Password Manager Migrator helps you switch between or merge Bitwarden, 1Password, KeePass, Chrome or Safari, and Proton Pass vaults with fewer surprises. It identifies recommended migration routes, explains what may be lost, generates field-mapping guidance, inventories TOTP re-enrollment risks, and supports a post-migration audit.
Unlike tools that process vault contents, this skill works from formats, counts, and metadata you provide. It runs offline with Python 3 and the standard library, making it a practical addition to Openclaw Skills for security-conscious vault migrations.
Password Manager Migrator Use Cases
- Switching between supported password managers and choosing a native, JSON, or CSV route.
- Merging personal, inherited, couple, or work vaults while planning duplicate handling.
- Checking which TOTP entries need site-by-site re-enrollment before retiring the old vault.
- Auditing pre- and post-migration item counts, duplicate totals, and weak-entry flags.
- Preparing a field-mapping worksheet and tracking attachment or account-sharing items that need manual attention.
How Password Manager Migrator Works
- Plan the route: Specify the source and destination managers, and whether the move is a merge. Review the suggested import path, transfer limitations, checkpoints, and rollback guidance.
- Map fields and conflicts: Generate a CSV worksheet and apply the stated duplicate precedence: newer modified dates generally win, while conflicts are flagged for manual review rather than silently merged.
- Inventory TOTP risks: Identify migration paths where TOTP data may not survive and create a re-enrollment checklist before deleting or disabling the source vault.
- Perform the migration in the password managers: Follow the plan using the managers' own export and import tools; this skill does not handle or inspect secret values.
- Audit the result: Provide pre- and post-migration counts, duplicate totals, and weak-entry flags to receive a verification verdict and residual-risk list.
- Complete the cutover safely: Verify representative logins and attachments, secure-delete plaintext exports, and keep the old vault read-only for 30 days.
Password Manager Migrator Setup
The skill requires Python 3 and uses only the standard library. It runs offline and does not require network access, credentials, or secret values. Run the commands from the skill directory where scripts/vault_migrate.py is available; no separate package installation is specified.
# Plan a Bitwarden to 1Password migration
python3 scripts/vault_migrate.py plan --from bitwarden --to 1password
# Plan a Bitwarden vault merge
python3 scripts/vault_migrate.py plan --from bitwarden --to bitwarden --merge
# Review TOTP risks for a CSV-based migration
python3 scripts/vault_migrate.py totp --via csv
# Generate a KeePass to Bitwarden field-mapping worksheet
python3 scripts/vault_migrate.py worksheet --from keepass --to bitwarden
# Audit migration counts and residual flags
python3 scripts/vault_migrate.py audit --pre-logins 412 --post-logins 398 \\
--pre-notes 55 --post-notes 55 --pre-cards 9 --post-cards 9 \\
--duplicates 41 --weak-left 23
Never paste passwords, TOTP seeds, or other live secrets into the workflow. Keep any plaintext export out of cloud-synced folders and secure-delete it after the migration has been verified.
Password Manager Migrator Data Schema & Taxonomy
The workflow is metadata-based: it accepts manager names, migration options, item counts, duplicate counts, and weak-entry counts. It does not read or store actual vault secrets.
| Artifact or input | Purpose |
|---|---|
| Route plan | Recommended migration path, expected transfers and losses, ordered steps, checkpoints, and rollback guidance. |
| Field-mapping worksheet | CSV template for mapping source fields to destination fields. |
| TOTP inventory and re-enrollment list | Tracks entries that may not transfer and sites requiring 2FA re-enrollment. |
| Audit inputs | Pre- and post-migration counts by item type, plus duplicate and weak-entry totals. |
| Audit result | Verification verdict and a list of residual risks to investigate. |
| Reference files | references/route-matrix.md covers route details and importer quirks; references/audit-worksheet.md covers dedupe rules, conflict handling, TOTP re-enrollment, and cutover guidance. |
The encoded route guidance accounts for format-specific differences: for example, Chrome CSV retains only URL, username, and password, while other routes may preserve more fields but still lose attachments, folder structure, tags, icons, history, or other metadata.
Password Manager Migrator Advanced Features
- Route comparison across supported managers, including guidance that favors native import where suitable and warns about JSON or CSV trade-offs.
- Merge planning with modified-date precedence and explicit manual review for conflicts; the guidance warns that CSV export dates can undermine modified-date comparisons.
- TOTP risk inventory that highlights accounts requiring re-enrollment before the old vault is removed.
- Count-based post-migration audit for logins, notes, cards, duplicates, and weak leftovers.
- Operational safeguards, including keeping the old vault read-only for 30 days, checking attachment counts, and testing real logins after import.
- Offline, standard-library-only Python operation with no network calls and no need to provide secret values; this skill does not advertise hooks or multi-agent features.
SKILL.md
Loading
Related Openclaw Skills
Snow Shoveling Strategist
Turn driveway measurements and storm conditions into a practical snow-clearing plan that helps reduce unnecessary lifting, repeat work, and avoidable risk.
Script the Mechanics
Script the Mechanics moves repetitive, checkable work into small scripts so AI agents get exact results with less input to read.
CSV Brief
CSV Brief profiles CSV files and turns the computed statistics into a concise, plain-English brief.
Lowdown MCP Lookup
Retrieve recent, read-only observations about an MCP Registry server without calling its tools or requiring an API key.
Houseplant Watering Computer
Calculate how much and how often to water each houseplant from its pot, soil, plant size, and room conditions—not a generic calendar.
Mattress Spec Decoder
Turn confusing mattress marketing into practical, body-specific guidance on firmness, materials, durability, comparisons, and warranty coverage.
Featured*
