Migration

Switch from Safari to HexVault

2 min · Export from Safari, import to HexVault

Moving your passwords out of Safari (iCloud Keychain) into HexVault takes about five minutes. Export a CSV, import it, then turn off Keychain’s autofill if you want a single source of truth.

Where to import: open your HexVault vault and go to Settings → Data → Import Passwords, choose Safari, and drop in the file you export below.

Step 1 — Export from Safari

  • On macOS, open Settings → Passwords.
  • Open the three-dot menu and choose Export All Passwords.
  • Save the .csv file.

Handle the export file carefully. It is unencrypted plaintext — anyone who opens it has your passwords. Keep it only as long as the import takes, then delete it and empty your trash.

Step 2 — Import into HexVault

  • Open HexVault and go to Settings → Data → Import Passwords.
  • Choose Safari as the source.
  • Drop in the CSV file you just exported. HexVault parses it and re-encrypts every entry in your browser with your master password before anything is sent — we only ever receive ciphertext.
  • Review the preview and confirm.

Why move off Keychain

iCloud Keychain is well-built but Apple-only: it does not travel cleanly to Windows or Android, and Apple manages the keys via iCloud rather than a separate zero-knowledge master password you control. If your devices are mixed, a dedicated manager gives you one vault everywhere, only you can decrypt.

Step 3 — After you import

  • Delete the export file and empty your trash — it is plaintext.
  • Run a security check. HexVault flags reused, weak, and breached passwords so you can fix the worst first.
  • Turn on two-factor for your HexVault account.

Import happens in your browser: your file is parsed and re-encrypted locally with your master password before anything is sent. Your key is derived with Argon2id and entries are sealed with AES-256-GCM. How the encryption works →  ·  All import sources →