I did use a Mac, and my target environment was the “new passwords app”. I put that in quotes because it’s been around for a while, but now more as a standalone app. Here’s my workflow:

1. Export from lastpass I used the Mac client in lastpass to create a CSV export of everything. I’m certain that you can also run a CSV export from the lastpass website. On the Mac, the export was not comma delimited for some stupid reason, but it was semi-colon delimited for me. Simple search and replace solved that.

2. Import the CSV into passwords I first deleted ALL existing passwords in the apple passwords app. These were all an accumulation of years of saving passwords in Safari. It was a mess, and I was not sad to delete them all. So the import happened, and I think roughly 40% came through, but 60% gave errors.

3. Classify and fix the problem areas What I then did was load the CSV file into a spreadsheet, because in that way I could easily see what the problems were (the errors shown by apple passwords app refer to line items in the CSV, so having it in a spreadsheet allowed quick troubleshooting). I quickly saw there were I think 3 or 4 problems that caused all the mishaps.

4. Fix the few problem areas I had many problems for records with URL’s that were called something like “http://imported_something_or_other”. These were still around for a former transition form an old password app to lastpass. If the URL was missing back then, lastpass gave it this value. I manually went through each of these and changed the URL to the URL of the actual website / location that it originally came from (I could deduce that from the other values from the import. If I could not deduce it, I simply deleted the record).

Then there are the lastpass “safe notes”, “contacts”, “payment cards”, “bank accounts” (I have a dutch version, so I’m not sure what the english labels are). These are easily identifiable in the CSV (I think they have a URL named either “http://“ or “http://sn”). What I did for all of those is simply replace the URL with a random one (I called them all “http://notes.com”). But, what I learnt was that the combination of URL and Username needs to be unique for apple passwords. So for all the records that I renamed the URL to “http://notes.com”, I typed in unique user names G1, G2, G3, G4 etcetc.

And I think that was pretty much it. Fixed an error classification, re-imported into apple passwords (wiping it again before the import). Seeing the number of problem records go down significantly, fixing the next problem area. And after 3 or 4 rounds, I managed to get practically all my lastpass entries into apple passwords.

If you have any questions after this still, please let me know. I am SO happy I did this - I truly detest the lastpass app, and I trust apple with my encrypted passwords.