What happens when your password manager’s renewal email lands in your inbox and the price feels harder to justify than it did two years ago? That moment sends a lot of people searching for 1Password alternatives. The tricky part isn’t picking a new app. It’s moving hundreds of logins without locking yourself out, losing your two-factor codes, or leaving a plaintext file of passwords sitting in your Downloads folder.
This guide walks through the realistic options, the actual setup steps, and the mistakes that trip people up.
Why People Look Beyond 1Password
1Password is a polished product, and its subscription-only model has been in place since the company stopped selling standalone licenses around 2018. That model works well for families and teams. But it also means there’s no free tier, and the cost stacks up if you’re paying for multiple services already.
Common reasons for switching include:
- Cost: a household already paying for cloud storage and streaming may want a free or cheaper vault.
- Open source: some users want to inspect the code or self-host.
- Offline-first: travelers and privacy-focused users may prefer a local encrypted file over cloud sync.
- Bundle fit: someone already paying for a bundle may get a password manager included.
If price is the main driver, it helps to know exactly what you’re leaving behind. A breakdown of how much 1Password costs across individual and family plans gives you a baseline to compare against.
The Main Alternatives at a Glance
| Manager | Model | Free Tier | Best For | Watch Out For |
|---|---|---|---|---|
| Bitwarden | Open source, cloud or self-hosted | Yes, unlimited items | Budget users, teams, self-hosters | Interface feels more utilitarian |
| KeePassXC | Open source, local file (KDBX) | Fully free | Offline-first, maximum control | You handle sync and backups yourself |
| Proton Pass | Closed source, cloud | Yes, limited | Proton suite users, email aliases | Newer than the big players |
| Dashlane | Commercial, cloud | Limited | Polished UX, built-in VPN bundle | Free tier is restrictive |
| NordPass | Commercial, cloud | Limited | Simple interface, Nord suite users | Fewer power-user features |
The right pick depends on how much friction you’ll tolerate. A free tier with a device cap can be worse than paying, because you end up juggling two vaults.
Option 1: Bitwarden Setup
Bitwarden is the default recommendation for most switchers. It’s open source, its clients and server code are published publicly, and the free tier covers unlimited passwords with sync across devices. Paid tiers add features like integrated TOTP and emergency access.
Step-by-step
- Create the account at the official Bitwarden site. Use a strong, unique primary password and write it down physically before you go further.
- Enable two-step login immediately. An authenticator app is better than email codes.
- Export from 1Password as a CSV file. In 1Password, this lives under the export option in your account settings.
- Import into Bitwarden using the web vault’s import tool. Select the 1Password CSV format so fields map correctly.
- Delete the CSV file and empty your trash. A CSV export is unencrypted plaintext, and this is the single most common security mistake in any migration.
- Install the browser extension and mobile app, then sign in and confirm sync.
- Set up a backup: export an encrypted JSON copy and store it offline.
Practical tips
- Import into a folder first, review the entries, then move them into your main vault.
- Check that TOTP seeds transferred. Many CSV exports don’t carry them, so you may need to re-scan QR codes.
- If you self-host, run the official server project behind HTTPS and keep regular encrypted backups.
Option 2: KeePassXC Setup
KeePassXC is a free, open-source desktop manager that stores everything in a local encrypted database file, usually with the KDBX extension. There’s no cloud account and no subscription. Sync is whatever you make it: a cloud drive folder, Syncthing, or a USB stick.
Step-by-step
- Install KeePassXC from its official site or your package manager.
- Create a new database and set a strong primary password. Consider adding a key file stored separately for extra protection.
- Import your 1Password CSV through the import wizard.
- Save the database somewhere you control, then copy it to your sync folder.
- Set up mobile access with a compatible client such as KeePassDX on Android or Strongbox on Apple devices.
- Test a restore from your backup before you trust the setup.
Practical tips
- Never sync a KDBX file through a service that keeps unlimited version history without thinking it through. Old versions of the file may still contain deleted entries.
- Keep two backups in different locations. A corrupted database with no backup is a disaster.
- Browser integration requires a browser extension and a native messaging helper. Set it up deliberately rather than assuming it works out of the box.
KeePassXC rewards people who like control. It punishes people who forget backups. If you’re not going to maintain backups, pick a cloud manager instead.
Option 3: Proton Pass Setup
Proton Pass launched in 2023 and fits into the wider Proton product line. It supports email aliases through SimpleLogin, which Proton acquired in 2022. That alias feature is genuinely useful for people tired of handing out their real address.
Step-by-step
- Create or sign in to a Proton account.
- Install the browser extension and the mobile app.
- Import your CSV through the settings import tool.
- Enable two-factor authentication on the Proton account itself.
- Set up aliases for shopping and newsletter signups.
If you’re weighing this against the market leader, a direct Proton Pass vs 1password comparison covers the feature gaps more thoroughly than a quick skim of pricing pages will.
Option 4: Dashlane and NordPass
Both are commercial, closed-source services with free tiers that are more limited than Bitwarden’s. Dashlane has historically capped its free plan, and NordPass has done the same. Those caps change, so check the current pricing page before committing.
The setup pattern is nearly identical to Bitwarden: create the account, enable 2FA, export CSV from 1Password, import, verify, delete the export. The difference is in the extras, like bundled VPN access or dark web monitoring.
For a wider feature comparison across these tools, the 1password vs keeper breakdown is a useful reference point, and if you’re also reconsidering your broader security stack, the same logic applies to 1password vs proton pass trade-offs.
The Migration Checklist That Actually Works
Most migration failures come down to four things: a lost primary password, missing TOTP codes, an orphaned CSV, and no backup.
Before you export
- Inventory your vault. Count entries and note which ones have TOTP codes, secure notes, or attached files. CSV exports often drop attachments entirely.
- Write down your 1Password primary password and keep it until the migration is verified. You’ll need it to re-export if something goes wrong.
- Check your recovery options. Make sure you can receive email at the address tied to your account.
During the import
- Import into a staging folder, not your main vault. Review entries with missing usernames or broken URLs.
- Re-scan TOTP QR codes for critical accounts like banking and email. Do this before you delete anything.
- Verify a sample of ten logins by actually signing in through the browser extension.
After the import
- Delete the CSV securely. Standard deletion isn’t enough on some systems; use a secure erase tool or overwrite the file.
- Keep 1Password active for at least two weeks. This is your safety net.
- Update recovery information in your new manager, including emergency access contacts if the plan supports it.
Common Mistakes to Avoid
Using the same primary password. It’s tempting during a rushed migration. Don’t. A password manager’s primary password should be the strongest credential you own.
Skipping the 2FA setup. A vault without two-factor authentication is one phishing page away from compromise. Enable it on day one, not week three.
Storing TOTP seeds in the same vault as passwords. This is a real trade-off. Convenience goes up, but the second factor loses independence. If your threat model includes account takeover, keep TOTP in a separate authenticator app.
Ignoring passkey support. Passkey storage and export vary by manager, and cross-manager portability is still limited. Check whether your chosen manager supports passkeys before you commit, especially if you’ve already started creating them.
Forgetting family members. If you share a vault, everyone needs to migrate. A family plan where one person switched and three didn’t is a support headache waiting to happen.
Trusting a single backup. Two copies in two locations is the minimum. One copy is a single point of failure.
Which Alternative Should You Pick?
If you want free, reliable, and low-maintenance, Bitwarden is the safest default. If you want total control and don’t mind maintaining backups, KeePassXC delivers it. If you’re already inside the Proton suite and want aliases, Proton Pass fits naturally. Dashlane and NordPass make sense mainly if you value their bundled extras. (NIST Cybersecurity Framework)
The honest answer is that switching costs more effort than staying, and that’s fine. The point of a migration is to end up somewhere you’ll actually maintain. A free tier you abandon in three months is worse than a paid plan you use daily.
Conclusion
Moving off 1Password isn’t complicated, but it is detail-heavy. The sequence matters: export carefully, import into a staging area, re-establish two-factor codes, verify real logins, delete the plaintext file, and keep the old vault alive until you’re confident. Pick the alternative that matches how much maintenance you’re willing to do, then set it up properly the first time. The ten minutes you spend on backups and 2FA today will save you a very bad afternoon later.
Frequently Asked Questions
Is Bitwarden really free?
Yes, the free tier includes unlimited password storage and sync across devices. Paid tiers add extras like integrated TOTP and emergency access, but the core product is usable without paying. Pricing and features change, so confirm on the official site before you commit.
Can I import my 1Password data into another manager?
Yes. Most managers accept a CSV export from 1Password. The catch is that CSV files are unencrypted plaintext and often drop attachments and TOTP seeds. Import promptly, verify the entries, then securely delete the file.
Is KeePassXC safe for beginners?
It’s safe, but it requires discipline. There’s no cloud account to recover your data, so a forgotten primary password or a lost database file means permanent loss. Beginners should only choose it if they’ll maintain regular backups in two locations.
What happens to my two-factor codes during a switch?
Many CSV exports don’t include TOTP seeds. You’ll need to re-scan QR codes for accounts that use authenticator-based 2FA. Do this before deleting your old vault, and consider keeping TOTP in a separate app for better security.
Should I keep 1Password after switching?
Yes, for at least two weeks. Keep it active as a fallback while you verify that every important login works in the new manager. Cancel only after you’ve confirmed a clean backup exists and critical accounts are accessible.
Do these alternatives support passkeys?
Support varies by manager and platform, and cross-manager passkey portability is still limited. Check your chosen manager’s current documentation before relying on it for passkey storage, since this area changes quickly. (Password manager)
