# LastPass Migration Guide

Export your LastPass vault as CSV and import it into DVE.

## Prerequisites

- LastPass account with export permission (some enterprise policies restrict export)
- DVE **IT Admin** or **Super Admin** role
- LastPass browser extension or desktop app logged in
- Master password available to unlock the vault for export

## Step-by-step export from LastPass

1. Log in to **LastPass** (browser extension or lastpass.com).
2. Open **Account Options** (your account avatar → **Account Settings**).
3. Go to **Advanced → Export**.
4. Confirm with your **master password** when prompted.
5. Choose **LastPass CSV** export.
6. Save the `.csv` file to an encrypted local folder.

The export contains **plaintext passwords**. Do not email it or store it in cloud sync folders longer than necessary.

## LastPass CSV column reference

Typical LastPass CSV headers:

| Column | Meaning |
|--------|---------|
| `url` | Site URL (`http://sn` for secure notes) |
| `username` | Login username |
| `password` | Password value |
| `extra` | Notes / extra fields |
| `name` | Item title |
| `grouping` | Folder name (flat, not nested paths) |
| `fav` | `1` if marked favorite |
| `totp` | TOTP seed when configured |

## Secure note handling

LastPass stores secure notes with the URL **`http://sn`**. DVE detects this value and imports the row as a **`secure_note`** credential (not a login).

## Known limitations and quirks

- **Folder structure is flattened** — LastPass `grouping` becomes a single folder name; nested paths are not preserved.
- **Form-fill profiles and identities** may import as `other` or partial data — review after import.
- **Shared folders** export as plain rows without sharing metadata — reassign access in DVE.
- **Attachments** are not included in CSV export.

## DVE field mapping

| LastPass CSV column | DVE field | Notes |
|---------------------|-----------|-------|
| `name` | `name` | Required |
| `username` | `username` | Empty for secure notes |
| `password` | `password` | Empty for secure notes |
| `url` | `url` | Null when `http://sn` (secure note) |
| `extra` | `notes` | Free-text notes |
| `grouping` | `folder` | Single folder level |
| `fav` | `tags` | `favorite` tag when `fav=1` |
| `totp` | `totp_secret` | Validated during import |
| `http://sn` in `url` | `credential_type` | Set to `secure_note` |

## Import into DVE

1. Open **Import** in the DVE admin console.
2. Select source format **LastPass CSV**.
3. Upload your `.csv` file and start the job.
4. Review warnings for rows with missing names or invalid TOTP values.

## Post-import verification checklist

- [ ] Record count matches your LastPass item count (± skipped empty rows).
- [ ] Secure notes appear without URLs.
- [ ] Folder names from `grouping` appear in DVE.
- [ ] Favorites show the `favorite` tag where expected.
- [ ] Test one login on a non-production site.
- [ ] Delete the CSV export and clear browser download history if needed.
- [ ] Turn off LastPass auto-fill for migrated users.

## Related guides

- [Migration Overview](overview.md)
- [Bitwarden Migration Guide](bitwarden.md)
- [Generic CSV Migration Guide](generic-csv.md)