Why UK Users Are Migrating from LastPass to Proton Pass
Before we get into the technical stuff, let's talk about why this migration matters. LastPass has had a rough few years. The 2022 breach was particularly nasty, attackers accessed encrypted password vaults, and while the encryption held, it exposed some serious questions about how LastPass handles security.
For UK users specifically, there's another angle worth considering. LastPass is a US-based company, which means it operates under American jurisdiction. That matters more than you might think, especially after the Investigatory Powers Act raised questions about how UK data gets handled by foreign companies.
Proton Pass, on the other hand, is based in Switzerland. Swiss privacy laws are among the strongest in the world, and the company has a solid track record with its VPN and email services. The entire codebase is open-source, which means security researchers can actually verify that the encryption works as advertised.
73%
of UK users prioritise privacy when choosing password managers
Plus, if you're already using ProtonVPN or ProtonMail, Proton Pass integrates beautifully. You get a unified ecosystem that's all built around the same privacy-first philosophy. Speaking of which:
Proton VPN from £3.59/mo→
What You Need Before Migrating from LastPass to Proton Pass
Right, let's get practical. Before you start migrating from LastPass to Proton Pass, you'll need a few things sorted:
- Active LastPass accountYou need access to your vault to export the data
- Proton accountSign up at proton.me if you haven't already (the free tier works fine for migration)
- Secure computerDon't do this on a public machine or shared device
- 30 minutes of uninterrupted timeYou don't want to rush this process
- Backup of your LastPass master passwordWrite it down somewhere safe, just in case
⚠️ Warning: The export file from LastPass contains your passwords in plain text. Make sure you're on a secure network (ideally your home Wi-Fi, not public Wi-Fi) and delete the CSV file immediately after importing it into Proton Pass.
One more thing: if you're using a VPN, make sure it's connected before you start. This adds an extra layer of security during the transfer process. NordVPN works brilliantly for this kind of sensitive operation:
NordVPN from £12.99/mo→
Step-by-Step: Migrating from LastPass to Proton Pass
Alright, here's where the actual work happens. I'm going to walk you through this step-by-step, exactly as I'd do it myself.
Step 1: Export Your LastPass Vault
First, you need to get your data out of LastPass. Here's how:
- Log into your LastPass vault through the browser extension or web interface
- Click on 'Advanced Options' in the left sidebar (you might need to scroll down)
- Select 'Export' from the menu
- Enter your master password when prompted
- Your vault will download as a CSV file, usually called something like 'lastpass_export.csv'
The file will land in your Downloads folder. Don't open it in Excel or any other programme. Just leave it there for now.
💡 Pro Tip: Some users report that the export option doesn't appear in the browser extension. If that happens, use the LastPass web vault instead, it's more reliable for exports.
Step 2: Set Up Your Proton Pass Account
If you haven't already got a Proton account, head to proton.me and sign up. The free tier is perfectly adequate for most users, though the paid plans offer some nice extras like unlimited hide-my-email aliases.
Once you're in, download the Proton Pass browser extension for Chrome, Firefox, or whatever you're using. Install it and log in with your Proton credentials.
You'll be prompted to create a Proton Pass-specific password. This is separate from your main Proton account password. Make it strong, at least 16 characters, mix of upper and lower case, numbers, and symbols. Don't reuse any old passwords.
Step 3: Import Your LastPass Data into Proton Pass
This is the crucial bit. Migrating from LastPass to Proton Pass happens here:
- Open the Proton Pass extension in your browser
- Click the menu icon (three horizontal lines) in the top-left corner
- Select 'Settings' then 'Import'
- Choose 'LastPass' from the list of supported password managers
- Click 'Select a file' and navigate to your lastpass_export.csv file
- Click 'Import'
Proton Pass will churn through your passwords. Depending on how many you've got, this might take anywhere from a few seconds to a couple of minutes. You'll see a confirmation message when it's done, along with a count of how many items were imported.
Quick Answer
How long does migrating from LastPass to Proton Pass take? The actual import process takes 2-5 minutes for most users. Factor in another 10-15 minutes for setup, verification, and cleanup, and you're looking at about 20 minutes total.
Step 4: Verify Your Imported Passwords
Don't just assume everything worked perfectly. Take a few minutes to spot-check your imported data:
- Open a handful of random entries and make sure the usernames and passwords look correct
- Check that URLs are properly associated with each login
- Look for any duplicate entries (the import process sometimes creates these)
- Verify that folder structures carried over if you used them in LastPass
If something looks off, don't panic. You've still got your LastPass vault intact. You can always re-export and try the import again.
Step 5: Delete the Export File
This is critical. That CSV file sitting in your Downloads folder contains every single one of your passwords in plain text. Anyone who gets hold of it has the keys to your entire digital life.
Delete it. Right now. Don't just move it to the Recycle Bin, actually empty the bin too. On Windows, you can use Shift+Delete to permanently delete files. On Mac, empty the Trash after deleting.
If you're particularly security-conscious, use a file shredder tool to overwrite the data. But honestly, for most people, a standard delete is fine as long as you do it immediately.
What Doesn't Transfer When Migrating from LastPass to Proton Pass
Here's the thing nobody tells you upfront: not everything makes the journey from LastPass to Proton Pass. Some stuff requires manual intervention.
If you stored TOTP codes in LastPass (those six-digit codes that change every 30 seconds), they won't automatically transfer. You'll need to set them up again in Proton Pass.
The process is straightforward but tedious:
- Go to each website that uses TOTP
- Disable two-factor authentication temporarily
- Re-enable it and scan the QR code with Proton Pass instead of LastPass
- Save the new TOTP entry in Proton Pass
Yes, it's annoying. But it's also a good opportunity to audit which accounts actually need 2FA and which ones you've been protecting out of habit.
Secure Notes and Attachments
Secure notes usually transfer, but attachments often don't. If you stored files in LastPass, things like passport scans, insurance documents, or software licences, you'll need to manually add them to Proton Pass.
Proton Pass supports file attachments, but you'll need a paid plan. The free tier doesn't include this feature.
Form Fill Data
Address autofill, credit card details, and other form data might not transfer cleanly. Plan to re-enter these manually in Proton Pass. It's actually not a bad thing, gives you a chance to update any information that's changed since you first entered it in LastPass.
✅ Pros of Proton Pass
- End-to-end encryption with zero-knowledge architecture
- Swiss privacy laws protect your data
- Open-source code that's been independently audited
- Integrates seamlessly with ProtonVPN and ProtonMail
- Hide-my-email aliases included (paid plans)
- No history of major security breaches
❌ Cons of Proton Pass
- Newer product with fewer features than established competitors
- File attachments require paid subscription
- Mobile apps still catching up to desktop functionality
- Smaller user base means fewer community resources
Setting Up Security After Migrating from LastPass to Proton Pass
Once you've completed migrating from LastPass to Proton Pass, your first job is locking down your new password manager. Don't skip this bit.
Enable Two-Factor Authentication
Proton Pass supports multiple 2FA methods. I recommend using an authenticator app like Authy or Google Authenticator rather than SMS (which can be intercepted).
To set it up:
- Go to account.proton.me and log in
- Navigate to 'Account and password' settings
- Click 'Two-factor authentication'
- Choose 'Authenticator app'
- Scan the QR code with your authenticator app
- Enter the six-digit code to confirm
- Save your recovery codes somewhere safe (not in Proton Pass!)
⚠️ Warning: Write down your recovery codes and store them somewhere physical, a safe, a locked drawer, whatever. If you lose access to your authenticator app and don't have recovery codes, you're permanently locked out of your account. Proton can't help you because they don't have access to your data.
Review Your Master Password
Your Proton Pass master password is the single point of failure for your entire password vault. Make it bulletproof.
Good master passwords are:
- At least 16 characters long (longer is better)
- A mix of random words, numbers, and symbols
- Not based on personal information
- Unique to Proton Pass (don't reuse it anywhere else)
- Memorable enough that you won't forget it
Consider using the passphrase method: string together four or five random words with numbers and symbols between them. Something like 'Correct-Horse-Battery-Staple-7' is both strong and relatively easy to remember.
Configure Auto-Lock Settings
Tell Proton Pass to lock itself when you're not actively using it. I set mine to lock after 10 minutes of inactivity, but you might want it tighter or looser depending on your situation.
You can also configure it to lock when your browser closes, when your computer goes to sleep, or when you switch users. Find what works for your workflow.
What to Do With Your Old LastPass Account
Don't delete your LastPass account immediately after migrating from LastPass to Proton Pass. Seriously. Give yourself at least 30 days to make sure everything transferred properly and you're not missing anything critical.
During this transition period:
- Keep your LastPass subscription active (if you're on a paid plan)
- Don't add new passwords to LastPass, use Proton Pass for everything new
- Check LastPass occasionally to verify you've transferred everything important
- Make a note of any TOTP codes or secure notes you haven't moved yet
After 30 days, if you're confident everything's working properly in Proton Pass, you can delete your LastPass account. Here's how:
- Log into your LastPass vault
- Go to Account Settings
- Scroll down to 'Delete Account'
- Confirm the deletion
- You'll receive an email confirmation
If you're on a paid plan, make sure to cancel your subscription before deleting the account. Otherwise, you might get charged for another billing cycle.
Migrating from LastPass to Proton Pass on Mobile Devices
The desktop migration is the heavy lifting, but you'll also want Proton Pass working on your phone and tablet. The good news is that once you've imported your passwords on desktop, they sync automatically to your mobile devices.
For iOS:
- Download Proton Pass from the App Store
- Log in with your Proton credentials
- Go to Settings > Passwords > AutoFill Passwords
- Enable Proton Pass as your autofill provider
- Disable LastPass if it's still enabled
For Android:
- Download Proton Pass from the Google Play Store
- Log in with your Proton credentials
- Go to Settings > System > Languages & input > Autofill service
- Select Proton Pass
- Disable LastPass if it's still enabled
Give it a few minutes for everything to sync. If you've got hundreds of passwords, the initial sync might take a bit longer.
💡 Pro Tip: Enable biometric unlock (fingerprint or
Face ID) on your mobile devices. It's more secure than typing your master password on a small keyboard, and it's significantly more convenient.
Common Issues When Migrating from LastPass to Proton Pass
I've helped enough people through this process to know where things typically go wrong. Here are the most common problems and how to fix them:
Duplicate Entries
Sometimes the import process creates duplicate passwords for the same site. This happens when LastPass had multiple entries for one domain, or when the CSV export includes both active and deleted items.
Fix: Go through your Proton Pass vault and manually delete duplicates. Sort by website name to make them easier to spot. It's tedious, but it's worth doing to keep your vault tidy.
Missing Passwords
Occasionally, some passwords don't make the journey. This usually happens with entries that had special characters in the username or password fields that the CSV format didn't handle properly.
Fix: Cross-reference your LastPass vault with Proton Pass. If you spot missing entries, add them manually to Proton Pass. This is another reason to keep your LastPass account active for 30 days.
Incorrect URLs
Sometimes passwords import with the wrong website URL, or no URL at all. This breaks autofill functionality.
Fix: Edit the entries in Proton Pass and add or correct the URLs. Proton Pass is pretty good at suggesting the right URL based on the entry name, but you might need to manually verify a few.
Folder Structure Doesn't Transfer
If you organised your LastPass vault into folders, they might not carry over to Proton Pass in the same way.
Fix: Proton Pass uses 'vaults' instead of folders. You'll need to manually create new vaults and move items into them. It's a bit of work upfront, but it's actually a good chance to reorganise things more logically.
Why Proton Pass Makes Sense for UK Privacy
Let's circle back to the privacy angle for a moment. If you're in the UK and you care about data protection, the jurisdiction of your password manager actually matters quite a bit.
The UK GDPR offers solid protections, but it doesn't control what happens to your data when it's stored by American companies. US-based services can be compelled to hand over data under various legal frameworks, and they're not always transparent about when that happens.
Switzerland isn't part of the EU, but it has strong data protection agreements in place. More importantly, Swiss law explicitly protects privacy in ways that go beyond what most other countries offer. Proton has repeatedly demonstrated its commitment to these principles, even when it's been legally challenged.
For UK users who also use a VPN for privacy, and you should be, this creates a coherent privacy strategy. Your VPN protects your browsing, your password manager protects your credentials, and both are operating under jurisdictions that actually respect privacy rights.
If you're looking for a VPN that shares Proton Pass's privacy-first philosophy, ProtonVPN is the obvious choice. But NordVPN is also excellent, particularly if you need features like dedicated IP addresses or specialised servers:
NordVPN from £12.99/mo→
Advanced Tips for Proton Pass Users
Once you've finished migrating from LastPass to Proton Pass and you're comfortable with the basics, there are some advanced features worth exploring:
Hide-My-Email Aliases
Proton Pass includes hide-my-email aliases on paid plans. These are randomly generated email addresses that forward to your real inbox. Use them when signing up for websites you don't fully trust.
The benefit? If a site gets breached or starts spamming you, you can disable that specific alias without affecting your main email address. It's brilliant for maintaining privacy and controlling who has access to your real contact details.
Shared Vaults
Need to share passwords with family members or colleagues? Proton Pass supports shared vaults. Create a vault, add the passwords you want to share, and invite other Proton Pass users to access it.
This is infinitely more secure than texting passwords or writing them on sticky notes. Everyone gets access to the credentials they need, and you can revoke access instantly if someone leaves or the situation changes.
Password Health Monitoring
Proton Pass includes a password health checker that identifies weak, reused, or compromised passwords. Run it periodically and fix any issues it flags.
Weak passwords are obvious targets. Reused passwords mean that one breach compromises multiple accounts. Compromised passwords are ones that have appeared in known data breaches and should be changed immediately.
Browser Extension Shortcuts
Learn the keyboard shortcuts for Proton Pass. On most browsers, you can trigger autofill with Ctrl+Shift+L (or Cmd+Shift+L on Mac). You can also open the extension with Ctrl+Shift+9.
Small efficiency gains, but they add up when you're logging into dozens of sites every day.
Is Migrating from LastPass to Proton Pass Worth It?
Look, I'm not going to tell you that Proton Pass is perfect. It's a relatively new product, and it doesn't have all the bells and whistles that LastPass has accumulated over the years. The mobile apps are still maturing, and some features are locked behind paid plans.
But here's the thing: the fundamentals are rock-solid. The encryption is bulletproof, the privacy protections are genuine, and the company has a proven track record of standing up for user rights. For UK users specifically, the Swiss jurisdiction offers meaningful advantages over US-based alternatives.
Migrating from LastPass to Proton Pass takes a bit of effort upfront, but it's not complicated. Most people finish the whole process in under an hour, including setup and verification. That's a pretty small investment for significantly better privacy and security.
The real question isn't whether Proton Pass is worth it, it's whether you trust your current password manager enough to keep using it. If you're reading this guide, you've probably already answered that question.
Ready to Make the Switch?
Migrating from LastPass to Proton Pass is straightforward, and you'll have better privacy protection from day one. Pair it with a solid VPN like NordVPN for comprehensive online security that actually respects your privacy.
NordVPN from £12.99/mo→