1Password - Recommendations for migrating Shared Folders
Coordinate the migration of your Shared Folders on your team
Because LastPass Shared Folders are accessed by multiple users, they should only be migrated when all users are ready to switch to 1Password. Shared Folders can be reviewed within the Sharing Center in LastPass. View users by clicking "Manage recipients." When your team is ready to migrate your shared folders, contact the 1Password admins at 1passwordadmins@office365.wisc.edu.
Check your Shared Folders and permissions in LastPass:
Pre-migration
Before you begin, learn more about what happens when you import your data from LastPass to 1Password:
- Private folders will be converted to tags.
- Password history is imported for shared items, but not private items.
- Shared folders will be converted to vaults, and will include permissions. Learn more about how shared folder permissions are imported.
- Shared folders can only be imported by someone who has administrator privileges in the shared folder. After a shared folder is imported, it will not be available for other administrators to import.
- To import shared folders in 1Password, you’ll need permission to create vaults. Contact the 1Password team for this access.
When you import your data, your item types will change:
LastPass item type | 1Password item type |
---|---|
Password | Login |
Address | Identity |
Application | Login |
Custom item | Secure Note |
File or one-time password attached to an item | Automatically attached to the same item* |
Bank Account, Credit Cards, and others | Equivalent item type |
To make sure nothing is left behind, 1Password also imports account-related settings and other metadata as Secure Notes. These can be found in the Imported Unknown Data
vault. You can review and archive them if you don’t need them.
Perform the migration
Attention! If you've already run the Import Tool for your individual passwords, delete them out of LastPass. If you do not remove them from LastPass they will be imported again. DO NOT DELETE SHARED FOLDERS OR THEIR CONTENTS.
After you've confirmed you are ready to migrate your Shared Folders with the 1Password team, you'll receive additional access in 1Password. Follow the import instructions found here: 1Password - Migrate your passwords from LastPass. Now when you run the import, all of your Shared Folders will be migrated into 1Password.
As an "administrator" of a Shared Folder in LastPass, you will see additional "Admin Import Tools" options:
Select Only import folder sharing permissions to update the permissions for shared folders you’ve already imported without making other changes.
Select Map user email addresses to map shared folder permissions for people who have different email addresses in 1Password than they did in LastPass.
Post Shared Folder migration next steps
After you've imported your Shared Folder and validated that all passwords are in 1Password, you should delete or remove access to that folder within LastPass. This is to ensure 1Password is used as the 'source of truth' after the migration and that passwords don't diverge if some users are still using and updating LastPass.
If not all of your users have activated their 1Password account when the import is done, permissions can be remigrated if needed. Re-run the import and select Only import folder sharing permissions to update the permissions for shared folders you’ve already imported without making other changes.
Map user email addresses to map shared folder permissions
If people have different email addresses in 1Password than they did in LastPass, select Map user email addresses during the import process to make sure that the correct shared folder permissions are assigned to each person.
Upload a CSV file that includes one mapping per line, formatted as old email,new email
. For example:
wendy.appleseed@wisc.edu,wappleseed@wisc.edu
johnny.appleseed@wisc.edu,jappleseed2@wisc.edu
This option is only available to LastPass admins in accounts that have at least one shared folder.
For security reasons, the import process doesn’t preserve individual administrative access to specific LastPass folders for people whose email addresses have changed. You can find instances of dropped administrative access by looking in your 1Password logs for messages similar to the following:
Dropping 'manage vault' permission of user from line 10 of the user mappings CSV from vault 'VAULT-UUID'
Shared folder permissions
When you import shared folders from LastPass, permissions will be also be imported automatically. Each shared folder gets converted into a vault, every item in the shared folder is added to the vault, and permissions for the folder are also applied to the vault.
Shared folder permissions aren’t imported if the person or group that has access to the folder doesn’t exist in your 1Password account or if the person is an external LastPass user.
If you want to re-import your folder permissions from LastPass without making other changes, you can go through the import process again and select Only import folder sharing permissions.
Permission in LastPass | Becomes |
---|---|
administer | Manage Vault |
read-only | View Items |
hide-passwords | Removes “View and Copy Passwords” |