A password manager protects the entries inside its vault. An exported file may no longer have that protection. If you select an unencrypted format, anyone who can read the file may be able to read the passwords it contains.
1Password’s export guidance warns about readable exported data. Bitwarden’s documentation distinguishes formats and encrypted-export options. Check the current instructions for both the source and destination before moving a vault.
Plan the destination before exporting
Confirm which format the receiving tool accepts and what information that format includes. Passwords, attachments, passkeys and other item types may not all transfer through the same route. Do not assume a successful file creation means a complete backup.
Choose a controlled storage location on a device you trust. Avoid shared folders, routine email attachments or a downloads location that synchronises broadly without your intention. Where a compatible encrypted export is available, understand how it can be restored and protect the required password separately.
Check the result before removing the source
After importing, inspect representative entries and important item types in the destination. Verify the information needed for access without deleting the original vault prematurely.
Then remove unnecessary export copies through an appropriate process for the device and storage service. Check for copies in trash or synchronised locations. Do not promise yourself that an ordinary deletion guarantees forensic erasure from every medium.
If an unencrypted export was exposed, treat it as a credential-security incident and use the relevant account-recovery and password-change procedures. Moving the file elsewhere does not undo earlier access.
The safest migration is one with a defined route, a verified destination and a short, controlled life for any readable intermediate file. The export is part of the security boundary, not merely an administrative download.