@buttercup/importer
Advanced tools
Import vaults from other password managers
This vault importer coverts password vaults from other formats to the Buttercup vault format (BCUP).
This library is not intended to be used as a standalone application. Its functionality is available via the Buttercup Desktop applications.
You can of course use the importer in your own projects, by importing the individual importers.
Eg.
const { KDBXImporter } = require("@buttercup/importer");
KDBXImporter.loadFromFile("...");
Check out the API documentation.
The importer requires Node 14 or later.
KeePass vaults can be imported using either of the 2 supported importers:
KeePass2XMLImporterKDBXImporterTo import KeePass vaults, first export to XML format.
1Password vaults can be imported from 1pif directories using the OnePasswordImporter module.
Imported 1Password archives may lose some information regarding their type (eg. Credit cards). The 1Password Importer supports importing the following types:
Lastpass credentials can be exported as CSV files, which can be imported using Buttercup importer.
Bitwarden credentials can be exported as JSON files, which can be imported using Buttercup importer.
Imported bitwarden archives contain the username, password, the first url associated with the item, notes and any custom fields. Attachments are not currently supported.
Buttercup vaults can be imported using the ButtercupImporter.
Exported Buttercup vaults can be re-imported into a new Vault. Take the exported CSV file and import that in Buttercup Desktop.
FAQs
Buttercup archive importer for other password manager archives
We found that @buttercup/importer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.
Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.