Importing from sysPass

Vaultigen imports encrypted sysPass XML exports. The export stays encrypted at every step. This page covers what is specific to sysPass; the wizard itself is described in Importing data.

Export from sysPass

1. Sign in to sysPass as an administrator.
2. Open Configuration → Backup and, under the XML export, enter an export password.
3. Create the export and download the XML file.

You need two passwords for the import:

• the export password you just set, at upload,
• the sysPass master password, in the last step. It decrypts the individual account passwords. If the export has no separate master password, leave the field blank.

Import into Vaultigen

1. Open System → Import and choose sysPass (encrypted XML export).
2. Select the XML file, enter the export password and click Stage upload. The export is decrypted once and immediately re-encrypted under a Vaultigen import key.
3. In Setup, choose a layout:
   • One vault per client: clients become vaults, categories become folders.
   • One vault per category: categories become vaults, clients become folders.
   • A single vault: everything in one vault. Choose whether categories or clients become folders, and whether the other one becomes tags or is skipped.
4. Review the Vaults and Tags steps.
5. In Confirm and import, enter the sysPass master password and click Run import.

What gets imported

sysPass	Vaultigen
Account	Login entry with title, username, password, URL and notes
Client	A separate vault, a folder or a tag (your choice), or skipped
Category	A separate vault, a folder or a tag (your choice), or skipped
Tag	Tag (global or vault-local)

Every account becomes a login entry; Vaultigen does not guess other types from category names. Accounts without a category sit at the vault root. sysPass XML exports contain no attachments or custom fields.

If the master password does not decrypt any of a small sample of accounts, the run is marked failed and nothing is imported. A single account whose password cannot be decrypted is listed in the report; it is never imported with a blank password.