bitwarden-exporter 1.8.1

Export Bitwarden vault

Bitwarden Exporter

Python Wrapper for Password Manager CLI for exporting bitwarden vaults to KeePass.

Features

• Comprehensive data mapping
  • Credentials
  • URIs (Compatible with keepass URL)
  • Notes (Compatible with keepass note)
  • TOTP codes (Compatible with keepass totp)
  • Custom Fields (Compatible with additional attributes)
  • Identity/Cards (Backup only, not supported by Keepass yet)
  • Attachments (Compatible with keepass attachment)
  • SSH keys (Compatible with keepass ssh and attachments)
  • Fido U2F Keys (Backup only, not supported by Keepass yet)
• Preserves vault structure
  • Collection and Folder hierarchy is preserved as Keepass groups.
• Built-in JSON snapshot of vault data for auditing.
• Configurable CLI with options for duplicates handling, custom temp directory, debug logging, and Bitwarden CLI path.

Bitwarden Web

Structure TOTP

Other screenshots.

Prerequisites

• Bitwarden CLI

• Python

  • uvx (optional)
  • pipx (optional)
  • venv (optional)

Installation

(Recommended) Run with uvx from PyPI

BW_SESSION=<session token> uvx bitwarden-exporter==VERSION --help

or

BW_SESSION=<session token> uvx bitwarden-exporter --help

Run it from source

BW_SESSION=<session token> uvx git+https://github.com/arpanrec/bitwarden-exporter.git@main bitwarden-exporter --help

Install with pipx from PyPI

BW_SESSION=<session token> pipx install bitwarden-exporter

Options

Run bitwarden-exporter --help to see all available options.

Required Options

--export-password, -p

Required - Password for the exported KeePass database.

You can provide the password in multiple ways:

• Direct value: --export-password "my-secret-password"
• From file: --export-password file:secret.txt
• From environment: --export-password env:SECRET_PASSWORD
• From vault (JMESPath expression): --export-password "jmespath:[?id=='xx-xx-xx-xxx-xxx'].fields[] | [?name=='export-password'].value"

Optional Configuration

--export-location, -l

Path for the exported KeePass database file.

• Default: bitwarden_dump_<timestamp>.kdbx
• Note: If the file exists, it will be overwritten.

--allow-duplicates, -d

Allow duplicate entries in the export. Since Bitwarden items can belong to multiple collections, this option controls whether to create duplicate entries in KeePass.

• Default: --no-allow-duplicates

--tmp-dir, -t

Custom temporary directory for storing temporary sensitive files during export.

• Default: System temporary directory
• ⚠️ Security Note: Make sure to delete this directory after export.

--bw-executable, -e

Path to the Bitwarden CLI executable.

• Default: bw (from system PATH)

--version

Show the version and exit.

--debug

Enable verbose logging for troubleshooting.

• Default: --no-debug
• ⚠️ Warning: Debug logs may contain sensitive information. When enabled, the temporary directory will NOT be automatically deleted.

Credits

@ckabalan for bitwarden-attachment-exporter

License

MIT