LastPass Detachment

I thought I'd pass this little gem of a timesaver. If you find yourself migrating a personal or business LastPass to another credential manager, you will find that the CSV export option is missing a potential major blindside. Attachments! I found myself needing to migrate a large number of attachments, and I was a little depressed at the tedious task awaiting me. Luckily, I found a handy script included in the LastPass CLI Github repo that will extract all the attachments accessible to a user. This made the process quite a bit easier. Here are my steps:

• Install the Lastpass CLI tool and ensure the command lpass is in your shell path.
• Clone the LastPass CLI Github repository.
• Obtain admin access to your LastPass account.
• Temporarily disable MFA on your LastPass account (yes, scary but easier).
• Run the lpass-att-export.sh script to extract your attachments.
• Reenable MFA on your account!

This will result in a directory structure mirroring your LastPass folders with the attachments included. Sadly, you will likely need to manually import your attachments into your new credential manager. If you imported your LastPass CSV credentials into a staging area on your new credential manager, you should be able to easily upload the attachments to their new home. I would create an encrypted snapshot of the attachments directory and save it in your new credential manager as well.

Caveat

Obviously, you should only extract credentials and attachments to an encrypted filesystem. You might even want to use temporary virtual machine for this task.

Links

https://github.com/lastpass/lastpass-cli

https://github.com/lastpass/lastpass-cli/blob/master/contrib/lpass-att-export.sh