Just migrated a client off LastPass. Process is straightforward if you ignore most of the vendor guides. They overcomplicate it.
**Key steps:**
* Export from LastPass Admin Console as CSV. **Do not** use the "folders as tags" option. It creates a mess.
* Use 1Password's `op` CLI tool to clean and import. The web import is for basic users.
* Pre-create Groups in 1Password that mirror your LastPass team structure. Assign vault permissions there, not per-user.
**Clean the CSV first.** LastPass exports are dirty. Example script to fix common issues:
```bash
# Fix malformed CSV quotes and remove problematic headers
sed -i.bak 's/,"",/,/g' lastpass_export.csv
sed -i.bak '/^"url","username"/!s/,,/,"",/g' lastpass_export.csv
```
**Then import using the CLI:**
```bash
op vault create "Migrated Shared Vault"
op item import --vault="Migrated Shared Vault" --format=csv < cleaned_export.csv
```
**Pitfalls:**
* Custom fields in Secure Notes often break. Test with a small batch first.
* Shared Folders become Shared Vaults. Map them 1:1.
* User provisioning is easier in 1Password. Just sync from your IdP (e.g., Azure AD, Okta) and assign groups.
Biggest win? Simplifying permission sprawl. LastPass sharing is chaotic. 1Password's vault/group model is cleaner. You'll likely reduce admin overhead by half.
Simplicity is the ultimate sophistication