Password manager
A password manager is software that stores and retrieves login credentials and usually helps generate distinct passwords for different accounts.
A password manager makes it practical to use a different password for each account without memorizing them all. That limits the damage from password reuse: a password stolen from one service should not also open another. NIST explicitly supports password managers and autofill in its authentication guidance.
The manager does not make a request to hand over credentials trustworthy. An attacker can still ask someone to export the vault, upload a backup, or sign in through a fake migration page.
The vault and an export are different things
An exported file may lose the protections that apply inside the app. For example, 1Password warns that files exported from its desktop apps are unencrypted. Bitwarden offers plaintext CSV and JSON files as well as an encrypted JSON option. Mobile transfers can use other supported mechanisms; do not assume every migration creates a plaintext file.
Before approving a migration, establish which transfer method is intended, who receives the data, and what happens to temporary copies. A request that says “IT needs a backup” does not answer those questions. Our password-manager migration article explains that handoff.
If a readable export has left the organization, changing the password used to unlock the manager does not change the individual account credentials in that copy. The identity-containment review helps separate credential changes from other access that may still need attention.