What is a .spass file?
A .spass file is an encrypted password export created by the Samsung Pass app on Samsung Galaxy devices. When you export your saved passwords from Samsung Pass (Settings → Export passwords), Samsung writes all your credentials to a single .spass file and encrypts it with your Samsung Pass password before saving it to your device storage.
The file contains your saved:
- Website and app passwords (username + password + URL)
- Credit card numbers (partial: first six digits, last four, expiry)
- Addresses (name, street, city, state, country, phone, email)
- Secure notes (title + details)
Why can't I open a .spass file normally?
The file is encrypted — its contents are unreadable without the Samsung Pass password. If you try to open it in a text editor, you'll see Base64-encoded gibberish. No file manager, spreadsheet app, or standard import tool can read it directly.
Technical format details
For those curious, the .spass file structure is:
- The entire payload is Base64-encoded
- Decoded structure:
[20-byte PBKDF2 salt] [16-byte AES IV] [AES-256-CBC ciphertext] - Key derivation: PBKDF2-HMAC-SHA256, 70,000 iterations, 256-bit output
- Cipher: AES-256-CBC with PKCS5 padding
- Plaintext: semicolon-delimited rows with Base64-encoded field values, separated by
next_tablesection markers
How to open and convert a .spass file
The only way to read a .spass file is to decrypt it with the correct Samsung Pass password. SPASS Converter does exactly that — it's a free, open-source Android app built specifically for this purpose.
- Download SPASS Converter from GitHub Releases and install the APK
- Open the app and select your
.spassfile - Enter your Samsung Pass password
- Tap Convert — the app shows a summary of all decrypted entries
- Tap Save CSV to export to a file you can open anywhere
→ Full step-by-step import guide
What the output CSV looks like
SPASS Converter produces a standard CSV with one section per data type. The password section column order (name, url, username, password, note) matches the Google Password Manager / Chrome import format exactly.
| Section | Columns |
|---|---|
| Passwords | name, url, username, password, note |
| Addresses | full_name, company_name, street_address, city, state, zipcode, country_code, phone_number, email |
| Credit cards | name_on_card, first_six_digits, last_four_digits, expiry_month, expiry_year |
| Notes | title, details |
Can I open a .spass file on a PC?
Not directly — the .spass format is proprietary to Samsung Pass on Android. There is no official Samsung tool to open it on Windows or Mac. SPASS Converter runs on Android, so you convert it on your phone first and then transfer the resulting CSV to your computer.
Is it safe to use a third-party app to decrypt my passwords?
SPASS Converter is fully open source (MIT License) — you can read every line of the decryption and conversion code. The app has no internet permissions (verifiable in the AndroidManifest.xml), no analytics, no crash reporting, and no third-party SDKs. Sensitive data is zeroed from memory when you leave the app.