Move your Google Authenticator codes to KutunaCo

Last updated:

On this page

KutunaCo imports Google Authenticator accounts from the app's "Transfer accounts" export. Each QR code it shows holds an otpauth-migration:// link; KutunaCo scans those codes with the camera and turns them into one item per account, with the issuer as the title, the account name as the username and the setup key in the 2FA field. Codes are then generated offline on your phone, next to the password for the same service.

How do I export accounts from Google Authenticator?

  1. In Google Authenticator, open the menu (your profile picture or the three lines) and choose Transfer accounts › Export accounts.
  2. Confirm with your screen lock and select the accounts to move. Authenticator groups them into QR codes of up to 10 accounts each and tells you how many codes there are.
  3. Leave the first QR code on screen and continue in KutunaCo on your other phone.

The QR codes are the secret to every selected account. Do not photograph them or send them to anyone; scan them directly.

How do I scan the codes into KutunaCo?

  1. In KutunaCo, tap + › Scan 2FA QR Code and point the camera at the first QR code.
  2. If Authenticator showed several codes, KutunaCo counts them ("Scanned 1 of 3 codes. Scan the next one."): show the next code in Authenticator and scan it, until all are done.
  3. Tap Import Scanned Codes. The Import 2FA Codes preview shows "Google Authenticator" as the source and the number of accounts found.
  4. Confirm with Import.
  5. Open one of the new items and compare its code with the one Google Authenticator shows for the same account. They must match.

The scanned codes stay in memory until you import them; nothing is written to disk. If you scan a transfer code from an item's 2FA field instead, the app asks you to use + › Scan 2FA QR Code.

What if both apps are on the same phone?

A phone cannot scan its own screen. If Google Authenticator lets you take a screenshot of the code, scan it with Choose Image and delete the screenshot afterwards; otherwise use the text-file method:

  1. Read each QR code with a QR reader that shows the decoded text (a second phone's camera or a desktop QR reader) and paste each otpauth-migration://offline?data= link into a plain text file, one per line.
  2. Save it with a .txt extension, then in KutunaCo go to Settings › Data Management › Restore / Import › Choose File and pick the file.
  3. Confirm with Import, check one code as above, and delete the text file from every device.

What exactly is imported?

  • TOTP accounts with SHA1, SHA256 or SHA512 and 6 or 8 digits: as items that generate codes. The issuer becomes the title and the account name the username, so the item is easy to find.
  • HOTP (counter-based) accounts and MD5 tokens: KutunaCo cannot generate codes for them, so the full setup link is saved to the item's note and nothing is lost. The preview tells you how many such accounts there were.
  • Entries without a secret are skipped and counted in the preview.

Do I have to move accounts one by one instead?

No, the transfer export moves them all at once. The alternative is to open each service's security settings, turn 2FA off and on again, and scan the new QR code it shows with + › Scan 2FA QR Code, or paste its setup key into the 2FA Setup Key field of the matching KutunaCo item, as described on the help page. That takes longer but gives every service a fresh secret, which some people prefer after changing apps.

Can I keep using Google Authenticator as well?

Yes. Importing does not change anything in Google Authenticator; both apps generate the same codes from the same secret. Once you have checked that KutunaCo's codes work, you can remove the accounts from Authenticator so the secret lives in one place. Remember that Google Authenticator may also keep a copy in your Google account if its cloud sync is on.

What if I lose my phone?

KutunaCo has no cloud: the 2FA secrets exist only on this phone and in the encrypted backups you make. Make a backup right after importing and store it away from the phone, as explained on the help page. Other authenticator apps, such as Aegis, 2FAS and Ente Auth, are covered in the import overview.

Get KutunaCo