KutunaCo help

Last updated:

Step-by-step answers for the most common tasks in KutunaCo. The app's interface is currently in Turkish, so menu names are given in Turkish with an English explanation. Settings (Ayarlar) opens from the gear icon at the top right of the home screen. Screenshots were taken on an iPhone with sample data and show the Turkish interface.

How do I make a backup?

Go to Ayarlar › Veri Yönetimi › Yedekle (Settings › Data Management › Back up), confirm your identity, enter a backup password of at least 10 characters twice and tap Dışa Aktar (Export). In the share sheet that opens, choose where to save the file: Files, your computer or a cloud folder of your own.

Backup screen with the password entered twice and the strength meter at "Strong"
Settings › Data Management › Back up: enter the password twice, then Export.
  • The backup is encrypted with AES-256-GCM under a key derived from your password with Argon2id; the file ends in .enc.
  • Passwords built from common words, years, keyboard runs or repeats (such as "Password123!") are rejected. A long password made of a few random words is a good choice.
  • Items in the trash are not included.
  • If you forget the password there is no way to open the backup. Keep the file and its password in separate, safe places.

How do I restore a backup?

Go to Ayarlar › Veri Yönetimi › Geri Yükle / İçe Aktar (Restore / Import) › Dosya Seç (Choose file), pick the backup, enter its password and tap Kilidi Aç (Unlock). The preview shows how many items will be added or updated; confirm with İçe Aktar (Import). Opening the file with KutunaCo from the Files app or the share menu leads to the same screen.

Import preview: source, number of items found and the unencrypted-file warning
Pick the file and a preview opens; confirm with Import.

If an item already exists in your vault, you choose what happens:

  • Daha yeni olanı koru (keep the newer one, recommended): the most recently updated version stays, so an old backup never undoes newer changes.
  • Üzerine yaz (overwrite): the version in the file replaces yours.
  • İkisini de tut (keep both): the version in the file is added as a separate copy.

What should I do when I change phones?

The vault is tied to the device together with the key that opens it; it does not move to a new phone with an iCloud or Google device backup. Use an encrypted backup instead:

  1. On the old phone, make a backup in Ayarlar › Veri Yönetimi › Yedekle.
  2. Move the backup file to the new phone (Files, a computer, AirDrop or a cloud folder).
  3. Install KutunaCo on the new phone and choose your lock.
  4. Pick the file in Ayarlar › Veri Yönetimi › Geri Yükle / İçe Aktar and enter the backup password.
  5. Once everything is there, you can wipe the old phone's copy with Tüm Verileri Sil (Delete All Data).

If you restored your iPhone from a device backup, the app shows a "previous vault could not be opened" screen. Tap Boş Kasa ile Devam Et (continue with an empty vault), then import your backup file as above.

How do I turn on autofill?

Turn on Ayarlar › Güvenlik › Otomatik Doldurma Servisi (Settings › Security › Autofill service). The app takes you straight to the matching system screen.

Settings screen with the clear-clipboard and autofill-service rows
Settings › Security › Autofill service switch.
  • Android (8.0 and later): pick KutunaCo as the autofill service in the list that opens. The device needs a screen lock (PIN, pattern or password).
  • iOS: on iOS 18 and later the system asks you to confirm; on iOS 17 the password-provider settings open; on iOS 15 and 16 you turn KutunaCo on as a password provider in the Settings app. The device needs a passcode.
  • Fill in an item's Web Sitesi (website) field so it is suggested on the right site.
  • On iOS 26.2 and later you can choose to save a password you type in another app to KutunaCo; the save waits for your approval the next time you open the app.

How do I add a 2FA (TOTP) code?

Edit a password item and paste the secret the service gives you (for example JBSWY3DPEHPK3PXP) or an otpauth:// link into the 2FA Anahtarı (2FA key) field. When you open the item, the code and the time left appear in the authenticator row.

Edit form with an example key pasted into the 2FA key field
Paste the key into the 2FA key field.
Item detail showing the authenticator code and countdown
After saving, the code and time left appear on the item.
  • QR code scanning is not available yet. On the service's 2FA setup screen, choose "can't scan the code" or "show key" to get the text secret.
  • SHA1, SHA256 and SHA512, 6–8 digit codes and periods of 1–300 seconds are supported. HOTP links are not.
  • Codes are generated entirely on the device, without the internet.
  • To move many codes from another authenticator app at once, see the import guide.

How does subscription tracking work?

In a password, credit card or API key item, tick Abonelik ücreti ekle (add a subscription fee), then enter the fee, the currency (₺, $, €, £), the Ödeme Sıklığı (billing cycle: weekly, monthly, every 3 months or yearly) and, if you like, the next renewal date. The Abonelikler (Subscriptions) filter on the home screen shows the monthly and yearly totals and what renews next. The default currency for new subscriptions is in Ayarlar › Genel (General).

Edit form with the subscription section: monthly fee 59.99 TRY, monthly cycle
Add a fee and a billing cycle to an item.
Home screen with the Subscriptions filter and the monthly total card
The Subscriptions filter shows the monthly and yearly totals.

How do I set up the app lock?

In Ayarlar › Güvenlik (Security):

Security section of Settings: biometrics, app PIN, auto-lock, clipboard
Settings › Security: lock, auto-lock and clipboard options.
Set PIN screen with a 4–8 digit field and the number pad
The app PIN is 4–8 digits.
  • Biyometrik Doğrulama (biometrics): fingerprint, face or the device passcode at launch.
  • Uygulama PIN'i (app PIN): 4–8 digits only. Guessable PINs such as repeated or sequential digits, dates or years are not accepted.
  • Otomatik Kilit (auto-lock): immediately, 30 seconds, 1 minute (default), 5 minutes, 15 minutes or never.
  • Şimdi Kilitle (lock now): locks the app immediately.

From the fifth wrong PIN, an increasing wait from 30 seconds up to one hour applies.

I forgot my PIN. What now?

Tap PIN'imi unuttum (forgot my PIN) on the lock screen and verify with your device's screen lock or biometrics; then set a new PIN. No data is lost. If the device has no screen lock or biometrics there is no way around the PIN: the only option is to delete all data and restore your backup, if you have one.

How do I read the password health report?

Ayarlar › Kasa › Şifre Sağlığı (Settings › Vault › Password health) checks your saved passwords entirely on the device and gives a security score out of 100: 80 and above is good, 50 to 79 fair, below that risky. Tabs separate the problem items: weak, reused, old (unchanged for over a year) and 2FA (linked to a site but without a 2FA code). Tap an item and change its password and the score updates.

Password health screen: score 79, fair, one item in the weak tab
Score and tabs; tap an item to change its password.

When is the clipboard cleared?

In Ayarlar › Güvenlik › Panoyu Temizle (clear clipboard) you choose whether copied passwords are removed after 30, 60 (default) or 90 seconds, or stay on the clipboard ("Temizleme"). When the app locks, a value KutunaCo copied is removed without waiting.

How do I get a deleted item back?

Deleted items stay in the trash for 30 days. Tap Geri Al (undo) in the notice that appears right after deleting, or restore the item from Ayarlar › Kasa › Çöp Kutusu (Settings › Vault › Trash). After 30 days the item is deleted for good.

Home screen notice "moved to trash" with an Undo button
Tap Undo right after deleting.
Trash page: item, days left and restore button
Settings › Vault › Trash: restore within 30 days.

How do I delete all my data?

Tap Ayarlar › Veri Yönetimi › Tüm Verileri Sil (Delete All Data), confirm your identity and type SİL to confirm. The vault, settings (including the app PIN), the autofill copy, temporary export files and set-aside vault copies are deleted, and a new encryption key is created at the next launch. Deleting the app also removes the vault files on the device. Nothing is kept on a server, so there is nothing else to remove.

Delete All Data confirmation with the field where you type SİL
You are asked to type SİL before anything is deleted.

Why can't I take screenshots?

This is deliberate protection and cannot be turned off. On Android, screenshots and screen recording are blocked and the content is hidden in recent apps. On iOS the content is blurred in the app switcher and hidden during screen recording or mirroring.

Support

If your question isn't answered here, write to support@kiplix.com. Never email your real passwords or your backup file.