KutunaCo help

Step-by-step answers for the most common tasks in KutunaCo. Menu names are quoted as they appear in the app. Settings opens from the gear icon at the top right of the home screen. The app is in English, Turkish, German, Spanish, Italian, Portuguese, Japanese, Korean and Hindi: by default it follows your device (the first language in your device's list that the app has, English otherwise), and you can change it in Settings › General › Language.

How do I make a backup?

Go to Settings › Data Management › Back Up, confirm your identity, enter a backup password of at least 10 characters twice and tap Export. In the share sheet that opens, choose where to save the file: Files, your computer or a cloud folder of your own.

• The backup is encrypted with AES-256-GCM under a key derived from your password with Argon2id (64 MiB of memory, 3 iterations, 4 lanes). The file is named kutunaco_backup_<date>.enc.
• Passwords built from common words, years, keyboard runs or repeats (such as "Password123!") are rejected. A long password made of a few random words is a good choice.
• Items in the trash are not included.
• Settings › Data Management shows when you last made a backup, and the home screen reminds you when there is none or the last one is 30 days old.
• If you forget the password there is no way to open the backup. Keep the file and its password in separate, safe places.

How do I restore a backup?

Go to Settings › Data Management › Restore / Import › Choose File, pick the backup, enter its password and tap Unlock. The preview shows how many items will be added or updated; confirm with Import. Opening the file with KutunaCo from the Files app or the share menu leads to the same screen.

If an item already exists in your box, you choose what happens:

• Keep the newer one (recommended): the most recently updated version stays, so an old backup never undoes newer changes.
• Overwrite: the version in the file replaces yours.
• Keep both: the version in the file is added as a separate copy.

What should I do when I change phones?

Your box is tied to the device together with the key that opens it; it does not move to a new phone with an iCloud or Google device backup. Use an encrypted backup instead:

1. On the old phone, make a backup in Settings › Data Management › Back Up.
2. Move the backup file to the new phone (Files, a computer, AirDrop or a cloud folder).
3. Install KutunaCo on the new phone and choose your lock.
4. Pick the file in Settings › Data Management › Restore / Import and enter the backup password.
5. Once everything is there, you can wipe the old phone's copy with Settings › Danger Zone › Delete All Data.

If you set up your new iPhone from the old one's device backup, the app shows Previous Box Couldn't Be Opened. Tap Restore from a Backup File and choose your backup (you'll need its password), or Continue with an Empty Box and import it later.

How do I turn on autofill?

Turn on Settings › Security › Autofill Service. The app takes you straight to the matching system screen.

• Android (8.0 and later): pick KutunaCo as the autofill service in the list that opens. The device needs a screen lock (PIN, pattern or password). Hide Usernames in Suggestions shows only the item title until you have verified.
• iOS: on iOS 18 and later the system asks you to confirm; on iOS 17 the password-provider settings open; on iOS 15 and 16 you turn KutunaCo on as a password provider in the Settings app. The device needs a passcode. With a PIN-only lock and *Allow PIN Reset with Device Lock* off, iOS AutoFill is unavailable.
• Fill in an item's Website field so it is suggested on the right site.
• Not showing up in Chrome on Android? In Chrome, go to Settings › Autofill services and turn on "Autofill using another service". The same hint is in Settings › Security › Not Showing Up in Chrome?
• On Android the suggestion list also offers Search in KutunaCo, which lets you pick any item after you verify.
• On iOS 26.2 and later you can choose to save a password you type in another app to KutunaCo; the save waits for your approval the next time you open the app.

How do I add a 2FA (TOTP) code?

Tap + › Scan 2FA QR Code and point the camera at the QR code the service shows, or tap Choose Image to read it from a screenshot. You can also edit a password item and use the scan button in the 2FA Setup Key field, or paste the setup key (for example JBSWY3DPEHPK3PXP) or an otpauth:// link there. When you open the item, the code and the time left appear in its 2FA Code row.

• All your codes are on the 2FA Codes screen (top left of the home screen): tap a code to copy it.
• The camera image is read on the device only. KutunaCo asks for camera access only when the scanner opens. On Android the reader comes with Google Play services, and it also reads the screenshots you choose; without Google Play services, type or paste the key.
• A link opened from a website or the iOS Camera app shows a preview before anything is saved.
• SHA1, SHA256 and SHA512, 6–8 digit codes and periods of 1–300 seconds are supported. HOTP links are not.
• On the 2FA Codes screen you can search, Pin to top the codes you use most and turn on Hide codes until tapped: a code then shows only after a tap and hides again after 30 seconds.
• Codes are generated entirely on the device, without the internet.
• To move many codes from another authenticator app at once, see the import guide.

How does subscription tracking work?

In any item (password, card, API key or secure note), tick Add Subscription Fee, or tap + › Subscription for a subscription without a password. Enter the fee, the currency, the Billing Cycle (Weekly, Monthly, Quarterly or Yearly) and, if you like, the next renewal date. The Subscriptions filter on the home screen shows the monthly and yearly totals and what renews next. The currency for new subscriptions is set in Settings › General › Default Currency.

How do I find an item quickly?

• Search looks in titles, usernames, e-mail addresses, websites, linked apps, notes, tags, card holder names and the last four digits of cards. It ignores capitals and accents ("sifre" finds "Şifre") and matches every word you type. Passwords and other secrets are never searched.
• Sort offers Newest First, Oldest First, Recently Updated, Name (A-Z) and Name (Z-A); favorites always stay at the top, and your choice is remembered.
• Long-press an item for quick actions: copy the username, password, 2FA code, card number or note, add it to favorites, edit it or move it to the trash.
• Quick Add Password: long-press the KutunaCo icon on your home screen to start a new password straight away.
• Well-known services (about 30, such as Google, Amazon or Netflix) get their own icon automatically, and every item keeps its last five passwords under Password History.

How do I set up the app lock?

In Settings › Security:

• Biometric Unlock: fingerprint, face or the device passcode at launch. On Android only strong (Class 3) biometrics or the device passcode are accepted.
• App PIN: 4–8 digits only. Guessable PINs such as repeated or sequential digits, dates or years are not accepted.
• Allow PIN Reset with Device Lock (shown with a PIN-only lock, on by default): lets Forgot your PIN? set a new PIN after your device lock.
• Auto-Lock: Immediately, 30 seconds, 1 minute (default), 5 minutes, 15 minutes or Never.
• Lock Now: locks the app immediately.

From the fifth wrong PIN, an increasing wait from 30 seconds up to one hour applies.

I forgot my PIN. What now?

Tap Forgot your PIN? on the lock screen and verify with your device's screen lock or biometrics; then set a new PIN. No data is lost. This works while Allow PIN Reset with Device Lock is on (the default) and the device has a screen lock. Otherwise there is no way around the PIN: the only option is to delete all data and restore your backup, if you have one.

How do I read the password health report?

Settings › Box › Password Health (or the shield icon on the home screen) checks your saved passwords entirely on the device and gives a security score out of 100: 80 and above is Good, 50 to 79 Fair, below that At Risk. Tabs separate the problem items: Weak, Reused, Old (unchanged for over a year) and 2FA (linked to a site but without a 2FA code). Tap an item and change its password and the score updates.

When is the clipboard cleared?

In Settings › Security › Clear Clipboard you choose whether copied passwords are removed after 30, 60 (default) or 90 seconds, or stay on the clipboard (Never). When the app locks, a value KutunaCo copied is removed without waiting.

How do I get a deleted item back?

Deleted items stay in the trash for 30 days. Tap Undo in the notice that appears right after deleting, or open Settings › Box › Trash and tap Restore (or Restore All). After 30 days the item is deleted for good.

How do I delete all my data?

Tap Settings › Danger Zone › Delete All Data, confirm your identity, type DELETE and tap Delete All. Your box, settings (including the app PIN), the autofill copy, temporary export files and preserved box copies are deleted, and a new encryption key is created at the next launch. Deleting the app also removes your box's files on the device; on iOS the keychain items (box key, lock record, AutoFill copy) stay after the app is deleted, so use Delete All Data first. Nothing is kept on a server, so there is nothing else to remove.

Why can't I take screenshots?

This is deliberate protection and cannot be turned off. On Android, screenshots and screen recording are blocked and the content is hidden in recent apps. On iOS the content is blurred in the app switcher and hidden during screen recording or mirroring.

Support

If your question isn't answered here, see the support page or write to support@kutuna.co. Never email your real passwords or your backup file.