Switch to KutunaCo from another password manager

KutunaCo reads the export files of 1Password, Bitwarden, Chrome, Apple Passwords, KeePass, Proton Pass, LastPass and many more. Your 2FA codes can come along from Aegis, 2FAS, Ente Auth and Google Authenticator. You never pick the source: you choose the file and its format is detected from its content.

How do I import?

1. Export your items from your old app, unencrypted, in the format listed below.
2. Move the file to your phone.
3. In KutunaCo, go to Ayarlar › Veri Yönetimi › Geri Yükle / İçe Aktar › Dosya Seç (Settings › Data Management › Restore / Import › Choose file). Opening the file with KutunaCo from the Files app or the share menu works too.
4. In the preview, check the source, the number of items found and those already in your vault.
5. Confirm with İçe Aktar (Import).
6. Delete the unencrypted export file from your phone, your computer and anywhere you shared it.

Step-by-step guides for the most common sources: Bitwarden, Chrome and Google Password Manager and Google Authenticator.

On first use, while your vault is empty, the Başka uygulamadan içe aktar (import from another app) button on the home screen opens the same screen.

Which apps can I move from?

• Chrome, Edge and Google Password Manager: CSV file.
• Apple Passwords and iCloud Keychain: CSV file.
• Firefox: CSV file.
• Bitwarden: CSV or unencrypted JSON. Password-protected JSON exports cannot be read.
• 1Password: CSV or .1pux file.
• KeePass and KeePassXC: CSV file. A .kdbx database can't be imported directly; export it as CSV first.
• Proton Pass: CSV or JSON/ZIP. Turn PGP encryption off when exporting.
• LastPass: CSV file.
• Enpass: JSON file.
• Dashlane, NordPass, RoboForm, Strongbox and others: any CSV whose column headers can be recognised. Turkish headers work too; the separator can be a comma, semicolon or tab.
• Earlier KutunaCo backups: .enc, .bbx and .json backups.

Save spreadsheets such as Excel or Numbers files as CSV first. A ZIP archive holding several export files can be chosen as well.

How do I move my 2FA codes?

• Aegis: the unencrypted JSON vault, or a plain-text export with one otpauth:// link per line.
• 2FAS: an unencrypted .2fas backup.
• Ente Auth: the plain-text export.
• Google Authenticator: otpauth-migration:// links. Save the link inside the app's "Transfer accounts" QR code to a text file and choose that file.
• Other authenticators: a text file with one otpauth:// link per line.

For code types KutunaCo cannot generate (such as HOTP or Steam), the secrets are saved to the item's note so they aren't lost.

What is not imported?

• Passkeys: KutunaCo does not support passkeys; a line saying so is added to the note of any account that had one.
• Items deleted in the old app and completely empty items.
• Encrypted exports (password-protected JSON, ZIP or PGP): turn encryption off when exporting.
• Files over 20 MB and exports with more than 50,000 items; split large exports into parts.

Will the same item be added twice?

No. Items already in your vault, or repeated within the file, are removed by comparing their contents and show up in the preview as already saved. If the same account has a different password than the one in your vault, it is added as a separate item and the preview warns you; you can delete the old copy after importing.

Is the export file safe?

Exports from other apps are usually unencrypted plain text: anyone who opens the file can read your passwords. KutunaCo always warns you about such files. When the import is done, delete the file from your phone, your downloads, your email and your cloud folders. Then we recommend making an encrypted backup in KutunaCo; the help page shows how.