Switch to KutunaCo from another password manager

KutunaCo reads the export files of 1Password, Bitwarden, Chrome, Apple Passwords, KeePass, Proton Pass, LastPass and many more. Your 2FA codes can come along from Aegis, 2FAS, Ente Auth and Google Authenticator. You never pick the source: you choose the file and its format is detected from its content.

How do I import?

1. Export your items from your old app, unencrypted, in the format listed below.
2. Move the file to your phone.
3. In KutunaCo, go to Settings › Data Management › Restore / Import › Choose File. Opening the file with KutunaCo from the Files app or the share menu works too.
4. In the preview, check the source, the number of items found and those already in your box.
5. Confirm with Import.
6. Delete the unencrypted export file from your phone, your computer and anywhere you shared it.

Step-by-step guides for the most common sources: Bitwarden, Chrome and Google Password Manager and Google Authenticator.

While your box is empty, the Restore Backup or Import button on the home screen opens the same screen.

Which apps can I move from?

• Chrome, Edge and Google Password Manager: CSV file.
• Apple Passwords and iCloud Keychain: CSV file.
• Firefox: CSV file.
• Bitwarden: CSV or unencrypted JSON. Password-protected JSON exports cannot be read.
• 1Password: CSV or .1pux file.
• KeePass and KeePassXC: CSV file. A .kdbx database can't be imported directly; export it as CSV first.
• Proton Pass: CSV or JSON/ZIP. Turn PGP encryption off when exporting.
• LastPass: CSV file.
• Enpass: JSON file.
• Dashlane, NordPass, RoboForm, Strongbox and others: any CSV whose column headers can be recognised. Turkish headers work too; the separator can be a comma, semicolon or tab, and the file can be UTF-8, UTF-16 or Windows-1254 (Turkish). Columns KutunaCo doesn't know are kept in the item's note under "Extra fields".
• Earlier KutunaCo backups: .enc, .bbx and .json backups.

Save spreadsheets such as Excel or Numbers files as CSV first. A ZIP archive holding several export files can be chosen as well (up to 32 MB and 1,000 files).

How do I move my 2FA codes?

• Aegis: the unencrypted JSON vault, or a plain-text export with one otpauth:// link per line.
• 2FAS: an unencrypted .2fas backup.
• Ente Auth: the plain-text export.
• Google Authenticator: scan the "Transfer accounts" QR codes with + › Scan 2FA QR Code (several codes are scanned one after another, then Import Scanned Codes). A text file of otpauth-migration:// links works too.
• Other authenticators: a text file with one otpauth:// link per line.

For code types KutunaCo cannot generate (such as HOTP or Steam), the secrets are saved to the item's note so they aren't lost.

What is not imported?

• Passkeys: KutunaCo does not support passkeys; a line saying so is added to the note of any account that had one.
• Items deleted in the old app and completely empty items.
• Encrypted exports (password-protected JSON, ZIP or PGP): turn encryption off when exporting.
• Files over 20 MB and exports (or one ZIP archive) with more than 25,000 items; split large exports into parts. The import is also refused if your box would no longer fit in one encrypted backup (20 MB).

Will the same item be added twice?

No. Items already in your box are recognised by content and listed in the preview as Already saved (skipped). An entry repeated inside the file is taken once, and the extra copies are counted as Repeated in the file (skipped). If the same account has a different password than the one in your box, it is added as a separate item and the preview warns you; you can delete the old copy after importing.

Is the export file safe?

Exports from other apps are usually unencrypted plain text: anyone who opens the file can read your passwords. KutunaCo always warns you about such files. When the import is done, delete the file from your phone, your downloads, your email and your cloud folders. Then we recommend making an encrypted backup in KutunaCo; the help page shows how.