Family Secret

sync_problem Please import your Authenticator codes again. A bug, now fixed, could erase the 2FA code of an imported entry when it was edited and saved. Importing again restores missing codes and adds account names to imported entries. Codes you already have are not duplicated.

description New: content entries. Store a .env, JSON or YAML file, encrypted like your passwords. Click + and choose Content; the format is detected and highlighted.

bolt New: live 2FA codes. Some of your entries store an authenticator QR. Click Activate once to show their 6-digit codes live on the cards.

filter_list New: organize entries by state. Each entry is Start, Used (default) or Archived. Use the state button in the toolbar to switch which set you see, and click an entry's badge (or set it in its editor) to move it.

visibility_off Tip: hide any banner with its ×. Bring them all back anytime from Settings → Show notices.

Family Secret

Label

List view state

Unlock with PIN

Import from Google

In Google Password Manager choose Settings → Export to get a .csv. Existing entries (same site + username) are skipped; new ones are tagged “Google import”. 2FA codes aren't in Google's export.

⚠ The CSV holds your passwords in plain text — delete it after importing.

Import 2FA from Authenticator

In Google Authenticator: ⋮ → Transfer accounts → Export accounts, then scan the QR code(s) it shows (there may be several) or upload pictures of them. Each code is auto-attached to a matching entry, or added as a new “Authenticator import” entry. Importing again is safe: known codes are not duplicated. Google's export holds the account name but no URL, so a URL is only filled in when the issuer is a domain.

⚠ That QR contains all your 2FA secrets. Scanning stores no picture; if you upload pictures instead, delete them right after importing.

Export to Google

Pick entries to export as a Google-import CSV. 2FA / QR / offline keys can't be represented in Google's format, and content entries are left out.

⚠ The downloaded file holds passwords in plain text — delete it after importing to Google.