Import Credentials

Import loads credentials (site, username, password and optionally a TOTP secret) from a CSV file over USB serial. It happens after unlocking the device and requires physical authorization via the Center button.

Import overwrites the destination slots without asking. If you already have credentials, create a backup (guide) before continuing.

Before you start

You need	How to get it
The device unlocked with PIN	Plug it in and enter your PIN
A CSV file with your credentials	A previous export, or an export from 1Password / Bitwarden / Keepass adapted to the format (see below)
A serial tool	Web manager (recommended), `screen`, `minicom`, PuTTY at 115200 bps

While on the first credential, press Left.

Press Left while on credential 1.

Step 2 — Enter the Backup submenu

In the root menu, Backup is selected by default. Press Center.

Press Center.

Step 3 — Select “Import”

Inside Backup, Import is at the top. If it’s not highlighted, press Up to reach it. Then Center.

With Import highlighted, press Center.

Step 4 — Physical authorization

Just like in export, an authorization screen asks for a long Center press before enabling the import channel.

Before continuing, prepare your CSV file on the host. When ready, hold Center for ~1 second. The device sends REQUEST_SAVE over USB serial waiting for the data.

Don’t press Center short by mistake — a short press won’t authorize anything (it just moves to the next menu screen if there is one).

Step 5 — Send the CSV from the host

With the device in “waiting for data” mode, send over USB serial:

A line with the total number of records to import (example: 5).

One CSV line per credential in this format:

slotIndex,site,username,password[,totpSecret]

Full example:

5
0,github.com,alice,MyP@ss123,JBSWY3DPEHPK3PXP
1,gmail.com,bob@gmail.com,correct horse battery staple
2,bank.com,12345678X,s3cur3P@ss,JBSWY3DPEHPK3PXP;algo=SHA256
3,aws-prod,admin,A!7zQ#mYpL2v
4,banca,12345678X,Pin-only2FA

Each line is processed like this:

Host → device:   "0,github.com,alice,MyP@ss123,JBSWY3DPEHPK3PXP"
Device:          AES-128 CBC encrypt → write to EEPROM slot 0
Device → host:   "Record 1 stored correctly."

The web manager has a file picker that sends the lines in the right order and shows progress. If you don’t want to fight with the terminal, use it.

Step 6 — Progress

During import you’ll see the slot being written and overall progress on screen.

When done, the device shows “Import complete” for 1 second and returns to the menu. Press Left to exit to the credential list and verify they’ve been added.

Step 7 — Verify

Press Left repeatedly to exit the menu to the credential list. Navigate with Left/Right and check that the imported data appears.

Use Right to walk through the newly imported credentials. If everything looks good, consider making a new backup now.

CSV format

Field	Description	Limit
`slotIndex`	Target slot	0–61
`site`	Site or service	16 characters
`username`	Username	16 characters
`password`	Password	Any printable ASCII
`totpSecret`	(optional) TOTP secret	See below

Accepted TOTP secret formats

Format	Example
Bare Base32	`JBSWY3DPEHPK3PXP`
Base32 + algorithm	`JBSWY3DPEHPK3PXP;algo=SHA256`
Full `otpauth://` URI	`otpauth://totp/GitHub:alice?secret=JBSWY3DPEHPK3PXP&algorithm=SHA256`

Default algorithm if not specified: SHA-1.

Validation and errors

Case	Behaviour
`slotIndex` outside 0–61	Reject the line: `"Index out of range"`
Invalid Base32	Reject the TOTP secret: `"TOTP invalid"`
Line with fewer than 3 fields	Skipped with an error log
Empty line	Terminates the import early

Migrating from other managers

To migrate from 1Password, Bitwarden, Keepass and others:

Export to CSV in the source manager.
Adapt the CSV to the ZeroKeyUSB format (a simple Python script — trim each field to 16 chars and reorder columns).
Import following this guide.

There are conversion script templates in the tools repo — tools/convert_<source>.py.

Before you start

Step 1 — Open the menu

Step 2 — Enter the Backup submenu

Step 3 — Select “Import”

Step 4 — Physical authorization

Step 5 — Send the CSV from the host

Step 6 — Progress

Step 7 — Verify

CSV format

Accepted TOTP secret formats

Validation and errors

Migrating from other managers

Next steps

Create a backup

2FA codes

​Before you start

​Step 1 — Open the menu

​Step 2 — Enter the Backup submenu

​Step 3 — Select “Import”

​Step 4 — Physical authorization

​Step 5 — Send the CSV from the host

​Step 6 — Progress

​Step 7 — Verify

​CSV format

​Accepted TOTP secret formats

​Validation and errors

​Migrating from other managers

​Next steps

Create a backup

2FA codes

Before you start

Step 1 — Open the menu

Step 2 — Enter the Backup submenu

Step 3 — Select “Import”

Step 4 — Physical authorization

Step 5 — Send the CSV from the host

Step 6 — Progress

Step 7 — Verify

CSV format

Accepted TOTP secret formats

Validation and errors

Migrating from other managers

Next steps