> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zerokeyusb.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Import Credentials
> Restore from a backup or migrate from another password manager. Screen by screen, from the menu to imported data.
Import loads credentials (site, username, password and optionally a TOTP secret) from a CSV file over USB serial. It happens **after unlocking** the device and requires **physical authorization** via the Center button.
Import **overwrites** the destination slots without asking. If you already have credentials, **create a backup** ([guide](/getting-started/creating-backups)) before continuing.
***
## Before you start
| You need | How to get it |
| -------------------------------- | ------------------------------------------------------------------------------------------------------ |
| The device unlocked with PIN | Plug it in and enter your PIN |
| A CSV file with your credentials | A previous export, or an export from 1Password / Bitwarden / Keepass adapted to the format (see below) |
| A serial tool | [Web manager](https://zerokeyusb.com/manager) (recommended), `screen`, `minicom`, PuTTY at 115200 bps |
***
## Step 1 — Open the menu
While on the first credential, press **Left**.
*Press **Left** while on credential 1.*
***
## Step 2 — Enter the Backup submenu
In the root menu, **Backup** is selected by default. Press **Center**.
*Press **Center**.*
***
## Step 3 — Select "Import"
Inside Backup, `Import` is at the top. If it's not highlighted, press **Up** to reach it. Then **Center**.
*With `Import` highlighted, press **Center**.*
***
## Step 4 — Physical authorization
Just like in export, an authorization screen asks for a long Center press before enabling the import channel.
*Before continuing, prepare your CSV file on the host. When ready, **hold Center for \~1 second**. The device sends `REQUEST_SAVE` over USB serial waiting for the data.*
**Don't press Center short by mistake** — a short press won't authorize anything (it just moves to the next menu screen if there is one).
***
## Step 5 — Send the CSV from the host
With the device in "waiting for data" mode, send over USB serial:
1. A line with the **total number of records** to import (example: `5`).
2. One CSV line per credential in this format:
```csv theme={null}
slotIndex,site,username,password[,totpSecret]
```
Full example:
```csv theme={null}
5
0,github.com,alice,MyP@ss123,JBSWY3DPEHPK3PXP
1,gmail.com,bob@gmail.com,correct horse battery staple
2,bank.com,12345678X,s3cur3P@ss,JBSWY3DPEHPK3PXP;algo=SHA256
3,aws-prod,admin,A!7zQ#mYpL2v
4,banca,12345678X,Pin-only2FA
```
Each line is processed like this:
```
Host → device: "0,github.com,alice,MyP@ss123,JBSWY3DPEHPK3PXP"
Device: AES-128 CBC encrypt → write to EEPROM slot 0
Device → host: "Record 1 stored correctly."
```
The [web manager](https://zerokeyusb.com/manager) has a file picker that sends the lines in the right order and shows progress. If you don't want to fight with the terminal, use it.
***
## Step 6 — Progress
During import you'll see the slot being written and overall progress on screen.
*When done, the device shows "Import complete" for 1 second and returns to the menu. Press **Left** to exit to the credential list and verify they've been added.*
***
## Step 7 — Verify
Press **Left** repeatedly to exit the menu to the credential list. Navigate with **Left/Right** and check that the imported data appears.
*Use **Right** to walk through the newly imported credentials. If everything looks good, consider making a [new backup](/getting-started/creating-backups) now.*
***
## CSV format
| Field | Description | Limit |
| ------------ | ---------------------- | ------------------- |
| `slotIndex` | Target slot | 0–61 |
| `site` | Site or service | 16 characters |
| `username` | Username | 16 characters |
| `password` | Password | Any printable ASCII |
| `totpSecret` | (optional) TOTP secret | See below |
### Accepted TOTP secret formats
| Format | Example |
| --------------------- | ---------------------------------------------------------------------- |
| Bare Base32 | `JBSWY3DPEHPK3PXP` |
| Base32 + algorithm | `JBSWY3DPEHPK3PXP;algo=SHA256` |
| Full `otpauth://` URI | `otpauth://totp/GitHub:alice?secret=JBSWY3DPEHPK3PXP&algorithm=SHA256` |
Default algorithm if not specified: **SHA-1**.
***
## Validation and errors
| Case | Behaviour |
| ----------------------------- | ---------------------------------------- |
| `slotIndex` outside 0–61 | Reject the line: `"Index out of range"` |
| Invalid Base32 | Reject the TOTP secret: `"TOTP invalid"` |
| Line with fewer than 3 fields | Skipped with an error log |
| Empty line | Terminates the import early |
***
## Migrating from other managers
To migrate from 1Password, Bitwarden, Keepass and others:
1. Export to CSV in the source manager.
2. Adapt the CSV to the ZeroKeyUSB format (a simple Python script — trim each field to 16 chars and reorder columns).
3. Import following this guide.
There are conversion script templates in the [tools repo](https://github.com/Depbit-lab/zerokeyusb-tools) — `tools/convert_.py`.
***
## Next steps
Export the freshly imported data before doing more work.
If you imported TOTP secrets, see how to view and type them.
*Press **Left** while on credential 1.*
***
## Step 2 — Enter the Backup submenu
In the root menu, **Backup** is selected by default. Press **Center**.
*Press **Center**.*
***
## Step 3 — Select "Import"
Inside Backup, `Import` is at the top. If it's not highlighted, press **Up** to reach it. Then **Center**.
*With `Import` highlighted, press **Center**.*
***
## Step 4 — Physical authorization
Just like in export, an authorization screen asks for a long Center press before enabling the import channel.
*Before continuing, prepare your CSV file on the host. When ready, **hold Center for \~1 second**. The device sends `REQUEST_SAVE` over USB serial waiting for the data.*
*When done, the device shows "Import complete" for 1 second and returns to the menu. Press **Left** to exit to the credential list and verify they've been added.*
***
## Step 7 — Verify
Press **Left** repeatedly to exit the menu to the credential list. Navigate with **Left/Right** and check that the imported data appears.
*Use **Right** to walk through the newly imported credentials. If everything looks good, consider making a [new backup](/getting-started/creating-backups) now.*
***
## CSV format
| Field | Description | Limit |
| ------------ | ---------------------- | ------------------- |
| `slotIndex` | Target slot | 0–61 |
| `site` | Site or service | 16 characters |
| `username` | Username | 16 characters |
| `password` | Password | Any printable ASCII |
| `totpSecret` | (optional) TOTP secret | See below |
### Accepted TOTP secret formats
| Format | Example |
| --------------------- | ---------------------------------------------------------------------- |
| Bare Base32 | `JBSWY3DPEHPK3PXP` |
| Base32 + algorithm | `JBSWY3DPEHPK3PXP;algo=SHA256` |
| Full `otpauth://` URI | `otpauth://totp/GitHub:alice?secret=JBSWY3DPEHPK3PXP&algorithm=SHA256` |
Default algorithm if not specified: **SHA-1**.
***
## Validation and errors
| Case | Behaviour |
| ----------------------------- | ---------------------------------------- |
| `slotIndex` outside 0–61 | Reject the line: `"Index out of range"` |
| Invalid Base32 | Reject the TOTP secret: `"TOTP invalid"` |
| Line with fewer than 3 fields | Skipped with an error log |
| Empty line | Terminates the import early |
***
## Migrating from other managers
To migrate from 1Password, Bitwarden, Keepass and others:
1. Export to CSV in the source manager.
2. Adapt the CSV to the ZeroKeyUSB format (a simple Python script — trim each field to 16 chars and reorder columns).
3. Import following this guide.