Encrypted Exports

Vault data can be exported in an encrypted .json file. Encrypted export files will contain vault items from your organization or individual vault, and will not include Sends, password history, trash, or item attachments. Password protected exports can be creating using the web vault or CLI. Bitwarden provides two encrypted export types:

  • Account backup: Export an encrypted file that can only be re-imported to the Bitwarden account that generated the encrypted export file. This process utilizes the account encryption key specific to the Bitwarden account.

  • Password protected: Export an encrypted file protected with a password of your choosing. This file can be decrypted with the password and can be imported to any Bitwarden account.
    The specified password is salted, used to derive an encryption key using PBKDF2 with 100,000 iterations, and finally stretched with HDKF into a new encryption key, which encrypts your data, and message authentication code (MAC).

Warnung

Account backup exports can not be imported to a different account. Additionally, rotating your account's encryption key will render an account restricted export impossible to decrypt. If you rotate your account encryption key, replace any old files with new ones that use the new encryption key.

If you wish to import an encrypted .json file onto a different Bitwarden account, select the Password protected export type when creating an export.

Encrypted exports will include vault items such as logins, cards, secure notes, and identities. An encrypted export of the following plaintext login item:

{
      ...
      "login": {
        "username": "mylogin",
        "password": "mypassword",
        "totp": "otpauth://totp/my-secret-key"
      },
      ...

Will look something like:

{
      ...
      "login": {
        "username": "9.dZwQ+b9Zasp98dnfp[g|dHZZ1p19783bn1KzkEsA=l52bcWB/w9unvCt2zE/kCwdpiubAOf104os}",
        "password": "1o8y3oqsp8n8986HmW7qA=oiCZo872b3dbp0nzT/Pw=|A2lgso87bfDBCys049ano278ebdmTe4:",
        "totp": "2CIUxtpo870B)*^GW2ta/xb0IYyepO(*&G(&BB84LZ5ByZxu0E9hTTs6PHg0=8q5DHEPU&bp9&*bns3EYgETXpiu9898sxO78l"
      },
      ...

Create an encrypted export

Creating an encrypted export follows the normal export procedure. When prompted for File Format, select .json (Encrypted):

To export your individual vault data from the web vault:

  1. Select Tools from the top navigation bar.

  2. Select Export Vault from the tools menu.

  3. On the vault export page, choose a File Format (.json, .csv, or .json (Encrypted)).

  4. If selecting .json (Encrypted), choose the File Type that you would like for the encrypted export:

    • Account backup: This file can only be imported to the current Bitwarden account that generated the encrypted export file.

    • Password protected: This file can be imported to any Bitwarden account by utilizing the password set during the encrypted export process.

  5. Select Confirm Format, enter your master password, and select the Export Vault button to finish.

To export your individual vault data from a browser extension:

  1. Open the Settings tab.

  2. Scroll down to the Tools section and select the Export vault option.

  3. On the export vault view, choose a File Format (.json, .csv, or .json (Encrypted)).

    Tipp

    If you need to import this data into a new Bitwarden account, we recommend using the web vault to create a Password protected export.

  4. Enter your master password and select Submit.

Hinweis

If you are exporting from Vivaldi, you may need to pop-out the browser extension for export to work properly:

Popout a Browser Extension
Popout a Browser Extension

To export your individual vault data from a desktop app:

  1. From the menu bar, navigate to FileExport vault.

  2. In the export vault window, choose a File Format (.json, .csv, or .json (Encryped)).

    Tipp

    If you need to import this data into a new Bitwarden account, we recommend using the web vault to create a Password protected export.

  3. Enter your master password and select the Download button.

To export your individual vault data from a mobile app:

  1. Tap the Settings tab.

  2. Scroll down to the Tools section and tap the Export Vault option.

  3. On the export vault view, choose a File Format (.json, .csv, or .json (Encrypted)).

    Tipp

    If you need to import this data into a new Bitwarden account, we recommend using the web vault to create a Password protected export.

  4. Enter your master password and select the Export vault button.

To export your individual vault data from the CLI, use the export command. By default, export will export your vault as a .csv and save the file to the working directory, however this behavior can be altered using options:

bw export --output /users/me/documents/ --format json --password mYP@ssw0rd

The --password option can be used to specify a password to use to encrypt encrypted_json exports instead of your account encryption key.

For more detail, please see review the Bitwarden CLI documentation.

Import an encrypted export

Importing an encrypted export follows the normal import procedure. When prompted for File Format, select .json:

Tipp

There is no import option specifically for encrypted exports. A handler will determine that the .json file is encrypted and attempt to decrypt the file using either your account's encryption key or encrypted export password.

Alle Schritte, um Daten in Ihren Tresor zu importieren:

  1. Melden Sie sich im Web-Tresor unter https://vault.bitwarden.com an (oder https://your.bitwarden.domain.com, wenn Sie Bitwarden selbst hosten).

  2. Wählen Sie in der oberen Navigationsleiste Werkzeuge.

  3. Wählen Sie Daten importieren aus dem Menü Werkzeuge.

  4. Wählen Sie im Dropdown-Menü das Format Ihrer Import-Datei aus.

  5. Klicken Sie auf Datei auswählen und fügen Sie die zu importierende Datei hinzu oder kopieren Sie den Inhalt Ihrer Datei in das Eingabefeld.

    Warnung

    Beim Importieren wird nicht geprüft, ob Elemente in der zu importierenden Datei bereits in Ihrem Tresor vorhanden sind. Wenn Sie mehrere Dateien importieren oder Dateien mit Elementen importieren, die bereits in Ihrem Tresor vorhanden sind, werden Duplikate erstellt.

  6. Klicken Sie auf Daten importieren, um den Import zu starten.

  7. Löschen Sie nach erfolgreichem Import die Import-Quelldatei von Ihrem Computer. Damit schützen Sie sich für den Fall, dass Ihr Computer angegriffen wird.

Dateianhänge müssen manuell in Ihren Tresor hochgeladen werden.

Um Daten über die Kommandozeile in Ihren Tresor zu importieren, verwenden Sie den folgenden Befehl:

bw import <format> <path>

bw import erfordert ein Format (verwenden Sie bw import --formats, um eine Liste von Formaten abzurufen) und einen Pfad, zum Beispiel:

bw import lastpasscsv /Users/myaccount/Documents/mydata.csv

Löschen Sie nach erfolgreichem Import die Import-Quelldatei von Ihrem Computer. Damit schützen Sie sich für den Fall, dass Ihr Computer angegriffen wird.


Sprache
© 2022 Bitwarden, Inc.
NutzungsbedingungenDatenschutzerklärungSitemap