TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Tell HN: Bitwarden does not export attachments in backups

233 点作者 howlett将近 3 年前
I&#x27;ve been using Bitwarden for about 4 years now and cannot understand how a Password Manager does not export attachments when backing up your data. I understand this was the case when the only export format was a CSV file, but now with JSON files I can&#x27;t get my head around the fact that I almost missed crucial SSH keys had I not checked the output. A simple solution would be to b64 encode each file and add it into an array!<p>It&#x27;s even mentioned on their Help page - https:&#x2F;&#x2F;bitwarden.com&#x2F;help&#x2F;export-your-data&#x2F; but I still think it&#x27;s a bit unacceptable that there isn&#x27;t even a warning in the GUI about this.<p>And yes, I know there are ways to manually export the files, but I shouldn&#x27;t have to do that.

29 条评论

Youden将近 3 年前
It&#x27;s been raised but doesn&#x27;t appear to be a large enough issue to be put on the roadmap: <a href="https:&#x2F;&#x2F;community.bitwarden.com&#x2F;t&#x2F;allow-attachments-to-be-exported-when-using-export-data&#x2F;835&#x2F;34" rel="nofollow">https:&#x2F;&#x2F;community.bitwarden.com&#x2F;t&#x2F;allow-attachments-to-be-ex...</a><p>The project is open-source, maybe send them a pull request?
评论 #31704487 未加载
评论 #31704969 未加载
评论 #31705264 未加载
1una将近 3 年前
&gt; A simple solution would be to b64 encode each file and add it into an array!<p>An individual file attachment can be as large as 500 MB[0]. It would make the JSON file too big to use.<p>Still, I do think that Bitwarden should warn users about it when exporting. Just mentioning it in the <i>Help Center</i> doesn&#x27;t seem so helpful.<p>[0]: <a href="https:&#x2F;&#x2F;bitwarden.com&#x2F;help&#x2F;attachments&#x2F;" rel="nofollow">https:&#x2F;&#x2F;bitwarden.com&#x2F;help&#x2F;attachments&#x2F;</a>
评论 #31706693 未加载
评论 #31705792 未加载
aceazzameen将近 3 年前
I recently switched from LastPass to Bitwarden, and LastPass has the same issue. I had to manually save all my attachments and upload them into their proper place on Bitwarden. It was frustrating, but also not a big deal in my case. Worse things have happened.<p>I wholeheartedly agree that these companies should have a warning that attachments won&#x27;t export. Because I almost forgot about them.
评论 #31706153 未加载
评论 #31722601 未加载
sigio将近 3 年前
I use bitwarden&#x2F;vaultwarden (self hosted), and didn&#x27;t even know there was an attachment option, so haven&#x27;t used it upto now. I did use notes (for storing stuff like ssh&#x2F;gpg keys), and can confirm that these are exported correctly. Attachments are also not exported in vaultwarden as far as I can see.<p>I&#x27;ll just stick to stuffing files in notes for now, as I had been doing.
评论 #31706204 未加载
leetrout将近 3 年前
I went to bitwarden from dashlane that didnt even export secure notes<p><a href="https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;Dashlane&#x2F;comments&#x2F;gfwyvo&#x2F;comment&#x2F;fqiw1r1&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.reddit.com&#x2F;r&#x2F;Dashlane&#x2F;comments&#x2F;gfwyvo&#x2F;comment&#x2F;fq...</a><p>This is the same thing again.<p>I switched to 1password before all the funding and feel like there arent any viable alternatives now.<p>Edit: to be clear this isnt me on reddit this thread is just what backed up bitwarden.
评论 #31704475 未加载
jeroenhd将近 3 年前
Looking at the export code: <a href="https:&#x2F;&#x2F;github.com&#x2F;bitwarden&#x2F;clients&#x2F;blob&#x2F;da5e4a57d026e0d09356ad3405e08fb140462fd7&#x2F;libs&#x2F;common&#x2F;src&#x2F;services&#x2F;export.service.ts" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;bitwarden&#x2F;clients&#x2F;blob&#x2F;da5e4a57d026e0d093...</a><p>The entire export process seems to be client side. Altering the export to include files should be feasible though the Bitwarden devs might choose not to merge your code because allowing users to access all of those Azure buckets all at once must come at a significant cost.<p>My workaround for this is to stuff SSH keys and the like in secret fields rather than attachments. This doesn&#x27;t work for larger files, but it works well enough for my use cases so far.
jka将近 3 年前
Can you migrate storage of your SSH keys in Bitwarden to custom fields[1]? Those should -- I think -- be exported with the contents of the vault.<p>[1] - <a href="https:&#x2F;&#x2F;bitwarden.com&#x2F;help&#x2F;custom-fields&#x2F;#custom-fields-for-keys" rel="nofollow">https:&#x2F;&#x2F;bitwarden.com&#x2F;help&#x2F;custom-fields&#x2F;#custom-fields-for-...</a>
评论 #31704056 未加载
AnonHP将近 3 年前
Bitwarden pivoted to serving enterprise needs (like SSO, collaboration) a few years ago and hasn’t given much attention to improving the basic product itself (there still aren’t additional types, like licenses, WiFi passwords, etc.). You can file this as an issue and wait.
评论 #31703745 未加载
评论 #31705799 未加载
评论 #31703778 未加载
ancientsofmumu将近 3 年前
Quick note, the Secure Note field can store up to 10k characters (I think it is, last I looked) <i>post-encryption</i> - that&#x27;s typically big enough for most SSH key types, but may not be big enough for some GPG key exports - I have one GPG key armor export too large to fit. Point being you can stuff a good amount of info in those Notes most times to get exported, but there is a limit to be aware of - the client should fail to save the data once you&#x27;ve crossed that limit if I recall correctly, red error text etc.
thiagocmoraes将近 3 年前
I just found out this now and I&#x27;m upset. I&#x27;ve been a paying user for a long time and won&#x27;t use attachments anymore. Might as well consider migrating to a different password manager to migrate my attachments. Thanks for letting me know.
xanaxagoras将近 3 年前
You should move to vaultwarden and do regular offsite backups with one of the projects listed at the bottom here: <a href="https:&#x2F;&#x2F;github.com&#x2F;dani-garcia&#x2F;vaultwarden&#x2F;wiki&#x2F;Backing-up-your-vault" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;dani-garcia&#x2F;vaultwarden&#x2F;wiki&#x2F;Backing-up-y...</a><p>This will backup your entire database, including attachments, users, etc.
quyleanh将近 3 年前
This is one of my motivation to selfhosted Vaultwarden [0]. Full features, lightweight with Rust, privacy, and full control.<p>[0] <a href="https:&#x2F;&#x2F;github.com&#x2F;dani-garcia&#x2F;vaultwarden" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;dani-garcia&#x2F;vaultwarden</a>
评论 #31705444 未加载
adrianmonk将近 3 年前
I don&#x27;t use Bitwarden, but I just read the docs about backups, which are here:<p><a href="https:&#x2F;&#x2F;bitwarden.com&#x2F;help&#x2F;backup-on-premise&#x2F;" rel="nofollow">https:&#x2F;&#x2F;bitwarden.com&#x2F;help&#x2F;backup-on-premise&#x2F;</a><p>Those say that the procedure for backups is to keep a copy of the entire bwdata directory. It doesn&#x27;t say that you can or should use the export feature.<p>It seems like the export feature is meant for data migration, not for backups. Though they are related, they&#x27;re not the same concept.<p>It probably wouldn&#x27;t hurt to make this clearer in the GUI. In the export section, it could warn not to use it for backups and could give a link to the proper procedure.
anthropodie将近 3 年前
I have Bitwarden desktop&#x2F;mobile apps and I keep them in sync exactly for this reason. In case something bad happens I can at least copy and paste individual password!
jmull将近 3 年前
... is there some better way to back up your bitwarden data than export?<p>Because if not, then I don&#x27;t understand this. If you can&#x27;t back up attachments, they can&#x27;t be used for anything important. If they can&#x27;t be used for anything important, then what are they for?<p>It would be better to not have attachments at all than not let people back them up.
chipsa将近 3 年前
Better solution that b64 the files is just make a zip file from the attachments with them in folders by the name of the entry. That said, I don&#x27;t use the attachments feature (If I need to securely store files, I store them elsewhere).
snickerbockers将近 3 年前
What exactly is an &quot;attachment&quot; in this context? Ive been using BW for about a year now but I&#x27;ve never come across that term. Is it non-login data like the secure notes section?
评论 #31704938 未加载
moughxyz将近 3 年前
File backups need to be done in real time, otherwise backing up gigabytes of data on demand would be infeasible.<p>We recently released this feature for Standard Notes[0]. Files you upload to your account from any device are automatically encrypted and backed up to a local folder on your computer.<p>Granting companies full custody of your files today feels reckless; local backups are a must. And better it be encrypted.<p>[0]: <a href="https:&#x2F;&#x2F;standardnotes.com" rel="nofollow">https:&#x2F;&#x2F;standardnotes.com</a>
longrod将近 3 年前
This makes a lot of sense. I use Notesnook [0] which also encrypts everything client side. It also doesn&#x27;t export attachments in the automatic backups. I asked the devs and this is done to save user&#x27;s bandwidth and also to make everything more reliable. Suppose the user&#x27;s internet is slow or metered, what should be done then? Would the backup never be taken? That&#x27;s obviously a bad idea since the notes are too important not to backup.<p>So it makes a sacrifice on the attachments to make sure backup of the more important stuff keeps working even when there&#x27;s no internet. Moreover downloading all the attachments takes a lot of time and doing it every day (or whatever interval) wouldn&#x27;t be a good user experience.<p>I think the Notesnook guys were thinking of adding cloud-to-cloud backups for attachments to work around this reliably.<p>[0] <a href="https:&#x2F;&#x2F;notesnook.com" rel="nofollow">https:&#x2F;&#x2F;notesnook.com</a>
评论 #31706016 未加载
webdog将近 3 年前
This is very salient, I just left some feedback related to lack of functionality, in their community forums yesterday. I bought a subscription to use Bitwarden against 1Password, trying to switch from 1P to BW. I dislike 1P&#x27;s arrogant customer service (Read their community forums for about an hour, and look at many of the responses from staff regarding feature requests) and my attitude towards them really soured when they flipped the switch on perpetual licensing.<p>So I was excited and went in with an open mind, and delighted to be supporting an open source company:<p>* The initial migration went off to a bad start as it didn&#x27;t include everything from 1Password. Seemingly random data, and some attachments were missing. If I remember correctly, timestamps&#x2F;creation dates didn&#x27;t seem to migrate over, and some whole passwords weren&#x27;t brought over, but no errors were reported from their migrator.<p>* When I went to setup my vault after the migration, I was disappointed to see that there was a distinct lack of password types. I have software licenses, credit cards, API keys, regular passwords, recovery tokens, (non-critical) GPG keys, SSH keys, etc etc that I store in my vault. BW only had&#x2F;has 4 item types to choose from, which just isn&#x27;t suitable if you want to correctly track the types of items for organization and filtering. There is support for custom fields, but it just isn&#x27;t the same..<p>* No support for tagging. I tried to setup a nested folder structure alternatively, but the UX was not easy to use in the desktop application (I was assuming I could do something similar to a `mkdir -p path&#x2F;to&#x2F;nested&#x2F;folder` but BW only allowed me to create a single folder item at a time. For 500 password items, and different &quot;buckets&quot; I keep to organize, I ended up abandoning folders and just kept everything in the root in a mish-mash setup.<p>I get that it&#x27;s small and open source, and you have to temper expectations when comparing David (BW) vs Goliath (1P), but BW seems to have earned more community trust, and has an engaged community of fans. BW could absolutely provide a better experience than 1P both from a customer empathy standpoint, and from a product delivery perspective. But point 2 makes a failure (IMO) on point 1. Reading through their community forums, many of these (What I&#x27;d consider) table-stakes features have been left to rot on the tree of technical debt. Which makes me sad, because I&#x27;d pay a lot more than their current pricing model if they kept an open source attitude towards the product and could deliver more than just a &quot;We&#x27;re working on it! Stay tuned!&quot; attitude after years of community comments. I&#x27;m gonna stick with 1P when the licenses come up for renewal, and use KeePass or Vault as an on-prem backup solution.<p>I truly, truly hope BW succeeds, because I&#x27;d love to move away from my current setup. But I&#x27;m not willing to capitulate my workflow because the company can&#x27;t deliver on highly-requested&#x2F;highly-coveted features.<p>I don&#x27;t squarely put the blame on BW. This feels very common in the saas lifecycle: A feature has some sort of engagement&#x2F;revenue metric attached to it, for growth tracking. Whether correlation is correct is a debate for another time, but many of these core features have an opaque effect on revenue or engagement (If you&#x27;re a cynical product manager, an efficient tagging system correlates to less engagement, because I&#x27;m spending less time rooting around the user interface, which is less opportunity to use the application minute-by-minute), or it&#x27;s considered plumbing-type work in which the revenue&#x2F;engagement potential is spread out across the entire userbase, so the effect is less explosive (SSH key management[1], a niche feature requested by a loud subset of 1P users had huge awareness. But external sharing of items[2] was something I heard very little about, even though (objectively) external sharing casts a wider a shadow of net-new 1P users.<p>I digress. This just reminded me of the frustration I have with software: Feels like everything I want to use is always missing some key element that I have to trade off for another key element when looking at competitors.<p>[1] <a href="https:&#x2F;&#x2F;blog.1password.com&#x2F;1password-ssh-agent&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.1password.com&#x2F;1password-ssh-agent&#x2F;</a> [2] <a href="https:&#x2F;&#x2F;blog.1password.com&#x2F;psst-item-sharing&#x2F;" rel="nofollow">https:&#x2F;&#x2F;blog.1password.com&#x2F;psst-item-sharing&#x2F;</a>
评论 #31707102 未加载
评论 #31712009 未加载
culpable_pickle将近 3 年前
Honestly, with 1Password&#x27;s cloud only move, I firmly think there&#x27;s a open position for a new major player in the password management space that learns from all the current players.
jiveturkey将近 3 年前
I don&#x27;t think 1password does either? Anyone know for sure? I think they give you a separate attachments folder, but any item loses its association to any attachment.
评论 #31706883 未加载
Hellion将近 3 年前
I’m still on KeePass. I keep meaning to get off of it but it more or less works okay (not great)<p>I use windows, Debian, iOS, and Firefox as the browser on desktop. Any recommendations?
评论 #31706565 未加载
评论 #31705639 未加载
评论 #31706130 未加载
tluyben2将近 3 年前
I have been bitten by this. It is quite weird imho.
ruffrey将近 3 年前
It’s worth taking a glance at other E2EE apps. I’m biased but EnvKey can handle huge content, though file support is in early stages.
foobiekr将近 3 年前
This is sadly common. 1Password does not either.
评论 #31706068 未加载
评论 #31705141 未加载
评论 #31705527 未加载
rossmohax将近 3 年前
Thanks for heads up! I am a happy user for Bitwarden and wasn&#x27;t aware of that.
hammyhavoc将近 3 年前
Wow, if true, this is a huge oversight.
评论 #31706505 未加载
replwoacause将近 3 年前
I’ve been using BW for 5 years but looks like I need to start the search for a new PW manager. Thanks for pointing this out.