Encrypted Exports

On this page:

Vault data can be exported in an encrypted JSON file. These exports are encrypted using your account’s encryption key, which are generated on account creation and unique to each PassageWay user account.

Warning

Rotating your account’s encryption key will render an Encrypted Export impossible to decrypt. If you rotate your account encryption key, replace any old files with new one that use the new encryption key.

Account Encryption Keys are unique to each PassageWay user account, so you won’t be able to import an Encrypted Export into a different account.

An Encrypted Export of the following plaintext login item:

{
      ...
      "login": {
        "username": "mylogin",
        "password": "mypassword",
        "totp": "otpauth://totp/my-secret-key"
      },
      ...

Will look something like:

{
      ...
      "login": {
        "username": "9.dZwQ+b9Zasp98dnfp[g|dHZZ1p19783bn1KzkEsA=l52bcWB/w9unvCt2zE/kCwdpiubAOf104os}",
        "password": "1o8y3oqsp8n8986HmW7qA=oiCZo872b3dbp0nzT/Pw=|A2lgso87bfDBCys049ano278ebdmTe4:",
        "totp": "2CIUxtpo870B)*^GW2ta/xb0IYyepO(*&G(&BB84LZ5ByZxu0E9hTTs6PHg0=8q5DHEPU&bp9&*bns3EYgETXpiu9898sxO78l"
      },
      ...

Create an Encrypted Export

Creating an Encrypted Export follows the normal export procedure:

Export from the Web Vault

To create an encrypted export of your personal Vault data from the Web Vault:

Select Tools from the top navigation bar.
Select Export Vault from the left-hand Tools menu.
On the Vault Export page, choose .json (Encrypted) for the File Format.
Enter your Master Password and select the Export Vault button.

Export from a Browser Extension

To create an encrypted export of your personal Vault data from a Browser Extension:

Open the Settings tab.
Scroll down to the Tools section and select the Export Vault option.
On the Export Vault view, choose .json (Encrypted) for the File Format.
Enter your Master Password and select Submit.

Export from Desktop

To create an encrypted export of your personal Vault data from a Desktop app:

From the menu bar, navigate to File → Export Vault.
In the Export Vault window, choose .json (Encrypted) for the File Format.
Enter your Master Password and select the Download button.

Export from Mobile

To create an encrypted export of your personal Vault data from a Mobile app:

Tap the Settings tab.
Scroll down to the Tools section and tap the Export Vault option.
On the Export Vault view, choose .json (Encrypted) for the File Format.
Enter your Master Password and tap the Export Vault button.

Export from the CLI

To create an encrypted export of your personal Vault data from the CLI, use the export command with the specified option --format encrypted_json, for example:

bw export my-master-password --output /users/me/documents/ --format encrypted_json

For more detail, see our CLI documentation.

Import an Encrypted Export

Importing an Encrypted Export follows the normal import procedure, which can only be done from the Web Vault:

In the Web Vault, select Tools from the top navigation bar.
Select Import Data from the left-hand Tools menu.
From the format dropdown, choose PassageWay (json).

Tip

There is no import option specifically for Encrypted Exports. A handler will determine that the .json file is encrypted and attempt to decrypt the file using your account’s encryption key.
Select the Choose File button and add the file to import.

Warning

Import to PassageWay can’t check whether items in the file to import are duplicative of items in your Vault. This means that importing multiple files will create duplicative Vault items if an item is already in the Vault and in the file to import.
Select the Import Data button to complete your import.

import