[GH-ISSUE #4818] Exporting organization vaults is not possible with clients since v2024.7.x

kerem commented

2026-03-03 02:14:07 +03:00

Owner

Originally created by @freekvh on GitHub (Aug 5, 2024).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/4818

Subject of the issue

Exporting organization Vaults is impossible from any client, the web UI does not offer the feature (whereas BitWarden does: https://bitwarden.com/help/export-your-data/#export-an-organization-vault) and the FireFox extension will export the Vault but the generated .json file is empty.

Deployment environment

Your environment (Generated via diagnostics page)

Vaultwarden version: v1.31.0
Web-vault version: v2024.5.1b
OS/Arch: linux/x86_64
Running within a container: true (Base: Debian)
Environment settings overridden: true
Uses a reverse proxy: true
IP Header check: false (X-Forwarded-For)
Internet access: true
Internet access via a proxy: false
DNS Check: true
Browser/Server Time Check: true
Server/NTP Time Check: true
Domain Configuration Check: true
HTTPS Check: true
Database type: SQLite
Database version: 3.45.0
Clients used:
Reverse proxy and version:
Other relevant information:

Config (Generated via diagnostics page)

Show Running Config

Environment settings which are overridden: DOMAIN, SIGNUPS_ALLOWED, ADMIN_TOKEN

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": false,
  "_enable_smtp": false,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_smtp_img_src": "cid:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://**********",
  "domain_origin": "*****://**********",
  "domain_path": "",
  "domain_set": true,
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": false,
  "email_attempts_limit": 3,
  "email_change_allowed": true,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "fido2-vault-credentials",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Vaultwarden",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "Info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 600000,
  "push_enabled": false,
  "push_identity_uri": "https://identity.bitwarden.com",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://push.bitwarden.com",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": true,
  "signups_domains_whitelist": "",
  "signups_verify": false,
  "signups_verify_resend_limit": 6,
  "signups_verify_resend_time": 3600,
  "smtp_accept_invalid_certs": false,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": null,
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "",
  "smtp_from_name": "Vaultwarden",
  "smtp_host": null,
  "smtp_password": null,
  "smtp_port": 587,
  "smtp_security": "starttls",
  "smtp_ssl": null,
  "smtp_timeout": 15,
  "smtp_username": null,
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": false,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Steps to reproduce

Try to export an organization vault

Expected behaviour

Download a Json with vault data, as will happen correctly for items from the primary owner

Actual behaviour

Either the option is not there, or the generated .json file is empty

Troubleshooting data

Apologies, I try to access the admin page wrongly too often, can log in for more details now, will add later, but perhaps someone can already confirm this based on this description.

Originally created by @freekvh on GitHub (Aug 5, 2024). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/4818   ### Subject of the issue Exporting organization Vaults is impossible from any client, the web UI does not offer the feature (whereas BitWarden does: https://bitwarden.com/help/export-your-data/#export-an-organization-vault) and the FireFox extension will export the Vault but the generated .json file is empty. ### Deployment environment ### Your environment (Generated via diagnostics page) * Vaultwarden version: v1.31.0 * Web-vault version: v2024.5.1b * OS/Arch: linux/x86_64 * Running within a container: true (Base: Debian) * Environment settings overridden: true * Uses a reverse proxy: true * IP Header check: false (X-Forwarded-For) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Browser/Server Time Check: true * Server/NTP Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Database type: SQLite * Database version: 3.45.0 * Clients used: * Reverse proxy and version: * Other relevant information: ### Config (Generated via diagnostics page) <details><summary>Show Running Config</summary> **Environment settings which are overridden:** DOMAIN, SIGNUPS_ALLOWED, ADMIN_TOKEN ```json { "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": false, "_enable_smtp": false, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_smtp_img_src": "cid:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://**********", "domain_origin": "*****://**********", "domain_path": "", "domain_set": true, "duo_host": null, "duo_ikey": null, "duo_skey": null, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "fido2-vault-credentials", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "invitation_expiration_hours": 120, "invitation_org_name": "Vaultwarden", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "Info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": true, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": null, "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "", "smtp_from_name": "Vaultwarden", "smtp_host": null, "smtp_password": null, "smtp_port": 587, "smtp_security": "starttls", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": null, "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ``` </details> ### Steps to reproduce Try to export an organization vault ### Expected behaviour Download a Json with vault data, as will happen correctly for items from the primary owner ### Actual behaviour Either the option is not there, or the generated .json file is empty ### Troubleshooting data Apologies, I try to access the admin page wrongly too often, can log in for more details now, will add later, but perhaps someone can already confirm this based on this description.

kerem

2026-03-03 02:14:07 +03:00

closed this issue
added the
bug

future Vault
labels

kerem commented

2026-03-03 02:14:07 +03:00

Author

Owner

@BlackDex commented on GitHub (Aug 6, 2024):

First, you can still find the export for Orgs by using the top right 9 dotted icon and go to the admin panel there.

Second, it does seem that the export isn't working anymore right now.
This probably is because something has changed on what/how we return the json now because of the Native Beta clients.

EDIT: It doesn't work via the Extension, it does seem to work via the web-vault.
Probably the extensions (And other newer versions) expect a different fromat.

@BlackDex commented on GitHub (Aug 6, 2024): First, you can still find the export for Orgs by using the top right 9 dotted icon and go to the admin panel there. Second, it does seem that the export isn't working anymore right now. This probably is because something has changed on what/how we return the json now because of the Native Beta clients. **EDIT:** It doesn't work via the Extension, it does seem to work via the web-vault. Probably the extensions (And other newer versions) expect a different fromat.

kerem commented

2026-03-03 02:14:08 +03:00

Author

Owner

@freekvh commented on GitHub (Aug 6, 2024):

I can confirm that indeed I can (and did) successfully export the Vault from the admin console.

@freekvh commented on GitHub (Aug 6, 2024): I can confirm that indeed I can (and did) successfully export the Vault from the admin console.

kerem commented

2026-03-03 02:14:08 +03:00

Author

Owner

@freekvh commented on GitHub (Aug 6, 2024):

I updated the support string in the original issue.

@freekvh commented on GitHub (Aug 6, 2024): I updated the support string in the original issue.

kerem commented

2026-03-03 02:14:08 +03:00

Author

Owner

@BlackDex commented on GitHub (Aug 23, 2024):

Ok, i already found it a bit strange, but most clients are not able to export Organization vaults.
Only the web-vault and cli are able to do this.

I just checked the extension again and v2024.7.x does provide a selection for this, but it does not call the required endpoint to actually export the vault.

Also, i tested this on vault.bitwarden.com and it doesn't work there either.

But most importantly, they have removed this interface from the new v2024.8.0 version, and only the personal vault can be exported again.

Therefor I'm going to close this as it was probably never intended to be there in the first place.

@BlackDex commented on GitHub (Aug 23, 2024): Ok, i already found it a bit strange, but most clients are not able to export Organization vaults. Only the web-vault and cli are able to do this. I just checked the extension again and v2024.7.x does provide a selection for this, but it does not call the required endpoint to actually export the vault. Also, i tested this on `vault.bitwarden.com` and it doesn't work there either. But most importantly, they have removed this interface from the new v2024.8.0 version, and only the personal vault can be exported again. Therefor I'm going to close this as it was probably never intended to be there in the first place.

Rows
Columns

[GH-ISSUE #4818] Exporting organization vaults is not possible with clients since v2024.7.x #1988

Subject of the issue

Deployment environment

Your environment (Generated via diagnostics page)

Config (Generated via diagnostics page)

Steps to reproduce

Expected behaviour

Actual behaviour

Troubleshooting data