Export Organization Items
For organizations, exporting data and storing it in a secure location is a great way of ensuring access to a backup. Organizations can export data from the web app and CLI. Vault data is decrypted locally by the client before export, meaning no unencrypted data is transported over the internet when you create an export. There are two ways to export organization data:
- Organization members with the Manage collection permission can export item data from collections for which they have that permission by following this process.
- Organization admins, owners, and custom users with the correct permissions can export all organization item data by using this instructions in this article.
- Organizations that have enabled the Centralize organization ownership policy cannot export organization members' My Items while the user is active in the organization.
Exports can be made in a few different formats, however Bitwarden recommends using an encrypted .json option for best security and a more complete export, as .csv files won't currently export cards or identities, and only .json exports include stored passkeys and SSH keys. For a complete list of all the items and fields included in an organizations vault export, see this ⬇️ JSON sample.
Web app
To export your organization data from the web app:
- Open the Admin Console using the product switcher.
- Select Settings → Export from the navigation:
Export organization items
3. On the vault export page, choose a File format (.json, .csv, or .json (Encrypted)) and select the Confirm formatbutton.
[!WARNING] Careful w/ Exports Unless you use an encrypted export, do not store or send the exported file over insecure channels, like email, and delete the file immediately after use. 4. Enter your master password and select the Export button.
[!NOTE] Exported Org data event Exporting an organization's vault data will be captured by event logs. Learn more.
CLI
[!TIP] Sync before export on CLI Sync your vault with
bw syncbefore exporting to ensure the most up-to-date information is included.
To export your organization data from the CLI, use the export command with the --organizationid option. By default, export will export your vault as a .csv and save the file to the working directory, however this behavior can be altered using options:
bw export my-master-password --organizationid 7063feab-4b10-472e-b64c-785e2b870b92 --output /users/me/documents/ --format json --session my-session-key
[!TIP] Getting organizationid with bw list If you don't know your
organizationidvalue off-hand, you can access it at the command-line usingbw list organizations.
For more detail, see our CLI documentation.
[!NOTE] Exported Org data event Exporting an organization's vault data will be captured by event logs. Learn more.
