Thanks for the info!
I guess, CXP will be encrypted… and in GitHub, it sounds like the ZIP export will be unencrypted (the ZIP file itself, but also the vault data and attachments in it), right?
The ZIP PR(s) (the second one is here ) still need review by the owning team, so I’m not sure what will end up being merged. As for what’s implemented: The (optional) encryption uses standard ZIP encryption, no Bitwarden-specific crypto on-top, with the usual problems, it doesn’t hide filenames or filesizes, but contents are encrypted. The main point here is that you do not need any Bitwarden specific program to make use of the data, your standard operating system file manager will be able to read the data.
2 Likes
In the past I’ve neither been interested in storing attachments, nor aware they were not exported. However I’ve come across a use case where I might make use of this.
Namely, storing an account recovery key. I don’t want to write it down and store it as text or hard copy, as I’d be paranoid about writing it down wrong. Therefore my current thinking is to store the recovery key as an image.
Welcome, @wobbly_bob to the community!
There is nothing wrong with using attachments as a way to have things conveniently nearby Just be sure to also place a copy on your offline backup, knowing that they are not yet included in an export.
I generally copy/paste recovery keys into the notes section of the vault entry. Copy/Paste to avoid typos both on saving and if I need to use it.
And, I presume you are talking about recovery keys for sites other than Bitwarden. The Bitwarden recovery key needs to be stored outside of Bitwarden, preferably on an emergency sheet.
Found in the 2025.4.0 release notes…
Added .zip export format to include attachments in individual export
Even though I am using webvault 2025.4.0, it is not yet visible to me. Hoping it just takes a few days to finish “baking”.
1 Like
@DenBesten Yeah, that’s great news!
Though, as I understand it, it’s an unencrypted export format for now (basically containing the unencrypted data.json and the unencrypted attachments, packed in a zip-file).
Encrypted zip-exports could be coming later:
And a zip-import is also not there yet:
1 Like
@DenBesten The feature flag has been turned on in production. As long as you aren’t self-hosting the functionality should now be available.
Kind regards,
Daniel
2 Likes
May have to modify the “exporting individual vault message”, so that when the zip option with attachments is chosen, the message doesn’t say, “will not include associated attachments.”
1 Like
@Gerardv514 You’re right… and I must admit, I didn’t look for it a few minutes ago… Just logged in again - the message indeed already changes when “zip” is chosen:
PS: The sentence “Only vault item information will be exported and will not include associated attachments.” vanishes, as soon as zip is chosen.
1 Like
I figured it was something like that.
I can confirm that I do now see the option in my web vault export. Thanks for making 212 people’s day!
1 Like
While it’s nice to have a way to export attachment files, it’s not much use if there’s no way to easily import them back. Especially if the number of files to be restored is large.
It would be also nice to be able to export attachments from the org vault in the admin console.
By the way, it an item has more than one attachment with the same filename, only one of them gets exported.
2 Likes
I see the next bug report…
I was too lazy to report it…
But when I changed my mind and was going to report it… The zip option disappeared for me.
1 Like
No zip export for troublemakers! 
3 Likes
Quick update, due to some unrelated ongoing issues with attachments, the team decided to switch off the feature for now. Thanks for the pointer about multiple attachments with the same name being overwritten within the zip. I’ve created a bug report within Jira and passed it on to the team.
Kind regards,
Daniel
4 Likes
It was nice, having it for a few hours.