Export your data

There are two exports, because your data lives in two places. Your vault's contents are encrypted, so only the app can export them. What the server keeps about your account, it can export itself.

Export your vault

A readable copy of your vault, for moving elsewhere or keeping.

  1. Open Security (the shield at the top of the sidebar) and find Export.
  2. Choose what to include:
    • Include passwords, private keys and VPN credentials. Without it, each secret is replaced by (not exported), including the keys inside WireGuard and OpenVPN configurations.
    • Include the team vaults you can open. Without it, only your personal vault is exported.
  3. Enter your master password and choose Export vault.

MorphGate saves a JSON file named morphgate-vault- and the date in your Downloads folder, with every item, grouped by vault: hosts, groups, identities, SSH keys, snippets, tunnels, VPNs and imported schemes. Session logs and attachments are listed, not included; save those one by one from Session logs and the host editor.

The file is not encrypted. Anyone with it can read your hostnames, users and notes, and, if you included secrets, use your keys and passwords. Keep it safe, and delete it when you're done.

The export works with or without sync.

Download your account data

A JSON file of everything readable the sync server keeps about your account. Get it from either place:

  • in the app, Sync, then Download your data;
  • on your account page, Download your data.

On morphgate.com it contains:

  • your account: id, email and when it was verified, when it was created, whether two-step verification is on, and your public keys;
  • every device, including signed-out ones: name, platform, app version, when it was added and last seen;
  • your plan;
  • your teams: role, status, and when you joined and were confirmed;
  • your vaults: for your personal vault, the item count, revision and storage used; for team vaults, your access;
  • open invites to your address, records your teams' identity providers hold about you over SCIM, and your single sign-on sessions;
  • team activity done by you or about you;
  • if you've paid, your Stripe customer and subscription ids, and where to find invoices.

It doesn't contain secrets or hashes, your wrapped keys, or your vault's contents. The server can't read those; export them from the app as above. Invoices and payment details are at Stripe, through Manage billing and invoices.

A self-hosted server offers the same download if it supports it; the reference server does.

Team activity

Owners and admins can download a team's whole activity log as CSV or JSON lines. See Activity log.