46 lines
2.6 KiB
Plaintext
46 lines
2.6 KiB
Plaintext
---
|
|
title: Config Export/Import
|
|
description: Export database connections with AES-256-GCM encrypted passwords. Migrate securely between machines.
|
|
---
|
|
|
|
<Callout type="info">Export your database connections with encrypted passwords (AES-256-GCM). Securely migrate between machines.</Callout>
|
|
|
|
## Export
|
|
|
|
<Steps>
|
|
<Step>### Start Export Click the **Export** button in the sidebar header.</Step>
|
|
<Step>### Set Passphrase Enter a passphrase to encrypt your passwords.</Step>
|
|
<Step>### Save File Choose a save location. The exported file contains all connections with passwords, encrypted.</Step>
|
|
</Steps>
|
|
|
|
## Import
|
|
|
|
<Steps>
|
|
<Step>### Start Import Click the **Import** button in the sidebar header.</Step>
|
|
<Step>### Select File and Decrypt Select the exported file and enter the passphrase.</Step>
|
|
<Step>### Done Connections are imported with passwords restored. Deduplicated by name + host + port.</Step>
|
|
</Steps>
|
|
|
|
## Security
|
|
|
|
- Passwords are encrypted using **AES-256-GCM** with **PBKDF2** key derivation
|
|
- Without the passphrase, the file cannot be decrypted
|
|
- The export file is standard JSON, transferable via USB drive, cloud storage, etc.
|
|
- DBX stores ordinary connection fields separately from secrets such as database passwords, SSH passwords, SSH key passphrases, and full connection strings; export brings them together only inside the encrypted export file.
|
|
- Treat the passphrase like a secret. Anyone with both the export file and passphrase can restore the saved connections.
|
|
|
|
## Backward Compatibility
|
|
|
|
Import also supports plain JSON files from older versions (without passwords) and raw connection config arrays.
|
|
|
|
## What Is Included
|
|
|
|
| Item | Included |
|
|
| ---------------------------------------------------------------------- | -------------------------------------------------------- |
|
|
| Connection name, type, host, port, database, color | Yes |
|
|
| URL parameters, SSL, SSH, proxy, visible database settings | Yes |
|
|
| Database password, SSH password, SSH key passphrase, connection string | Yes, encrypted in the export file |
|
|
| Vendor JDBC driver JAR files | No; reinstall or re-import drivers on the target machine |
|
|
|
|
For JDBC migrations, export the connection settings here, then use [JDBC Plugin](/en/docs/plugins) to install the plugin and import driver JARs on the destination machine.
|