Nextcloud passwords app not seeing backup

ℹ️ Support 📦 Appliances (Docker, Snappy, VM, NCP, AIO)
, ,
1
Support intro

Sorry to hear you’re facing problems. :slightly_frowning_face:

The community help forum (help.nextcloud.com) is for home and non-enterprise users. Support is provided by other community members on a best effort / “as available” basis. All of those responding are volunteering their time to help you.

If you’re using Nextcloud in a business/critical setting, paid and SLA-based support services can be accessed via portal.nextcloud.com where Nextcloud engineers can help ensure your business keeps running smoothly.

Getting help

In order to help you as efficiently (and quickly!) as possible, please fill in as much of the below requested information as you can.

Before clicking submit: Please check if your query is already addressed via the following resources:

(Utilizing these existing resources is typically faster. It also helps reduce the load on our generous volunteers while elevating the signal to noise ratio of the forums otherwise arising from the same queries being posted repeatedly).

So I’m facing a similar problem to this forum post: Restore passwords app backup with a little bit of a twist. My old server gave out on me and I decided it would be easier to just build a new one from scratch on fresh hard drives. I still had the old drive and could get to files on it and I found the appdata folder with the auto backups from the passwords app I had running on the old server. I copied the latest one I had over to another computer for safekeeping while getting the new server set up.

Fast forward a bit and I have the new server running, but didn’t catch the fine print of updating passwords before anything else. So instead I used the old drive I had and made a fresh Ubuntu install on it with the intent of importing my passwords backup file and nothing else. I got a Nextcloud AIO instance up and running and copied my old backup file into it, but when trying to run the password backup command line command, it says it’s can’t find the file. I’ve checked the folders and it’s there and I’ve confirmed that it’s owned by www-data, but the backup:list does not show it. Is there some secret to getting a backup from a separate instance into the app?

2

The latest version of the passwords app will no longer overwrite your Nextcloud server secret so you can restore the backup on your new server. It’s still recommended to make a backup of your config in case anything goes wrong.

If you didn’t use the `passwords:backup:import` command to import the backup onto the new instance, you need to run `./occ files:scan-app-data` to rescan the app data directory and make the file known to Nextcloud. Then you should see it when running `passwords:backup:list`.

3

Thanks! That got me one step closer as I can now at least see and import the file, though now I’m getting a different error when trying to actually access the passwords app after the backup. Is there some step between restoring and opening the app again that I’m missing? When I view it as the default admin account on Nextcloud it’s all blank, but when I view it with my remade user (same account name as the previous backup, just recreated on a new server), I get the attached error regarding decryption. I would have thought the admin account could see everything. Do I need to make the user first and try to restore to that user with the –user option on the command line function?

IMG_0160
IMG_01601412Ă—642 478 KB

4

Can you post the full error and stack trace instead of a screenshot?

This error indicates that something somewhere has more or less parts in the encrypted message than nextcloud expects

5

Do you just mean something like a “docker logs Nextcloud-aio-nextcloud” error log or do I need to be looking somewhere else as well? Just wanted to make sure I got enough info.

6

So I’m not sure why it messed up the formatting when I copied it out of the logs, but do you mean something like this?

{"reqId":"gg4Yupv3uCFg3YwizLgb","level":4,"time":"2026-01-01T17:43:35+00:00","remoteAddr":"172.18.0.2","user":"Redacted","app":"passwords","method":"POST","url":"/index.php/apps/passwords/api/1.0/folder/show","message":"Authenticated ciphertext could not be decoded.","userAgent":"Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:146.0) Gecko/20100101 Firefox/146.0","version":"32.0.3.2","exception":{"Exception":"Exception","Message":"Authenticated ciphertext could not be decoded.","Code":0,"Trace":[{"file":"/var/www/html/lib/private/Security/Crypto.php","line":98,"function":"decryptWithoutSecret","class":"OC\\Security\\Crypto","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/custom_apps/passwords/lib/Encryption/Object/SseV1Encryption.php","line":167,"function":"decrypt","class":"OC\\Security\\Crypto","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/custom_apps/passwords/lib/Services/EncryptionService.php","line":127,"function":"decryptObject","class":"OCA\\Passwords\\Encryption\\Object\\SseV1Encryption","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/custom_apps/passwords/lib/Helper/ApiObjects/AbstractObjectHelper.php","line":129,"function":"decrypt","class":"OCA\\Passwords\\Services\\EncryptionService","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/custom_apps/passwords/lib/Helper/ApiObjects/FolderObjectHelper.php","line":84,"function":"getRevision","class":"OCA\\Passwords\\Helper\\ApiObjects\\AbstractObjectHelper","type":"->","args":[{"__class__":"OCA\\Passwords\\Db\\Folder","id":3},{"trashed":false,"hidden":false},true]},{"file":"/var/www/html/custom_apps/passwords/lib/Helper/ApiObjects/FolderObjectHelper.php","line":220,"function":"getApiObject","class":"OCA\\Passwords\\Helper\\ApiObjects\\FolderObjectHelper","type":"->","args":[{"__class__":"OCA\\Passwords\\Db\\Folder","id":3},"model",{"trashed":false,"hidden":false}]},{"file":"/var/www/html/custom_apps/passwords/lib/Helper/ApiObjects/FolderObjectHelper.php","line":99,"function":"getFolders","class":"OCA\\Passwords\\Helper\\ApiObjects\\FolderObjectHelper","type":"->","args":[{"__class__":"OCA\\Passwords\\Db\\FolderRevision","id":null},{"0":"And 10 more entries, set log level to debug to see all entries","id":"00000000-0000-0000-0000-000000000000","created":1767289414,"updated":1767289414,"edited":1767289415,"revision":"00000000-0000-0000-0000-000000000000"}]},{"file":"/var/www/html/custom_apps/passwords/lib/Controller/Api/AbstractObjectApiController.php","line":150,"function":"getApiObject","class":"OCA\\Passwords\\Helper\\ApiObjects\\FolderObjectHelper","type":"->","args":[{"__class__":"OCA\\Passwords\\Db\\Folder","id":null},"model+folders"]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":204,"function":"show","class":"OCA\\Passwords\\Controller\\Api\\AbstractObjectApiController","type":"->","args":["00000000-0000-0000-0000-000000000000","model+folders"]},{"file":"/var/www/html/lib/private/AppFramework/Http/Dispatcher.php","line":118,"function":"executeController","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->","args":[{"__class__":"OCA\\Passwords\\Controller\\Api\\FolderApiController"},"show"]},{"file":"/var/www/html/lib/private/AppFramework/App.php","line":153,"function":"dispatch","class":"OC\\AppFramework\\Http\\Dispatcher","type":"->","args":[{"__class__":"OCA\\Passwords\\Controller\\Api\\FolderApiController"},"show"]},{"file":"/var/www/html/lib/private/Route/Router.php","line":321,"function":"main","class":"OC\\AppFramework\\App","type":"::","args":["FolderApiController","show",{"__class__":"OC\\AppFramework\\DependencyInjection\\DIContainer"},{"_route":"passwords.folder_api.show"}]},{"file":"/var/www/html/lib/base.php","line":1061,"function":"match","class":"OC\\Route\\Router","type":"->","args":["/apps/passwords/api/1.0/folder/show"]},{"file":"/var/www/html/index.php","line":25,"function":"handleRequest","class":"OC","type":"::","args":[]}],"File":"/var/www/html/lib/private/Security/Crypto.php","Line":114,"message":"Authenticated ciphertext could not be decoded.","exception":[],"CustomMessage":"Authenticated ciphertext could not be decoded."},"id":"6956b259bdfaf"}
7

This topic was automatically closed after 90 days. New replies are no longer allowed.