Subject: Tracking Export Activity for Shared Passwords in Nextcloud Passwords App

ℹ️ Support
1

Hello everyone,

I’m using the Passwords app on Nextcloud to manage shared passwords within my team. We would like to track whenever someone exports the shared passwords, so we can monitor such actions for security purposes. However, I haven’t been able to find any log entries related to password export activities.

The log level in config.php is set to 0 (debug), but there’s still no information about export events. Does the Passwords app log this by default, or would we need to implement custom logging to capture these events? If custom logging is needed, could anyone point me to where the export function is located in the code so we can add our own logging?

Any help would be much appreciated!

Thank you in advance!

2

There is no tracking of exports in the app.
The app itself provides an API which is used by all compatible clients and the web interface. Since everyone can write their own client to export passwords or even just copy into an Excel manually there is no useful way to implement this kind of access control.

The most that could be done would be to track when a password is delivered to a client, but since most clients periodically query all passwords you would just end up with bloated log with no relevance.