Patch shipped: v1.6.264 — backups now refuse to run unencrypted instead of silently saving an unprotected copy
Posted by tomspark
Heads up, especially if you rely on backups. We found and fixed a case where the dashboard could save a backup unencrypted without telling you: if it couldn't find your backup key, the old code quietly wrote a plain copy that still contained your passwords and Vaultwarden. As of v1.6.264 it refuses to do that — a backup is either properly encrypted or it stops and asks you to set your key first. Run sudo sparkbox update to get it. If your recent backups have been showing up without the lock icon, set SBBACKUPKEY in Settings - Environment Variables and make a fresh one (and treat any existing unlocked backup files as sensitive). Thanks to the backer who flagged it.