---
title: "Backup Protected"
method: POST
path: "/api/export/backup"
tags: ["export"]
---

# Backup Protected

`POST /api/export/backup`

## Request

- Base URL: `https://demo.usesecuro.com` (the document declares no server; this is the origin it was published from)
- URL: `https://demo.usesecuro.com/api/export/backup`
- Auth: OAuth 2
  - Password
  - Token URL: `/api/auth/login`
- TypeScript: <https://skmtc.dev/usesecuro/apis/securo/docs/api/export/backup/post.ts> (a function with typed inputs; its response is checked against the schema)

The same archive, encrypted with AES-256 when a password is given.

A POST because the password belongs in a body: a query string is written
to browser history, proxy logs and server access logs. Securo never stores
the password and cannot recover the archive without it.

## Headers

- `X-Workspace-Id` string, nullable

## Request body

- BackupRequest: Options for a workspace backup. `password` is optional: omitted (or null) produces the plain zip. A SecretStr so the value never reaches a log line or a validation error through a repr. The floor is a length, not a character-class rule, since those push people towards shorter passwords they can satisfy.
  - `password` string, password, nullable

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

## Changes

- **2026-11-05** `416a7752fec4`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/usesecuro/apis/securo/changes/api/export/backup/post.md)

---

[API](https://skmtc.dev/usesecuro/apis/securo.md) - [All operations](https://skmtc.dev/usesecuro/apis/securo/llms.txt) - [OpenAPI document](https://skmtc.dev/usesecuro/apis/securo/revisions/416a7752fec4?raw)