UniFi Backup ReaderLegacy BSON + new PostgreSQL backups

drop a file to begin
GitHub
Old and new backup formats supported
Open your UniFi Network or UniFi OS backup. The reader detects the database format automatically, with no conversion required.
Drop your UniFi backup here
or click to choose a .unf or .unifi file, in either the old or new format
Parsed locally · No upload · No telemetry
Legacy format · BSON
Supports older backups using BSON streams or MongoDB archives. Tested with UniFi Network 10.6.106.
New format · PostgreSQL
Supports newer backups using postgres_v1. Tested with UniFi Network 11.0.81.
Where to grab a backup
Both .unf and .unifi files are supported, with automatic detection of legacy BSON and newer PostgreSQL database formats.
  1. From the cloud archive (easiest). Open account.ui.com/backups, click into the console you want, then Download the latest backup. You'll get a .unifi file — drop it here.
  2. Direct from the controller. In the UniFi Network web UI: Settings → System → Backups → Download Backup. You'll get a .unf file.
.unf
UniFi Network application backup. Sites, networks, Wi-Fi, devices, firewall rules.
.unifi
UniFi OS console backup. Same Network data plus console info, paired devices, and app versions.
How it works
Three layers stand between a backup file and the page you see. All three run in your browser — no server, no upload, no telemetry.
1
Decrypt
UniFi encrypts both formats so the file isn't readable at rest. The keys are static and have been publicly documented for years. .unf — AES-128-CBC with key bcyangkmluohmars and IV ubntenterpriseap. Same pair from Network 5.x through 10.x. .unifi — AES-256-CBC. The IV is the first 16 bytes of the file (random per backup). The 32-byte key is embedded in UniFi OS firmware.
2
Decompress
A decrypted .unf file opens to a ZIP archive. A decrypted .unifi file opens to a gzipped TAR archive, with Network data under backup/network/. In either container, the reader looks for legacy BSON data in db.gz or newer PostgreSQL JSONL data in db-config.jsonl.gz.
3
Parse
Legacy BSON: reads MongoDB archives and BSON command streams. New PostgreSQL: reads postgres_v1 tables and adapts their fields for the existing views. Both formats populate the same network, Wi-Fi, device, client and firewall tabs. Original source records remain available under All collections.
What's bundled into this HTML file
  • aes-js v3.1.2 (Richard Moore, MIT) — pure-JS AES implementation, ~64 KB
  • fflate v0.8.2 (Arjun Barrett, MIT) — pure-JS gzip/zip/inflate, ~33 KB
  • TAR extractor, BSON and PostgreSQL JSONL decoders, compatibility layer and renderer · written for this project, zero dependencies
  • Webfonts — Outfit, Plus Jakarta Sans, JetBrains Mono (Open Font License), inlined as woff2
Open source · MIT licensed
Based on the UniFi Backup Reader by AyeTech. This edition supports legacy BSON and newer PostgreSQL backups, with responsive layout improvements and custom hotspot branding. Browse the code or suggest changes on phillipmcmahon's GitHub. Backup processing runs locally in your browser, with the required libraries and fonts bundled in this file.
This edition on GitHub Original project