# Download backup - email link only

**URL:** <https://meta.discourse.org/t/download-backup-email-link-only/59626>\
**Category:** Support\
**Created:** [2017年三月21日 15:23 UTC](https://meta.discourse.org/t/download-backup-email-link-only/59626 "2017-03-21T15:23:55Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)\
**Post date:** [2017年三月21日 15:25 UTC](https://meta.discourse.org/t/download-backup-email-link-only/59626/2 "2017-03-21T15:25:52Z")

</div>

Yes, that is new behavior added to increase the security of the backups. ~~I’m looking for the relevant topic now…~~

Edit: Here you go:

> [@Security breach in Discourse forum with SSO](https://meta.discourse.org/t/security-breach-in-discourse-forum-with-sso/55759/27):
>
> Email confirmation of backup downloads is now in, thanks to @blake. You can’t download backups simply by being logged in, you must.. Be logged in as an admin → to get to /admin/backups Control the email address of an admin → to receive the download link email So this is indeed a form of two factor auth. Verifies control of the email account, plus the ability to log in as the admin. Here’s the actual email the admin will receive when the download backup button is pressed; it warns about unknow…

---

_[View the full topic](https://meta.discourse.org/t/download-backup-email-link-only/59626)._