We’ve listened closely to your feedback about the security of our products, and taken it to heart.
Over the past three years, we’ve made significant investments in strengthening our security infrastructure to ensure your 3D printers and data remain fully protected.
Today, we’re excited to introduce the Bambu Lab Trust Center- a dedicated space where you can explore in detail how we safeguard your privacy and security.
Transparency, user control, and collaboration with the security community are at the heart of everything we do.
Thank you for your continued support and for pushing us to do better every day!
I think we can take as read that any corporation is under the thumb of the nation-state where it operates. Here in the US, for example, Apple just removed an app from the App Store because the President’s appointees demanded it; there was no legal basis for it, they just said “take this down” and Apple did. And in the UK, where the UK government can require a company to provide nearly any requested data for any reason, they also prevent that company from disclosing it to anyone, ever.
I don’t think it’s realistic to expect Bambu to defy the Chinese government. The best we can do is be realistic ourselves about what kind of privacy and control is acceptable for us to use their products.
They did state where non-Chinese customer data is stored, in the blog they linked.
I’m reading the white paper now. I am holding most of my thoughts until I finish it.
This means, their declaration is meaningless unless it forms part of their legal undertaking in the place they state their legal grounds
I will not reserve judgment for things not stated as these documents have been provided to show what they do and do not do. In this case if they are unwilling to state it in the legal documents, they are unwilling to standby it.
This is not against you or your view.
I have a background in law, specifically contract law and have experienced this tactic too often.
You either do or you don’t and if you do not saw you do, then you don’t.
Yeah I mean a door nailed shut is very secure… Not very useful… But quite secure…
If you care about this stuff at all, and have a Bambu printer, do an experiment. turn off your Internet and try to go about your workflow. Unplug the modem, not the router. See for yourself what works. For me, Bambu slicer choked in various degrees of fatal without bambus servers reachable, and you are back to gcode files on an SD card, that need to be authored with non-Bambu software.
My X1 runs pre-authentication BS firmware. It is blocked from the internet in my router. I use Orca. I don’t know if Orca still tries connecting to Bambu servers because I have always blocked it from the internet in my PC firewall. The X1 is in LAN only mode and everything works fine. I would never use the Bambu cloud because I trust Bambu as much as I trust the CCP.
What is the point of a Trust centre from a company you can’t trust or from one incompetent enough to allow Makerworld log in with stolen cookies bypassing user name, password, and 2FA?
The authentication BS convinced me to never buy another Bambu printer so as long as my X1 keeps working till it falls apart or rusts away I don’t really care.
I read the white paper, and I must say: Bambu has finally become transparent and now offers solutions for everyone.
In simple terms:
For everyday users – If you’re just a regular user printing toys for kids or teaching them “how to,” keep using Bambu Studio and enjoy your life.
For privacy-minded users – If you’re printing things you wouldn’t show your neighbor, use LAN-Only Mode. Nothing leaves your Wi-Fi network.
For ultra-cautious users – If you’re printing things you wouldn’t show your neighbor and you don’t know how to secure your Wi-Fi (or you don’t trust Wi-Fi at all), use Offline Mode. Slice the model, put it on an SD card, carry it to your printer, and print directly.
Everything is explained clearly and follows industry standards. If you’re a business that needs a hybrid secure setup without dealing with SD cards, simply get the Enterprise edition (X1E or H2D Pro) and use Ethernet.
At this point, Bambu has provided a solution for everyone. If you’re still complaining, it likely means you don’t understand what you’re doing.
And for those who complain that they can’t use Bambu App in LAN-Only Mode: make up your mind. You can’t demand to “lock the house” while leaving the key on the porch. (And no, there are no “ifs” or “buts” here—if you understand how the protocol works, you know this already.) You can’t have your cake and eat it too.
It is always great when I buy something and later have to lose lots of features because the company changes something which affects how I can continue to safely use it.
This is cool, you buy an ultra expensive product with cutting edge features that take us away from the previous generation to be thrown right back where we once were with the benefit of paying for hardware features we now have to circumvent.
Have you opened a trouble ticket to report that “bug” you just discovered in LAN mode? It’s hard to argue with pfSense, Pi-Hole, etc. logs, so logs would take it out of the realm of whether it’s happening and straight into the realm of why it’s happening.
I don’t believe anything has really changed—whether with the old firmware or the new one, the same security principles apply. If you required the highest level of security before, you wouldn’t have relied on a cloud service; the same is true now. From that perspective, nothing is fundamentally different.
It’s common sense that no company can guarantee complete data security in the cloud, for many reasons: hacking threats, government requests, and the wide range of potential vulnerabilities inherent to cloud platforms. And this isn’t unique to Bambu—it applies to every cloud service. For example, would anyone reasonably use Gmail to store/send details about a $10-billion gold treasure? Hopefully not, for obvious reasons.
Initially, Bambu didn’t follow a formalized security standard, but this new document consolidates everything into a clearer framework that can hopefully serve as a guide for all future models.
Also, not to play devil’s advocate, but it’s worth remembering that many companies are subject to government regulation—particularly in countries like the UK, Canada, and beyond.
The bottom line is: if you want to remain hidden from prying eyes, it is possible—and Bambu provides ways to do so. The only reason a printer might appear to connect to the cloud even in LAN-only mode is almost certainly due to misconfiguration.
And yes I would love to have ethernet port on my P1S, simply because my wi-fi is bad.
I usually end up using Bambu Studio to run prototypes through the cloud, once I have finalized my model I then upload the sliced file to USB/SD and plug it into the printer so I can just have it run whenever (keep in mind that my PC is one floor above my 3D printers so it eventually gets annoying starting the thing up).
I do have OrcaSlicer on my PC but I very rarely use it since I only have Bambu printers anyways. For those trying to hook up ethernet cables to their Bambu printer but not wanting to pay 3k USD for an X1E that hasn’t even properly set its firmware, is there a mod for Bambu printers (in general) to get an ethernet port?
Yeah, but these are not normal times in the U.S… Hopefully we can find our way back to normalcy. I doubt these chinese laws are changing any time soon. Always something to keep in mind when making purchases.
Other than the X1E and the H2D Pro, the only Bambu model with an Ethernet connection option is the X1C, running X1Plus firmware and an X1Plus Expander board.
