diff --git a/apps/web/src/routes/admin/(authenticated)/export/csv/+server.ts b/apps/web/src/routes/admin/(authenticated)/export/csv/+server.ts
new file mode 100644
index 0000000..59a2ac7
--- /dev/null
+++ b/apps/web/src/routes/admin/(authenticated)/export/csv/+server.ts
@@ -0,0 +1,24 @@
+import type { RequestHandler } from './$types';
+
+import { router } from '@testy/trpc/server/router';
+import { createContext } from '@testy/trpc/server/createContext';
+
+export const GET: RequestHandler = async (event) => {
+    try {
+        const trpc = router.createCaller(await createContext(event));
+
+        await trpc.auth.admin();
+
+        const xlsx = await trpc.users.csv();
+        const date = new Date().toISOString().split('.')[0];
+        return new Response(xlsx, {
+            status: 200,
+            headers: {
+                'Content-Type': 'text/csv',
+                'Content-Disposition': `attachment; filename="vysledky_${date}.csv"`
+            }
+        });
+    } catch {
+        return new Response('Čus 👀', { status: 403 });
+    }
+};
diff --git a/apps/web/src/routes/admin/(authenticated)/export/xlsx/+server.ts b/apps/web/src/routes/admin/(authenticated)/export/xlsx/+server.ts
new file mode 100644
index 0000000..86287dd
--- /dev/null
+++ b/apps/web/src/routes/admin/(authenticated)/export/xlsx/+server.ts
@@ -0,0 +1,24 @@
+import type { RequestHandler } from './$types';
+
+import { router } from '@testy/trpc/server/router';
+import { createContext } from '@testy/trpc/server/createContext';
+
+export const GET: RequestHandler = async (event) => {
+    try {
+        const trpc = router.createCaller(await createContext(event));
+
+        await trpc.auth.admin();
+
+        const xlsx = await trpc.users.xlsx();
+        return new Response(xlsx, {
+            status: 200,
+            headers: {
+                'Content-Type': 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet',
+                // TODO: Můžeme doplnit čas atd.
+                'Content-Disposition': `attachment; filename="vysledky.xlsx"`
+            }
+        });
+    } catch {
+        return new Response('Čus 👀', { status: 403 });
+    }
+};
diff --git a/apps/web/src/routes/admin/(authenticated)/users/+page.svelte b/apps/web/src/routes/admin/(authenticated)/users/+page.svelte
index 457dafb..8ad8d24 100644
--- a/apps/web/src/routes/admin/(authenticated)/users/+page.svelte
+++ b/apps/web/src/routes/admin/(authenticated)/users/+page.svelte
@@ -1,38 +1,17 @@
 <script lang="ts">
     import { enhance } from '$app/forms';
+    import { goto } from '$app/navigation';
     import Button from '$lib/components/buttons/Button.svelte';
     import Submit from '$lib/components/buttons/Submit.svelte';
     import TextInput from '$lib/components/inputs/TextInput.svelte';
     import Modal from '$lib/components/Modal.svelte';
     import UserListItem from '$lib/components/userlist/UserListItem.svelte';
-    import { trpc } from '$lib/trpc/client';
     import type { ActionData, PageServerData } from './$types';
 
     export let data: PageServerData;
 
-    // TODO: xlsx download
-    const downloadXlsx = async (e: Event) => {
-        const base64 = await trpc().users.xlsx.query();
-        const byteCharacters = atob(base64);
-
-        // Create a Uint8Array
-        const byteNumbers = new Array(byteCharacters.length);
-        for (let i = 0; i < byteCharacters.length; i++) {
-            byteNumbers[i] = byteCharacters.charCodeAt(i);
-        }
-        const byteArray = new Uint8Array(byteNumbers);
-
-        // Create a Blob from the Uint8Array
-        const blob = new Blob([byteArray], {
-            type: 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet'
-        });
-        // download the file
-
-        const anchor = window.document.createElement('a');
-        anchor.href = window.URL.createObjectURL(blob);
-        anchor.download = 'vysledky.xlsx';
-        anchor.click();
-        window.URL.revokeObjectURL(anchor.href);
+    const downloadXlsx = async () => {
+        window.open(`/admin/export/xlsx`, '_blank');
     };
 
     const openModal = async () => {
@@ -88,7 +67,11 @@
             icon="material-symbols:add-circle-outline-rounded"
             title="Přidat uživatele"
         />
-        <Button on:click={downloadXlsx} icon="material-symbols:download" title="Stáhnout výsledky" />
+        <Button
+            on:click={downloadXlsx}
+            icon="material-symbols:download"
+            title="Stáhnout výsledky"
+        />
     </div>
 </div>
 <div class="mx-auto mx-auto mb-6 flex max-w-screen-xl flex-col px-4 py-3 md:px-6 md:px-6">
diff --git a/packages/trpc/package.json b/packages/trpc/package.json
index e45c079..ffaf111 100644
--- a/packages/trpc/package.json
+++ b/packages/trpc/package.json
@@ -12,7 +12,7 @@
         "csv-stringify": "^6.3.0",
         "date-fns": "^2.29.3",
         "jsonwebtoken": "^9.0.0",
-        "xlsx": "https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz",
+        "xlsx": "https://cdn.sheetjs.com/xlsx-0.20.1/xlsx-0.20.1.tgz",
         "zod": "^3.21.4"
     },
     "devDependencies": {
diff --git a/packages/trpc/server/routes/users.ts b/packages/trpc/server/routes/users.ts
index efeece6..4078104 100755
--- a/packages/trpc/server/routes/users.ts
+++ b/packages/trpc/server/routes/users.ts
@@ -62,6 +62,10 @@ export const users = t.router({
             trpcInfo(ctx, `Created user ${input.username}`);
         }),
     csv: t.procedure.use(adminAuth).query(async () => exportCsv()),
+    /**
+     * @description Export users to xlsx, Only SSR
+     * @returns {Promise<ArrayBuffer>} ArrayBuffer, fallback array of 8-bit unsigned int
+     */
     xlsx: t.procedure.use(adminAuth).query(async () => exportXlsx()),
     resetPassword: t.procedure
         .use(adminAuth)
diff --git a/packages/trpc/server/services/testService.ts b/packages/trpc/server/services/testService.ts
index c9e5e8d..d19091d 100644
--- a/packages/trpc/server/services/testService.ts
+++ b/packages/trpc/server/services/testService.ts
@@ -118,7 +118,7 @@ class ResultCellMap extends Map<string, Record[]> {
     }
 }
 
-export const exportXlsx = async (): Promise<string> => {
+export const exportXlsx = async (): Promise<ArrayBuffer> => {
     const workbook = XLXS.utils.book_new();
     XLXS.set_fs(fs);
 
@@ -230,7 +230,7 @@ export const exportXlsx = async (): Promise<string> => {
     const userSheet = getUserSheet(usersDb, resultCell);
     XLXS.utils.book_append_sheet(workbook, userSheet, 'users');
 
-    return XLXS.write(workbook, { bookType: 'xlsx', type: 'base64' });
+    return XLXS.write(workbook, { bookType: 'xlsx', type: 'buffer' });
 };
 
 const getUserSheet = (users: User[], resultCell: ResultCellMap): XLXS.WorkSheet => {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4b68f68..36809a9 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -1,5 +1,9 @@
 lockfileVersion: '6.0'
 
+settings:
+  autoInstallPeers: true
+  excludeLinksFromLockfile: false
+
 importers:
 
   .:
@@ -207,8 +211,8 @@ importers:
         specifier: ^9.0.0
         version: 9.0.0
       xlsx:
-        specifier: https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz
-        version: '@cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz'
+        specifier: https://cdn.sheetjs.com/xlsx-0.20.1/xlsx-0.20.1.tgz
+        version: '@cdn.sheetjs.com/xlsx-0.20.1/xlsx-0.20.1.tgz'
       zod:
         specifier: ^3.21.4
         version: 3.21.4
@@ -5139,10 +5143,10 @@ packages:
     resolution: {integrity: sha512-m46AKbrzKVzOzs/DZgVnG5H55N1sv1M8qZU3A8RIKbs3mrACDNeIOeilDymVb2HdmP8uwshOCF4uJ8uM9rCqJw==}
     dev: false
 
-  '@cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz':
-    resolution: {tarball: https://cdn.sheetjs.com/xlsx-0.19.3/xlsx-0.19.3.tgz}
+  '@cdn.sheetjs.com/xlsx-0.20.1/xlsx-0.20.1.tgz':
+    resolution: {tarball: https://cdn.sheetjs.com/xlsx-0.20.1/xlsx-0.20.1.tgz}
     name: xlsx
-    version: 0.19.3
+    version: 0.20.1
     engines: {node: '>=0.8'}
     hasBin: true
     dev: false