🧊

PingVaults Offline Decryptor

Local decryption · Network used only if you choose TxID retrieval · Recovery values stay in this page

Client-side · AES-256-GCM · PBKDF2 / Argon2id

Have a recovery card? Start here

Scan the QR code on the recovery card with a phone and paste the text below, or type it in from the card. The encrypted vault is then downloaded from Arweave automatically.

Step 1 — Ciphertext Source

Storage transaction ID (Irys or legacy Arweave)

Ciphertext (Base64-encoded AES-GCM)

Step 2 — Encryption Parameters (Salt & IV)

Obtain these from the vault metadata JSON (email attachment / exported backup file).

Salt (Base64)

IV (Base64)

Normalization Language

Step 3 — Recovery Inputs

Quick Import — Paste Vault Metadata JSON

Paste the exported pv_last_vault JSON to auto-fill Salt / IV / key schema.

Decryption runs in this page using the Web Crypto API (AES-256-GCM + PBKDF2).
Import exported ciphertext and disconnect first for a fully offline path.
TxID download contacts an Irys or Arweave gateway; recovery values and plaintext are not included in that request.