Open a private capture
Use your Recovery Kit, or the key you saved as a trusted person, to open a locked file on this device. No account or Permavault server is needed. Save this HTML file with your kit so it stays available offline.
Only enter your Recovery Phrase or key in a copy of this tool you trust. Anyone with them can open your vault. This tool keeps no saved history and sends no words, keys or readable files over the network.
1. Your Recovery Kit or key
Choose the key file you saved as a trusted person. You can also paste a key line that starts with AGE-SECRET-KEY-, such as the one on page 3 of a Recovery Kit.
Your words or key stay on this page only until a file opens, then they are cleared. They are never saved or sent.
2. Your locked file
Choose the locked file. Add its sealed manifest as well to use its recorded name, adjusted if needed for saving.
In a Vault Index, the locked file is listed as ciphertextTxId and its sealed manifest has the role sealed-manifest. You can add both at once.
Or fetch files from the permanent network
Only this button uses the network: it asks arweave.net for the IDs below. The gateway can see your IP address and the IDs. Enter the Stored file ID from a receipt, or ciphertextTxId from the Vault Index. Add the sealed-manifest ID after a space to use its recorded name, adjusted if needed for saving. A receipt's Proof record ID also works: it lists the locked files to fetch next.
Enter your Recovery Phrase or key, then add your locked file.
Large files may exceed a phone's memory. Use a computer, or the standard age tool described on page 3 of your kit. Files are never previewed or executed here.
Opening is not proof verification. Keep both original manifests, the locked file, and all timestamp and signature records. Closing this tab releases its memory; downloaded readable files remain on your device.