Recovery key tool

Everything happens on this device. Nothing is sent anywhere, and this page makes no network requests. It works offline — keep your own copy.

Open a recovery bundle

You are opening your layer only. If custody is shared, what comes out is still encrypted and goes to the next holder — you cannot expose a clinical record from this step even if you get it wrong.

Your recovery key (the long block from your sheet) Passphrase, if your key is sealed with one The recovery bundle you were sent

Give access

The last holder's step, and only theirs. Your peel produced the practice key rather than more ciphertext, which means it is now your job to use it once and let it go.

Do not send the practice key to anyone, including the practice. What you send back is the list this page produces.

The practice key you just recovered The key bundle from the practice

Check a key

Confirms which key you hold. Read the digits aloud to the practice; if they do not match, stop and report it. The fingerprint is not a secret.

A key, public or private, or your sealed key block Passphrase, if the key is sealed

Create a new key

Only do this if a practice has asked you to become their recovery holder.

The key is made here and never leaves this device. Print the result and store it as you would a deed. If you lose it, the practice's records cannot be recovered — nobody holds a copy, by design.