Recovery key tool

Everything happens on this device. Nothing is sent anywhere, and this page makes no network requests. It works offline — keep your own copy.

Open a recovery bundle

You are opening your layer only. If custody is shared, what comes out is still encrypted and goes to the next holder — you cannot expose a clinical record from this step even if you get it wrong.

Your recovery key (the long block from your sheet) Passphrase, if your key is sealed with one The recovery bundle you were sent

Check a key

Confirms which key you hold. Read the digits aloud to the practice; if they do not match, stop and report it. The fingerprint is not a secret.

A key, public or private, or your sealed key block Passphrase, if the key is sealed

Create a new key

Only do this if a practice has asked you to become their recovery holder.

The key is made here and never leaves this device. Print the result and store it as you would a deed. If you lose it, the practice's records cannot be recovered — nobody holds a copy, by design.