Open your export. Offline.
Load a vault export and this page decrypts every item on this device with your passphrase and Secret Key — or, if the passphrase is lost, with two phrases from your recovery kit. It also re-derives the export's hash chain and checks each item's seal against what the chain recorded. Nothing is sent anywhere: no request this page makes after it loads carries anything you typed or decrypted — the decryption itself is entirely local. Check for yourself — open your browser's network panel, or pull the cable before you press Unlock. The chain rule is published at /spec; the plain verifier is at /verify.
Runs entirely in your browser. No upload.
- Did: every event re-hashed from genesis; the head against the export's claim; each anchor's recorded head against the re-derived chain at that point; the genesis signature; each decrypted item's ciphertext against its commitment and against the seal the chain recorded for it.
- Did not: contact the timestamp authority — an anchor here is a claim the export makes, whose TSA token the property verifier and AssetDNA's Trust page hold; check whether this export is the latest one (a newer item may exist); or judge the contents. A decrypted item is yours and unaltered since its seal — what it says is your affair.
The rule, in the open: hash = sha256( prevHash | type | payload | at | propertyId ) from a genesis of 64 zeros. Items are opened with the same open-source cryptography libraries the vault seals them with; the export format and the key hierarchy are documented, and this page is the reference implementation of the promise that you never needed us.