Key tool
Everything that needs your recovery card.
Create an identity, put it on a host or move it, reset or add a password, rotate the recovery key, or close the identity. The page runs entirely in your browser. It contacts no one until you enter a host address, and then only that host.
Only enter your recovery key here, never in an application or a website. Save this page and open it from your own disk.
The
.card.json file you saved when the identity was created.
No file? Type the card instead
An
.account.json export. It holds the newest log and a copy of your vault, so the
tool can work from it even when the host cannot be reached.
The address of the server where you use the identity. A card alone does not
know where the identity lives, so enter the host here or load the account file. Leave it empty to work only
with the files.
A new recovery key is generated in this page. The card is downloaded before anything is sent. Keep it offline: it is the only way to recover the identity.
Where should the identity live?
The namespace the identity belongs to. Keep
global unless an application says otherwise.
The server that will store the identity, for example the one an application told you to use.
At least 12 characters, not the username. You sign in with it; the recovery card stays offline.
Check a proof that someone made with their identity. Works offline.
Your identity
rootcard
Handle
What do you want to do?
The server that will store the identity from now on.
At least 12 characters, not the username.
So you can tell your passwords apart, for example "Phone".
Who the proof is for, as they asked for it.
Result
Nothing yet. Open your identity, create one or verify a proof.
rootcard key tool. The format is specified in spec/SPEC.md of the rootcard repository.