rootcard.org
Key tool

The one place your recovery card goes.

Everything that changes who can access your identity, where it lives or whether it exists needs the recovery key. The key tool is the only program that asks for it: a single HTML file that you save and open from your own disk.

Download

The page is the keytool.html of the npm package rootcard@0.3.1, unchanged. Save it, then open the saved file in your browser. It works offline, from file://, and talks only to the hosts you enter.

Version
0.3.1
SHA-256
9147e5c9beea734a22c5b79e8668387ca449d5fec776bf785e954fcd7571af63

Check the hash before you type a recovery key: sha256sum rootcard-keytool.html (Linux), shasum -a 256 (macOS) or Get-FileHash (Windows). Or take the file straight from the npm package: npm pack rootcard@0.3.1.

What it does

Reset a forgotten password

Mints a new instance at your home with a new password. Every old password, vault copy and session stops working.

Move or restore

Moves your identity to another home, carrying data, profile and passwords, or restores it after a home disappears.

Add or revoke passwords

Up to 15 passwords, each a separate lock on your vault. Revoke one, for example after losing a device.

Rotate or retire

Replace the recovery key itself, which gives you a new card, or close the identity for good.