ETO1 decryptor

Opens an encrypted container offline, in this page. Nothing is uploaded — this file contains no network code at all. Save it and run it disconnected if you prefer.

1 · The container

Usually named after the document’s id. It starts with the bytes ETO1.

2 · The content key

Decrypt the wrapped key file with your own tools first, for example gpg -d NAME.key.asc or age -d -i key.txt NAME.key.age. Your private key is never entered here.

3 · The document id

Shown on the delivery page, and it is the first part of the wrapped key’s filename. It is cryptographically bound to the file — the wrong id will not decrypt.