decrypt
Decrypt Portabase .enc backup files offline.
Decrypts Portabase .enc backup files (AES-256-GCM) and restores the original archive. Works on a single file or on a whole folder of .enc files. Step-by-step: Decrypt a backup.
portabase decrypt [OPTIONS] INPUT_PATH [OUTPUT_PATH]| Option | Description | Default |
|---|---|---|
INPUT_PATH | A .enc file, or a folder containing .enc files (top level; all are decrypted). Required. | — |
OUTPUT_PATH | Output file or folder, matching the input type. Defaults to the input's directory. | — |
-k, --key <path> | Path to the master key file (raw 32-byte or Base64 AES-256 key). | ./master_key.bin |
Example
portabase decrypt backup.tar.gz.enc backup.tar.gz --key master_key.binMaster key
The master key is the same 32-byte AES-256 key used for encryption. Download it from the dashboard in Settings, Storage section. When --key is not provided, the CLI looks for master_key.bin in the current directory.
Folder mode
When decrypting a folder, each file is handled independently: one corrupt or wrong-key file does not stop the batch. At the end, a summary gives the number of successes and failures and lists each failed file with its reason; the command then exits with a non-zero code if any failed.
Large backups
Decryption is fully streaming: files are processed chunk by chunk, so memory stays bounded (tens of MB) even for multi-gigabyte (>2 GB) backups. The output is written atomically, so a failure never leaves a partial file behind.
Last updated on