CLIGuides

Decrypt a backup

Restore the original archive from an encrypted Portabase backup, offline.

At the end of this guide, you have the original archive of an encrypted .enc backup — no dashboard needed.

Prerequisites: the CLI installed, the .enc file(s).

Download the master key

In the dashboard, open Settings, Storage section, and download the master key. Save it as master_key.bin.

Decrypt one file

portabase decrypt backup.tar.gz.enc backup.tar.gz --key master_key.bin

Or a whole folder

portabase decrypt ./backups ./restored --key master_key.bin

Each file is processed independently; a summary lists any failure.

Next steps

decrypt reference for defaults and large backups.
Folder mode for how failures are reported (wrong key, corrupt file).

Last updated on

Add a login provider

Enable single sign-on (OIDC or OAuth) on a dashboard with the CLI.

Commands

Every Portabase CLI command, global options and environment variables.

On this page

Download the master key Decrypt one file Or a whole folder Next steps