Extract this kit on a trusted computer and open recovery.html in a modern Edge/Chrome browser. The tool uses browser cryptography and never uploads the archive or passphrase. Keep this tool separately from your encrypted .roadstead backup; keep the passphrase separately. If local-file cryptography is unavailable, use a local web server or the portal HTTPS recovery page. The generated recovery TAR is unencrypted: protect it and remove decrypted copies after use. SQL recovery requires schema/original Auth accounts and owner review. No server secrets, passwords or customer records are included in this kit.
