🛡️ Cold-Start Recovery Studio
RAM-Only WebCrypto • Zero-Network

🔑 Disaster Recovery Passphrase

A memorized Diceware passphrase (min 6 words, 8 recommended for ~80 bits entropy) that decrypts your offline vault on any borrowed browser.

0 / 6+ words 0 / 20 chars 0 unique Entropy: Incomplete
🛡️
Zero-Hardware Cold-Start Recovery Guarantee

Because all physical hardware (phones, security keys, laptops) is assumed lost or stolen in a cold-start disaster, your passphrase is the sole cryptographic root of trust. 600,000 PBKDF2 iterations render offline brute-force attacks computationally infeasible.

✓ Recovery Vault Encrypted Successfully!

PBKDF2-SHA-256 (600,000 rounds) • AES-GCM-256 • Verified round-trip decryption

🌐 Step 1: Deploy to Edge Hosting (Cloudflare / Netlify / Vercel)
Host your hardened single-file recovery terminal at https://sos.yourdomain.com

Option A: Direct Upload via Web Dashboard (Zero Git Clone, Zero Terminal)

  1. Log into the Cloudflare Dashboard.
  2. Navigate to Workers & Pages → Select your Pages project (or click Create application → Pages → Direct Upload).
  3. Create an empty folder, place the downloaded index.html inside, and drag it into the dropzone.
  4. Click Deploy site. Your vault is live worldwide on Cloudflare's Anycast Edge!

Option B: 1-Command Automated CLI (Zero Git Clone)

npx github:janhrabcak/identity-recovery --provider cloudflare
📡 Step 2: Update DNS TXT Dead-Drop (Cloudflare, Route53, or Any DNS)
Secondary emergency fallback queryable via DoH if your web URL is unreachable.

In your DNS provider, add or update the following TXT record in your domain zone:

Field Value Action
Type TXT -
Name / Host recovery.yourdomain.com
TTL 120 (2 minutes, or Auto) -
Content / Value
Copied to clipboard!