OpenSkillIndex← back to search
claude-code

Claude-skill-registry encrypt-decrypt-backup

This skill should be used when the user asks to "encrypt backup", "decrypt .bep file", "bitcoin-backup CLI", "backup wallet", or needs to encrypt/decrypt BSV backup files using bitcoin-backup CLI.

install
source · Clone the upstream repo
git clone https://github.com/majiayu000/claude-skill-registry
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/majiayu000/claude-skill-registry "$T" && mkdir -p ~/.claude/skills && cp -r "$T/skills/data/encrypt-decrypt-backup" ~/.claude/skills/majiayu000-claude-skill-registry-encrypt-decrypt-backup && rm -rf "$T"
manifest: skills/data/encrypt-decrypt-backup/SKILL.md
source content

Encrypt/Decrypt Backup

Encrypt and decrypt BSV backup files using the bitcoin-backup CLI (

bbackup
).

When to Use

  • Encrypt wallet JSON to secure 
    .bep
    backup file
  • Decrypt 
    .bep
    backup to read wallet data
  • Create BAP identity backups
  • Secure ordinals keys and payment keys
  • Store sensitive BSV data encrypted at rest

Supported Backup Types

All backups use 

.bep
format (AES-256-GCM encryption):

  • BapMasterBackup - BAP identity (Type42 or Legacy)
  • BapMemberBackup - Individual BAP member
  • WifBackup - Single private key
  • OneSatBackup - Ordinals + Payment + Identity keys
  • VaultBackup - Encrypted vault
  • YoursWalletBackup - Yours Wallet format
  • YoursWalletZipBackup - Yours Wallet ZIP format

Usage

Run the encrypt or decrypt scripts:

# Encrypt a wallet JSON file
bun run /path/to/skills/encrypt-decrypt-backup/scripts/encrypt.ts wallet.json output.bep

# Decrypt a backup file
bun run /path/to/skills/encrypt-decrypt-backup/scripts/decrypt.ts backup.bep

# Decrypt to specific output file
bun run /path/to/skills/encrypt-decrypt-backup/scripts/decrypt.ts backup.bep wallet.json

Flow's BSV Convention

This skill follows agent's BSV backup convention:

Storage Location: 

/.flow/.bsv/

  • backups/
    - Encrypted .bep files
  • temp/
    - Temporary decrypted files (auto-cleanup)
  • config.json
    - Backup registry

Security:

  • Never hardcodes passwords
  • 600k PBKDF2 iterations for strong encryption

Password Handling

Scripts accept passwords in two ways (priority order):

  1. Command-line argument - Pass password directly for interactive use
  2. Environment variable - Set 
    BACKUP_PASSPHRASE
    for automation/CI

Requirements

  • bbackup
    CLI installed globally: 
    bun add -g bitcoin-backup

CLI Reference

The bitcoin-backup CLI provides three commands:

  • bbackup enc <input> -p <password> -o <output>
    - Encrypt JSON to .bep
  • bbackup dec <input> -p <password> -o <output>
    - Decrypt .bep to JSON
  • bbackup upg <input> -p <password> -o <output>
    - Upgrade legacy backups

Error Handling

  • Password too short (min 8 chars) - Returns error
  • Invalid backup structure - Validation error
  • Wrong password - Decryption fails with error
  • Auto-detects backup type and iteration count