b-open-io/encrypt-decrypt-backup
skills/encrypt-decrypt-backup/SKILL.md
This skill should be used when the user asks to "encrypt backup", "decrypt .bep file", "bitcoin-backup CLI", "backup wallet", "Touch ID password cache", "upgrade backup iterations", or needs to encrypt/decrypt BSV backup files using the bbackup CLI.
$ install --global
skillsauthnpx skillsauth add b-open-io/bsv-skills encrypt-decrypt-backupInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Jul 11, 2026, 3:35 AM169.2s3 files scanned
SKILL.md
- name:
- encrypt-decrypt-backup
- description:
- This skill should be used when the user asks to "encrypt backup", "decrypt .bep file", "bitcoin-backup CLI", "backup wallet", "Touch ID password cache", "upgrade backup iterations", or needs to encrypt/decrypt BSV backup files using the bbackup CLI.
- allowed-tools:
- Bash(bun:*)
Encrypt/Decrypt Backup
Encrypt and decrypt BSV backup files using the bitcoin-backup CLI (bbackup).
When to Use
- Encrypt wallet JSON to secure
.bepbackup file - Decrypt
.bepbackup to read wallet data - Create BAP identity backups
- Secure ordinals keys and payment keys
- Store sensitive BSV data encrypted at rest
Supported Backup Types
All backups use .bep format (AES-256-GCM encryption):
- BapMasterBackup - BAP identity (Type42 or Legacy)
- BapAccountBackup - Individual BAP account key
- WifBackup - Single private key
- OneSatBackup - Ordinals + Payment + Identity keys
- VaultBackup - Encrypted vault
- YoursWalletBackup - Yours Wallet format
- YoursWalletZipBackup - Yours Wallet ZIP format
Usage
Run the encrypt or decrypt scripts:
# Encrypt a wallet JSON file
bun run /path/to/skills/encrypt-decrypt-backup/scripts/encrypt.ts wallet.json output.bep
# Decrypt a backup file
bun run /path/to/skills/encrypt-decrypt-backup/scripts/decrypt.ts backup.bep
# Decrypt to specific output file
bun run /path/to/skills/encrypt-decrypt-backup/scripts/decrypt.ts backup.bep wallet.json
Flow's BSV Convention
This skill follows agent's BSV backup convention:
Storage Location: /.flow/.bsv/
backups/- Encrypted .bep filestemp/- Temporary decrypted files (auto-cleanup)config.json- Backup registry
Security:
- Never hardcodes passwords
- 600k PBKDF2 iterations for strong encryption
Password Handling
Scripts accept passwords in two ways (priority order):
- Command-line argument - Pass password directly for interactive use
- Environment variable - Set
BACKUP_PASSPHRASEfor automation/CI
Requirements
bbackupCLI installed globally:bun add -g bitcoin-backup
CLI Reference
The bitcoin-backup CLI provides four commands:
bbackup enc <input> -p <password> -o <output>- Encrypt JSON to .bepbbackup dec <input> -p <password> -o <output>- Decrypt .bep to JSONbbackup upg <input> -p <password> -o <output>- Upgrade legacy backupsbbackup forget <file>- Remove cached Touch ID password
Touch ID Password Caching (macOS arm64)
On Apple Silicon Macs, bbackup can cache passwords in the Secure Enclave via @1sat/vault:
bbackup enc backup.json -o backup.bep --touchid— encrypt and cache the passwordbbackup dec backup.bep --touchid— decrypt using cached password (Touch ID prompt)bbackup forget backup.bep— remove cached password
Requires macOS arm64 with Xcode Command Line Tools. Cached passwords are hardware-bound and cannot be extracted.
Error Handling
- Password too short (min 8 chars) - Returns error
- Invalid backup structure - Validation error
- Wrong password - Decryption fails with error
- Auto-detects backup type and iteration count
Related Skills
b-open-io/yours-wallet
development
VerifiedTrustedCommunity
This skill should be used when the user asks to integrate "Yours Wallet", "connect a BSV wallet", use "BRC-100", "pay with BSV wallet", add "wallet checkout in a web app", use "yours-wallet-provider", build a "pay with Yours Wallet" button, access "window.CWI", or connect a React app to a BRC-100 wallet.
5SKILL.mdUpdated Jul 15, 2026
b-open-io/wallet-send-bsv
development
VerifiedTrustedCommunity
This skill should be used when the user asks to "send BSV", "transfer satoshis", "create payment transaction", "send from WIF", "P2PKH transaction", or needs to build, sign, and broadcast P2PKH transactions from a WIF private key using @bsv/sdk.
5SKILL.mdUpdated Jul 11, 2026
b-open-io/wallet-encrypt-decrypt
development
VerifiedTrustedCommunity
This skill should be used when the user asks to "encrypt message with BSV key", "decrypt with private key", "ECDH encryption", "AES-256-GCM BSV", "EncryptedMessage", "BRC-2 encryption", or needs to encrypt/decrypt data using BSV keys and @bsv/sdk.
5SKILL.mdUpdated Jul 11, 2026
b-open-io/wallet-brc100
tools
VerifiedTrustedCommunity
This skill should be used when the user asks to "implement BRC-100 wallet", "use wallet-toolbox", "TypeScript BSV wallet", "BRC-100 implementation", "desktop wallet", "Electron wallet", "browser wallet", "IndexedDB wallet storage", "wallet actions", "wallet baskets", "UTXO management", "createAction", "listOutputs", "wallet certificates", "WalletClient", "noSend", "BEEF payment", "pay-beef", "send BEEF", "Transaction.fromBEEF", "toHexBEEF", or needs guidance on building conforming wallets using @bsv/wallet-toolbox or connecting to a user's BRC-100 wallet via WalletClient.
5SKILL.mdUpdated Jul 11, 2026