Official offline decryption tool for encrypted backups

[hebusdetroye]

Describe the feature

I am requesting an official, maintained offline tool (executable or Python script) provided by Nabu Casa to decrypt and extract individual files from encrypted Home Assistant backups on Windows, Mac, or Linux.

Currently, encrypted backups are "black boxes." If a user needs to recover just one configuration file, there is no official way to do so without a full system restore.

Use cases

A recent update to the tuya_local custom component wiped out my custom device configurations (YAML files for my Poolex Heat Pump and Smart Fan). My instance was running fine, but I needed to extract these specific files from my backup to fix the integration.

More importantly, if HAOS is completely broken and unbootable, an internal recovery tool is useless. We need a reliable external way to access our data in case of a total system failure.

Current workarounds

I attempted to use 3rd-party community scripts like hass_unpacker.py, but they are outdated and broken due to changes in the securetar library. Browser-based community tools also failed to recognize the valid Emergency Kit key (LBO9-K4SV...). Relying on unmaintained 3rd-party scripts for disaster recovery is a massive security and reliability risk.

Anything else?

The current UI for encryption keys in Home Assistant is also problematic. Clicking "Modify" forced a key rotation without a cancel option, which adds confusion to existing backups. An official tool would solve the primary need for data accessibility.

[mib1185]

Maybe as an add-hoc solution for your current issue - you can always go to Settings > System > Backup and download the backup, it is decrypted during the download.

[hebusdetroye]

Hi Michael, Thanks for your prompt reply ! I looked for this tips for some hours, tried script, soft, web and github tool... next time I will use it ! 👍 worked perfectly! But during this search, it seems also evident than having external tools could be also important. My system result on some thousands hours of work and search, do, redo and improvements... I save all on internal Nvme + Nas. Save is good, be able in all condition to extract files without HAOS access could be essential. Many thanks for your time !

…

-------- Message d'origine -------- De : Michael ***@***.***> Date : 28/03/2026 17:13 (GMT+01:00) À : home-assistant/feature-requests ***@***.***> Cc : hebusdetroye ***@***.***>, Author ***@***.***> Objet : Re: [home-assistant/feature-requests] Official offline decryption tool for encrypted backups (Discussion #3313) Maybe as an add-hoc solution for your current issue - you can always go to Settings > System > Backup and download the backup, it is decrypted during the download. — Reply to this email directly, view it on GitHub<#3313?email_source=notifications&email_token=BNXZA5MDUCRF7HFYZE6Q5C34S72ZFA5CNFSNUABIM5UWIORPF5TWS5BNNB2WEL2ENFZWG5LTONUW63SDN5WW2ZLOOQXTCNRTGU3TKOJRUZZGKYLTN5XKMYLVORUG64VFMV3GK3TUVRTG633UMVZF6Y3MNFRWW#discussioncomment-16357591>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/BNXZA5OIPBJ2SMMPNWOCLJD4S72ZFAVCNFSM6AAAAACXDJMTHCVHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTMMZVG42TSMI>. You are receiving this because you authored the thread.Message ID: ***@***.***>

[mik-laj]

This tool works with new backup: https://github.com/samrocketman/home-assistant-decrypt-backup
I found this link in comment section on announcement blog post
https://www.home-assistant.io/blog/2026/03/26/modernizing-encryption-of-home-assistant-backups/