Merge pull request #492 from PR0M3TH3AN/codex/update-migration-documentation-and-readme

Document parent seed migration
This commit is contained in:
thePR0M3TH3AN authored and GitHub committed 2025-07-13 09:28:03 -04:00
commit 73196e20ec
2 files changed
+12

No files matched your search

+3
View File
@@ -215,6 +215,9 @@ The encrypted index file `seedpass_entries_db.json.enc` begins with `schema_vers
> `seedpass_passwords_db.json.enc` (Fernet) to AES-GCM as
> `seedpass_entries_db.json.enc`. The original file is kept with a `.fernet`
> extension.
> The same migration occurs for a legacy `parent_seed.enc` encrypted with
> Fernet: it is transparently decrypted, re-encrypted with AES-GCM and the old
> file saved as `parent_seed.enc.fernet`.
## Usage
@@ -36,3 +36,12 @@ is renamed to `seedpass_entries_db_checksum.txt.fernet`.
No additional command is required – simply open your existing vault and the
conversion happens transparently.
### Parent seed backup migration
If your vault contains a `parent_seed.enc` file that was encrypted with Fernet,
SeedPass performs a similar upgrade. Upon loading the vault, the application
decrypts the old file, re‑encrypts it with AES‑GCM, and writes the result back to
`parent_seed.enc`. The legacy Fernet file is preserved as
`parent_seed.enc.fernet` so you can revert if needed. No manual steps are
required – simply unlock your vault and the conversion runs automatically.