formseal-decrypt 0.6.0

Decrypt formseal ciphertexts locally.

formseal-decrypt decrypts form submissions downloaded by formseal-fetch. Nothing is decrypted in transit or on the server — only the holder of the private key can read submissions.

formseal-decrypt is not a hosted service or dashboard. It is a CLI decryption utility.

Installation

Via pipx (recommended)

pipx install formseal-decrypt

Via pip

pip install formseal-decrypt

Quick start

fsd connect
fsd decrypt
fsd status

How it works

Browser (formseal-embed)
       │
       ▼ (encrypted submissions)
 Your server / endpoint
       │
       ▼ (fsf fetch)
 ciphertexts.jsonl ──► Your PC
       │
       ▼ (fsd decrypt)
  formseal.decrypted.jsonl (canonical JSONL ledger)

Your backend stores opaque ciphertext only. fsf fetch downloads it. fsd decrypt decrypts it offline with your private key.

Commands

Run fsd --help for all options.

Output formats

fsd decrypt always writes formseal.decrypted.jsonl as the canonical JSONL ledger. Pass --format for additional exports:

• CSV — Spreadsheet-compatible
• JSONL — One JSON object per line (canonical)
• JSON — Pretty-printed JSON array
• Markdown — Table view

Security

Encryption happens in the browser. The backend stores ciphertext only. formseal-decrypt never sees plaintext it didn't decrypt itself.

Your private key never leaves your machine. formseal-decrypt:

• Stores credentials in your OS keychain (Windows Credential Manager / macOS Keychain / Linux Secret Service)
• Decrypts locally only
• Sends no telemetry, has no analytics
• Skips already-decrypted messages automatically

Documentation

Full documentation is in the docs directory.

⭐ Please star the repo if you find formseal-decrypt useful.

License

MIT