📝 Better manual decryption instructions

Also, add decrypt.sh script to help with manual decryption.

1 files changed, 15 insertions, 0 deletions

diff --git a/decrypt.sh b/decrypt.sh
new file mode 100755
index 0000000..914be88
--- /dev/null
+++ b/decrypt.sh
@@ -0,0 +1,15 @@
+#!/usr/bin/env bash
+
+set -euo pipefail
+
+if [ $# -lt 2 ]; then
+  echo "Usage: decrypt.sh <encrypted.txt> <password>"
+  exit 1
+fi
+
+filename="$1"
+password="$2"
+
+tail -n +2 "$filename" \
+  | base64 --decode \
+  | openssl enc -d -aes-256-cbc -pbkdf2 -salt -in - -out - -k "$password"