Encrypted backup not restoring

[GCersosimo (ELGia)]

I am an ihost + docker user

I had a problem with the ihost device and I had to reformat. I had both manual backups and the emergency kit with the key written.

I reinstalled everything, loaded my 2 backup files, when I tried to recover it rightly asked me for the password. I put the password of the emergency kit and it does not recognize it as correct.

I tried with a second backup, same problem.

and yet I had only one key generated in early January and my last backup is from this morning.

I spent 5 days configuring everything, creating maps, I have more than 200 devices between tuya, sonoff, etc, lots of rules and customizations and now I have to do everything again.?

because it does not read the key correctly.

But what is this encryption for? if it cannot recognize the emergency kit.

I am discouraged.

[tom_l]

Hi and welcome to the forum. That does sound frustrating.

Can you try this script and see if you can decrypt your backups?

Get files from password protected snapshot?

Here’s how you can do it on the Pi: In the folder where the .tar (not the extracted .tar.gz files) file is, create a new file decrypt.py nano decrypt.py Paste the following: #!/usr/bin/env python3 import sys import getopt import hashlib import tarfile import glob import os import shutil from pathlib import Path from cryptography.hazmat.backends import default_backend from cryptography.hazmat.primitives.ciphers import ( Cipher, algorithms, modes, ) def _password_to_key(passwor…

If so you could then load the decrypted backups to be restored.

[cogneato]

I have a tweaked version of the above script here as well if you want to try it: GitHub - cogneato/ha-decrypt-backup-tool

It worked for the backups I tested.

[GCersosimo (ELGia)]

you are right, I forgot to write that
Yesterday an update of the home Assistant image arrived, to be safe I launched a manual backup and then I ran the automatic update via the ihost/docker utility.

after the reboot my HA was completely reset from scratch.

so everything could have happened via the update.

now I try those scripts to extract the backup file
Thanks

[GCersosimo (ELGia)]

it seems that the password is wrong and yet I have only created one, I only have that one. I don’t know what to say.

I will try the other tools suggested.

result:
root@kubeprx03:/home/kubewall#
root@kubeprx03:/home/kubewall#
root@kubeprx03:/home/kubewall# python3 decrypt.py -i ha_202501090028.tar -p VQA7-83CH-XTC8-SXMB-5UKJ-SZDS-8ZU6
Extracting ha_202501090028.tar…
Extracting secure tar homeassistant.tar.gz…
Unable to extract SecureTar - maybe your password is wrong or the tar is not password encrypted?
root@kubeprx03:/home/kubewall#

[GCersosimo (ELGia)]

I tried the tools on cogneato (Ashton) · GitHub

but it gives me a programming error, now I try to see if I understand something in the source of the downloaded “decrypt_backup.py” file.

image|690x116

[aceindy]

There is a wrong indentation on line 204:

, manual_key):

[The-May]

Script is broken/incomplete. See issue on github.

[cogneato]

Should be fixed now

[GCersosimo (ELGia)]

Get files from password protected snapshot?, Probably instead of displaying the key I actually recreated it and consequently invalidated the old backups. This is what I remember doing in the past few days.

today I saw that in the HA (backup) panel it is no longer possible to display the BACKUP key… Better this way.

Given the urgency I recreated everything from scratch.

now since Cogneato corrected his script I will try again I will do some tests to decrypt both via HomeAssistant and through the script.
for now thanks to everyone.

[GCersosimo (ELGia)]

ok i tried the Cogneato script. after its modification it works.

also tried again directly from home assistant and it works.

Thanks

[GCersosimo (ELGia)]

ok guys I also tried the backup and restore from one type of hardware and version to another.

made a backup from a sonoff iHost hardware (HA Core version) through the HA interface (Settings/systema/backup) and recovered everything on a PROTECTLI FW4A mini-PC with the HA OS version installed.

Everything worked perfectly, and I’m talking about a complex installation with Tuya, sony, ewelink, synology, onvif, floor plans, automations, infrared, zigbee, zwave, etc… All devices and configurations perfect as on the source device.

good job guys. On some installations I can abandon proxmox because I had practically chosen only to be able to have a full backup of the image perfectly working.

With the new Backup and restore procedure I can rest easy.
Thanks