SafeCard CLI

The SafeCard CLI is a free open-source application which ensures that you’ll always be able to recover critical backups stored on GridPlus SafeCards even if you no longer have access to a Lattice1.

What You Can Do With the SafeCard CLI

1. Export Mnemonic (Seed Phrase) (only for cards with applet v2.4+, this means cards purchased in 2023 and on!) This allows you to export the 12/18/24-word mnemonic seed phrase for unlocking your wallet. Please note this is different from the option below - the seed hash itself. Most wallet providers only support importing the seed phrase, not the seed hash.

2. Export Seed

   This function allows you to export your SafeCard wallet's binary seed (a hash of the more commonly used seed phrase). With the master seed, you have everything you need to derive any keys needed to gain access to your funds on another device.

3. Export Private Keys

   This lets you export the individual private keys from your wallet directly. You will have to specify the starting export path.

4. Delete Seed

   This completely erases your wallet seed from the SafeCard. Useful for both making sure no additional record of your wallet secrets exists and clearing the SafeCard before creating a new wallet. You can also delete the SafeCard seed directly on the Lattice1 by going to Manage Wallets and selecting Reset SafeCard Wallet when the SafeCard is inserted and unlocked.

5. Change PIN You can also use the CLI to change your SafeCard's PIN if you don't have access to a Lattice device. If you do, it's way faster to do this via the Change SafeCard PIN option in the Manage Wallets menu on the Lattice.

All SafeCard CLI operations are protected by your SafeCard's PIN. Just like with any other SafeCard operations, you always have only three attempts to unlock the card before the SafeCard bricks - once it bricks, it's gone forever and can't be reinstated.

NOTE: If you set up your SafeCard before Lattice1 HSM software version 0.12.1 (released late October 2021), you also had the possibility to select the SafeCard wallet to be non-exportable (this would make the SafeCard wallet impossible to copy in any way). If you have a non-exportable SafeCard wallet, please don't use it with STARK-based crypto!

If you're not sure if your SafeCard seed was set to exportable or non-exportable when created, you can go to zk.money and try creating an account. If the account creation fails, your seed is non-exportable.

You can make it exportable by resetting the SafeCard wallet and importing this seed on it again (from a seedphrase or by copying another Lattice/SafeCard wallet).

What You Need to Manage Your SafeCards With the CLI

1. One or more GridPlus SafeCards.

2. A computer (MacOS or Windows, but you can also build from source on Linux).

3. A generic card reader. We use and recommend this model.

4. The SafeCard CLI binary. You can get it in the user guide!

5. The SafeCard CLI user guide. You can find everything below:

GitHub - GridPlus/safecard-cli: Golang based CLI for interacting with Safecards through an HID reader. Currently it's only function is to export the card's recovery seed.GitHub