Inspect, unpack, pack, encrypt, and decrypt RouterOS .backup files. Runs entirely in your browser.
Upload a .backup file
Decrypt and inspect MikroTik RouterOS .backup files (plaintext, RC4, and AES-128-CTR) and list their stored files. Runs entirely in your browser.
MikroTik RouterOS devices export their configuration as a binary `.backup` file. Depending on the RouterOS version and whether a password was set, that file is stored in one of three formats: plaintext, RC4-encrypted (legacy), or AES-128-CTR (RouterOS 6.43 and newer). This tool reproduces the decryption logic of the popular routerosbackuptools project. Upload a `.backup` file and enter its password to verify the password, decrypt the contents, and list the files stored inside - all locally in your browser, with nothing uploaded.
Input:
flash.backup (encrypted RouterOS backup) + password
Output:
Format: AES-128-CTR | Password: correct | Stored files: 7
Is my backup file uploaded anywhere?
No. All decryption and parsing happen in your browser using JavaScript. The .backup file and password never leave your device.
Which RouterOS backup formats are supported?
All three: plaintext (unencrypted), legacy RC4-encrypted, and AES-128-CTR used by RouterOS 6.43 and later. The format is detected automatically from the file's magic header.
How does it know the password is correct?
Every encrypted RouterOS backup decrypts to a stream that begins with the fixed plaintext magic 0xB1A1AC88. If that value appears after decryption, the password is correct; otherwise the tool reports a failed magic check.
Do I need a password for an unencrypted backup?
No. Plaintext backups (magic 0xB1A1AC88) are parsed directly and the password field can be left blank.
Can I paste the file instead of uploading it?
Yes. You can upload the .backup file directly, or paste a hex dump of its bytes into the input field.