About AES-GCM Decrypt
The other half of AES-GCM Encrypt: paste the JSON envelope it produced, along with the same passphrase, to recover the original plaintext.
If decryption fails, double-check the passphrase and that the envelope wasn't edited - GCM's authentication tag means even a single changed character will cause decryption to reject the ciphertext outright, which is the point.