File Encryptor
Password-encrypt any file (AES-256).
Runs entirely in your browser — nothing you enter is uploaded, logged, or tracked.
Drop in any file and a password to encrypt it with AES-256-GCM — the kind of authenticated cipher behind modern secure messaging — then download the encrypted blob. Decrypt it later with the same password. The key is derived from your password with PBKDF2 (a high iteration count), and everything happens on your device.
Frequently asked questions
How is the file encrypted?
AES-256-GCM (authenticated) with a key derived from your password via PBKDF2-SHA-256 at 250,000 iterations with a random salt, and a random IV per file.
Is the file uploaded?
No. Encryption and decryption run entirely in your browser with the Web Crypto API; the file and password never leave your device.
What if I lose the password?
There is no recovery — that is the point. Without the password the file cannot be decrypted, so store it safely.
Is the encrypted file tamper-evident?
Yes — GCM is authenticated, so any change to the ciphertext (or a wrong password) is detected and decryption fails rather than returning garbage.