File Encryption (AES-256)
Lock any file behind a password with AES-256 encryption — entirely in your browser, with no upload.
Drag & drop a file to encrypt, or click
Any file type · No server upload
🔒 AES-256 (GCM) encryption runs inside your browser. Your file and password are never sent to a server.
How it works
Pick a mode — Encrypt or Decrypt — then drag a file into the drop zone or click to browse; any file type works. To encrypt, set a password (a live strength meter rates it as you type) and the tool produces a single .enc file to download. Under the hood it uses AES-256 in GCM mode, an authenticated cipher, and stretches your password into a key with PBKDF2 (SHA-256, 250,000 iterations) so brute-force guessing stays slow. Every file gets a fresh random salt and initialization vector, so encrypting the same document twice never yields identical output. The original filename is stored inside the container, so decrypting restores both the contents and the exact name. Drop a .enc file back in and the tool switches to Decrypt on its own.
When and why to use it
Reach for it whenever a file will pass through a channel you don't fully control. Encrypt a contract, medical scan, or tax return before attaching it to an email, then share the password separately by text or call — if the message is forwarded or the inbox is breached, the attachment stays unreadable. The same logic applies to shared drives and cloud folders: encrypt before uploading, so a mis-set sharing link or a hijacked account exposes nothing. It's just as useful for files you keep rather than send — an archive of passwords, scanned IDs, or client records living on a laptop or USB stick that could be lost or stolen. Because it accepts any format, one habit covers PDFs, photos, ZIPs, spreadsheets, and databases alike.
Privacy and recovery
Everything happens on your device through the browser's built-in Web Crypto API — your file and password are never uploaded, logged, or seen by any server, and the page keeps working offline once it has loaded. Because the encryption is genuine, there is no backdoor: if you lose the password, no one, including us, can recover the file, so store it somewhere durable and separate from the .enc. GCM also verifies integrity, so a wrong password or a corrupted download is rejected outright instead of returning scrambled data. Files are processed in memory, meaning very large ones are limited only by your device's available RAM, never by a server. Keep the encrypted file and its password apart and the contents stay protected even if one of them leaks.
Frequently asked questions
Is my file uploaded to a server?
No. Both encryption and decryption run entirely in your browser via the Web Crypto API, and the page still works offline after it loads — your file and password never leave your device.
What if I forget the password?
There is no recovery. The encryption is real AES-256, so without the exact password no one — including us — can decrypt the file. Store it somewhere you won't lose it, and keep it separate from the .enc file.
How does the recipient decrypt it?
Send them the .enc file and the password through separate channels. They open this same page, drop in the .enc (it auto-switches to Decrypt), and enter the password; the original file and its exact name are restored. No sign-up or install needed.