Password-protect any file with AES-256-GCM, right here in your browser. The file never leaves your device — everything runs offline.
The passphrase is stretched with PBKDF2 (600,000 iterations of SHA-256,
with a random salt) into a 256-bit key. The file is then encrypted with
AES-256-GCM, an authenticated cipher: if the passphrase is wrong, decryption
fails cleanly with a message instead of producing garbage. A fresh random salt and IV are
used for every encryption.
The output is a single .enc file (magic header + salt + IV + ciphertext).
To decrypt it later, switch to Decrypt, pick the .enc file,
and enter the same passphrase — you get back the original file, byte for byte.
All crypto runs in your browser via the Web Crypto API. Nothing is uploaded, and this page works fully offline.