File Encryption Tool
Encrypt or decrypt a file with a passphrase, using AES-256-GCM. Nothing is ever uploaded.
If you forget the passphrase, the file cannot be recovered — there's no backdoor, and nothing is stored anywhere.
About this tool
Uses your browser's built-in Web Crypto API. Your passphrase is stretched via PBKDF2 (250,000 SHA-256 iterations + random salt) into a 256-bit key, then the file is encrypted with AES-256-GCM, which also detects tampering. The original filename travels inside the encrypted payload. Wrong passphrase fails outright rather than producing garbled output.
Good to know
Solid standard encryption for everyday protection — a shared drive, a lost USB stick, sensitive email attachments. Not a substitute for an audited product under regulatory requirements. No recovery mechanism exists — losing the passphrase means losing the file.