Encrypt a File
Password-protect any file with AES-256-GCM encryption — entirely in your browser, using no external libraries. Your password and your file never leave this tab.
If you forget this password, the file is permanently unrecoverable. There is no reset. Save it somewhere safe before encrypting.
Drop any file to encrypt, or click to select
Any file type, any size (limited by available browser memory)
Accepts: */*
Drop your .enc file here, or click to select
Only files encrypted by this tool (.enc)
Accepts: ENC, APPLICATION/OCTET-STREAM
Frequently asked questions
Is my file or password sent to a server?
No — never. All encryption and decryption happens inside your browser tab using the browser's built-in Web Crypto API. Your file and password never leave your device. The page works entirely offline once loaded.
What encryption algorithm is used?
AES-256-GCM — the same algorithm used by TLS, government systems, and password managers. The key is derived from your password using PBKDF2 with SHA-256 and 600,000 iterations, which makes brute-force attacks extremely slow. Each file is encrypted with a unique random salt and IV, so encrypting the same file twice produces different outputs.
What happens if I lose the password?
The file is permanently unrecoverable. We have no password reset, no backdoor, and no way to help — that is the nature of strong encryption. Keep your password in a password manager or written down somewhere secure before encrypting important files.
Can I encrypt any type or size of file?
Yes — any file type is supported. The size limit is determined by your browser's available memory, typically several gigabytes on a modern device. Very large files (>1 GB) may be slow because the entire file is read into memory.
Is the original filename protected?
Yes. The original filename is encrypted inside the payload along with the file contents. The only visible metadata is the .enc extension on the output file. An attacker who obtains the .enc file learns nothing about the original filename, file type, or contents without the password.