TC

File Encryption

Encrypt or decrypt any file with a password using AES-256-GCM. Processing happens entirely on your device — files are never uploaded anywhere.

Drop a file here, or click to browse

How it works

1

Select a file

Drag and drop or choose any file from your device.

2

Set a password

Choose a strong password — it's used to derive an AES-256 key locally via PBKDF2.

3

Download the result

The encrypted (.enc) or decrypted file downloads automatically, with the original filename preserved.

Frequently Asked Questions

Common questions about encrypting and decrypting files.

AES-256-GCM with a key derived via PBKDF2-SHA-256 (250,000 iterations). The encrypted file includes a small header that preserves the original filename.

No. Files are read and processed entirely in your browser using the Web Crypto API and the FileReader API. Nothing is uploaded to a server.

There is no hard limit, but very large files (several hundred MB or more) may take longer and use more memory since everything is processed in-browser.

The file cannot be recovered without the exact password used to encrypt it. Store your password somewhere safe, such as a password manager.