local-only

File encryption
in your browser.

Encrypt and decrypt files using AES-256-GCM, entirely on your device. No server. No upload. No network. Works on desktop and iPhone.

Encrypt a fileDecrypt a file
AES-256-GCMPBKDF2-SHA256Web Crypto APIPWA ready

How it works

01
Pick a file
Any file type. Read directly from your device via the browser File API. Nothing is sent anywhere.
02
Enter a password
A 256-bit key is derived using PBKDF2 with 310,000 iterations and a random 128-bit salt.
03
Encrypt or decrypt
AES-256-GCM runs entirely in the browser via Web Crypto API. Output is available instantly.

Security primitives

CipherAES-256-GCMAuthenticated encryption. Detects tampering.
Key derivationPBKDF2-SHA256310,000 iterations. Random salt per file.
IV96-bit randomFresh random nonce every encryption.
RuntimeWeb Crypto APIBrowser-native. Zero third-party crypto.

What stays local

Your files are read using the browser File API and never uploaded
Encryption keys exist only in memory and are discarded after use
Decrypted output is rendered from a local Blob URL, not from any server
The site works fully offline once loaded (add to home screen on iPhone)