File Encryption / Decryption

Enter a strong password (8+ chars), then drop your file below to encrypt it locally in your browser.

Use the same password that was used to encrypt the file, then drop the encrypted file below to decrypt it locally.

This tool performs all cryptography locally in your browser using the WebCrypto API. Nothing is uploaded to a server.

• Key derivation: Your password is converted to a 384‑bit stream via PBKDF2‑SHA256 with a random 8‑byte salt and 10,000 iterations. The first 32 bytes form the AES‑256 key; the next 16 bytes form the IV.
• Encryption: The file bytes are encrypted using AES‑256 in CBC mode. The output format is "Salted__" | salt(8) | ciphertext, compatible with many tools.
• Decryption: The salt is read from the first 16 bytes (after the "Salted__" header), the same PBKDF2 parameters are applied to rebuild the key/IV, and the ciphertext is decrypted.
• File naming: Encrypted downloads use the .enc extension. When decrypting, trailing .dec and .enc are removed to restore the original filename and extension.
• Privacy: Keys and file data never leave your device. Closing the tab clears all in‑memory state.

Tip: Use a long, unique password. The built‑in generator creates strong, random passwords with a balanced mix of characters.