Security and Privacy Tools

File Encrypt / Decrypt

Encrypt and authenticate local files with AES256-GCM, including private filename metadata.

Your content stays on your device Free, with no account
File Encrypt / Decrypt · local toolsOn device · no uploads

Source & controls

No file selected.

Ready. Run when you choose.

Scope & limits

Original≤25MiB; strict binary version1 .tbbenc; AES256GCM128-bit tag, fresh16-byte salt/12-byteIV, PBKDF2-HMACSHA256600000iterations. Filename/type encrypted. Exact passphrase12+Unicode characters/≤1024UTF16 units, no recovery. Authentication before original bytes/name returned. Edits/clear cancel worker; downloaded files never execute/preview as HTML.

WORKING RESULT

Preview & output

No authenticated result.
A FEW SIMPLE STEPS

How to use File Encrypt / Decrypt

  1. Choose source/settings or load the example. Optional imports show filename/size/status.
  2. Process locally or use drawing/playback controls; review result and scope.
  3. Inspect/play the actual result before explicitly copying/downloading it.
  4. Clear or switch workflows to release inputs, media, workers and output.
PRIVATE BY DESIGN

Why use this tool?

Your text, files, artwork and audio stay on your device. Self-hosted browser code processes everything without uploads or external content fetching.

Tool inputs stay in your browser. Only your theme preference is saved on this device.

A few things worth knowing

What is the supported scope?

Original≤25MiB; strict binary version1 .tbbenc; AES256GCM128-bit tag, fresh16-byte salt/12-byteIV, PBKDF2-HMACSHA256600000iterations. Filename/type encrypted. Exact passphrase12+Unicode characters/≤1024UTF16 units, no recovery. Authentication before original bytes/name returned. Edits/clear cancel worker; downloaded files never execute/preview as HTML.

Does anything leave my browser?

No source is uploaded. Optional microphone input needs permission and remains local. Explicit clipboard/download copies remain outside cleanup.

What happens when settings change?

Old downloads invalidate. Live audio updates or restarts its sweep as labelled. Stop/Clear/page exit release processing and media.