🔒 real AES-256-GCM, via your browser's own Web Crypto API
File Encryptor / Decryptor
Password-protect any file with real AES-256-GCM encryption — entirely in your browser via the native Web Crypto API. Unlike most "free online encryption" tools, your file is never sent anywhere to be processed.
Click or drop a file here
How it works
Your password is stretched into a 256-bit key using PBKDF2 with 250,000 iterations and a random salt, then the file's bytes are encrypted with AES-256-GCM using a random IV — all through the browser's native Web Crypto API — and the output is a single file prefixed with a small "TCE1" header followed by the salt, IV, and ciphertext, ready to reverse with the same password on the Decrypt tab.
FAQ
What happens if I forget my password?
The file is unrecoverable. The password is run through PBKDF2 with 250,000 iterations to derive the actual AES-256 key, and that key is never stored anywhere — there's no backdoor, recovery link, or master key, by design.
Can I decrypt a file encrypted by this tool using a different program, like OpenSSL?
Not directly — the encrypted file starts with a custom 4-byte "TCE1" header followed by this tool's specific layout of salt, IV, and AES-256-GCM ciphertext. Another program would need to replicate that exact format and PBKDF2 parameters to read it; this tool's own Decrypt tab is the reliable way to reverse it.
Free, unlimited, no account. If this saved you a paid tool, a small thanks is appreciated.