File Encryptor
Encrypt and decrypt files with a password
Click or drop a file hereChoose a file
About File Encryptor
File Encryptor protects one file with a password. Encrypt derives a key from your password with PBKDF2-SHA-256 and 600,000 iterations, adds a fresh random salt and IV, and seals the file with AES-256-GCM through the Web Crypto API of your browser; the result is saved as name.encrypted. Decrypt reverses it and gives the original name back when the file ends in .encrypted; otherwise .decrypted is added. GCM checks integrity, so a wrong password or a damaged file is refused. Files made by the older XOR version of this tool, which have no such check, can still be opened.
How to encrypt a file with a password
- 1Choose "Encrypt" or "Decrypt".
- 2Choose the file: any file to encrypt, or a .encrypted file to decrypt.
- 3Type the password in "Password".
- 4Click "Encrypt file" or "Decrypt file".
- 5Click "Download": you get name.encrypted, or, when decrypting, the name without .encrypted.
Formats and limits
- Algorithm
- AES-256-GCM, key from PBKDF2-SHA-256 with 600,000 iterations
- Output
- name.encrypted, 48 bytes larger than the original
- Added data
- A short marker, a random salt and IV, and the GCM authentication tag
- Accepted files
- Any type
- Size limit
- None set; the whole file is held in memory while it is processed
Where your file is processed
Encryption and decryption run in your browser through the Web Crypto API. The file and the password are not uploaded, and the password is not stored: if you lose it, the file cannot be recovered. An error shown on the page may be logged for us as cleaned text with the tool and browser names, never with the file, its name, or the password.
Frequently asked questions
Is a wrong password detected?
Yes, for files made by the current AES version: decryption is refused with a message saying the password is wrong or the file was changed or cut, and no file is offered. Those files start with a marker the tool recognizes.
Can I decrypt a file encrypted before September 29, 2026?
Yes. A file without the AES marker is decrypted with the old XOR method, and a note warns that a wrong password cannot be detected there: if the result does not open, the password was wrong. Encrypt the file again to protect it with AES.
What if I forget the password?
No recovery is possible. The key exists only while the page derives it from what you type; the site never receives the password, and there is no reset or back door. Keep the password somewhere safe before you delete the original file.
Does it work for large files?
Yes, up to what the memory of your device holds: the tool sets no size limit, but the whole file and its encrypted copy are held in memory at the same time, so a very large file may fail on a phone.
Tips and tricks
- ✓Send the password through a different channel than the encrypted file, for example a call or another app.