What do you want to do?

← Back

Choose which file to encrypt

An encrypted copy of the file will be generated. No data is sent to our server.

Choose which file to decrypt

Only files encrypted by this tool are accepted.

← Back

Enter a pass phrase

This phrase will be used as an encryption key. Write it down or remember it; you won't be able to restore the file without it.

Enter the pass phrase

Enter the pass phrase that was used to encrypt this file. It is not possible to decrypt it without it.

Your file is ready!

Why Choose SecureFile?

🛡️

Military-Grade Security

Uses AES-256-GCM encryption, the same standard used by governments and military organizations worldwide. Your files are protected with 256-bit keys, providing virtually unbreakable security.

🔒

Complete Privacy

All encryption happens in your browser. Your files never leave your device, and no data is transmitted to any server. We can't access your files because we never receive them.

Fast & Efficient

Leverages modern Web Crypto API with hardware acceleration. Process files of any size quickly and efficiently, with real-time progress tracking.

🆓

Free & Open

Completely free to use with no hidden costs, registration, or subscriptions. Works offline once loaded. Your data, your control.

How It Works

1

Choose Your Action

Select whether you want to encrypt a file to protect it, or decrypt a previously encrypted file to restore it.

2

Select Your File

Click the browse button and choose any file from your computer. All file types are supported - documents, images, videos, archives, and more.

3

Create/Enter Passphrase

For encryption: create a strong passphrase (minimum 8 characters). Mix uppercase, lowercase, numbers, and symbols for maximum security. Store this passphrase safely - you cannot recover your file without it.

For decryption: enter the exact passphrase used during encryption.

4

Download Your File

Your encrypted/decrypted file is ready! Download it to your device. Encrypted files will have a .encrypted extension added.

Perfect For

💼 Business Documents

Protect confidential contracts, financial reports, business plans, and sensitive company data before sharing or storing in the cloud.

🏥 Medical Records

Secure patient information, medical histories, and health records to comply with privacy regulations like HIPAA and GDPR.

📸 Personal Files

Keep your private photos, personal documents, tax records, and sensitive family information away from prying eyes.

💾 Cloud Storage

Encrypt files before uploading to cloud services like Dropbox, Google Drive, or OneDrive for an extra layer of security.

📧 Email Attachments

Secure sensitive attachments before sending via email. Share the passphrase through a separate secure channel.

🔐 Legal Documents

Protect attorney-client communications, legal contracts, intellectual property, and confidential case files.

Technical Details

🔐 Encryption Algorithm

AES-256-GCM (Advanced Encryption Standard with 256-bit key in Galois/Counter Mode)

  • Symmetric encryption standard approved by NSA for TOP SECRET information
  • Provides both confidentiality (encryption) and authenticity (tamper detection)
  • Would take billions of years to brute force with current technology
  • Resistant to quantum computing attacks (128-bit quantum security)

🔑 Key Derivation

PBKDF2 (Password-Based Key Derivation Function 2) with SHA-256

  • 100,000 iterations to slow down brute-force attacks
  • Random 128-bit salt unique to each file
  • Converts your passphrase into a strong 256-bit encryption key

🎲 Random Generation

Cryptographically Secure Random Number Generator (CSRNG)

  • Random 96-bit initialization vector (IV) for each encryption
  • Ensures identical files with the same password produce different encrypted outputs
  • Uses browser's native crypto.getRandomValues() for true randomness

⚙️ Implementation

Web Crypto API (Native Browser Implementation)

  • Hardware-accelerated encryption on modern CPUs
  • No external dependencies or third-party libraries
  • Audited and maintained by browser vendors
  • Works completely offline after initial page load

Security Best Practices

⚠️ Critical: Passphrase Management

  • Never lose your passphrase! There is no recovery mechanism. If you forget it, your file is permanently inaccessible.
  • Use a password manager (like Bitwarden, 1Password, or KeePass) to store passphrases securely
  • Never share passphrases through the same channel as the encrypted file

💪 Creating Strong Passphrases

  • Length matters: Use at least 12-16 characters for maximum security
  • Mix it up: Combine uppercase, lowercase, numbers, and special symbols
  • Avoid common words: Don't use dictionary words, names, or dates
  • Consider passphrases: "Correct-Horse-Battery-Staple" style phrases are both secure and memorable
  • Unique passwords: Use different passphrases for different files

🔄 File Handling

  • Keep backup copies of important files before encryption
  • Test decryption immediately after encrypting to verify the passphrase
  • Securely delete original files after encryption (use file shredding tools)
  • Store encrypted files and passphrases separately

🌐 Sharing Encrypted Files

  • Share encrypted files through any channel (email, cloud, USB)
  • Share passphrases through a separate secure channel (encrypted messaging, phone call, in person)
  • Consider splitting long passphrases and sending parts through different channels
  • Set expiration dates for shared access when possible

Frequently Asked Questions

Q: Is my data really safe? Do you store my files?

A: Absolutely safe. All encryption happens entirely in your browser using JavaScript. Your files never leave your device, and we never receive or store any data. This can be verified by checking your browser's network activity - no uploads occur.

Q: Can I use this offline?

A: Yes! After loading the page once, you can save it locally and use it completely offline. Just save the HTML, CSS, and JavaScript files to your computer.

Q: What's the maximum file size?

A: There's no hard limit imposed by our tool. The only limitation is your device's available memory. Modern devices can typically handle files up to several gigabytes.

Q: I forgot my passphrase. Can you help me recover my file?

A: Unfortunately, no. This is actually a feature, not a bug. Because we use client-side encryption and never receive your passphrase, there is no recovery mechanism. This ensures complete privacy - even we cannot access your files.

Q: Can encrypted files be cracked?

A: With a strong passphrase, AES-256 encryption is effectively unbreakable with current technology. A brute-force attack would take billions of years. However, weak passphrases can be guessed, so always use strong, unique passphrases.

Q: Which browsers are supported?

A: All modern browsers support the Web Crypto API: Chrome, Firefox, Safari, Edge, Opera, and Brave. Internet Explorer is not supported.

Q: Can I encrypt multiple files at once?

A: Currently, files must be encrypted individually. For multiple files, consider creating a ZIP archive first, then encrypting the archive.

Q: Are encrypted files compatible with other tools?

A: Files encrypted with this tool use a custom format (salt + IV + encrypted data) and can only be decrypted by this tool. This ensures compatibility and prevents corruption from incompatible decryption attempts.