← Utilities

🔐 Encrypt Files

Password-protect files with AES-256-GCM. Encryption runs in your browser; files and passwords never leave your device.

Drop files to encrypt
How it works

Your password is stretched with PBKDF2-SHA256 (600,000 iterations, random 16-byte salt) into a 256-bit key. The file is encrypted with AES-256-GCM using a random 12-byte IV. The original file name is encrypted together with the contents, so it stays private too.

File layout (.enc):

  • TBXENC magic (6 bytes) · version 1 (1 byte) · iterations (4 bytes, big-endian) · salt (16 bytes) · IV (12 bytes)
  • AES-GCM ciphertext + 16-byte tag of: name length (2 bytes) · UTF-8 name · file bytes. The header is authenticated as additional data.

There is no way to recover a forgotten password.