In-Browser File Encryptor
Encrypt and decrypt files or text in your browser with AES-256-GCM and a PBKDF2 passphrase. Strength meter, round-trip verification, zero upload.
Loading tool...
What is In-Browser File Encryptor?
The In-Browser File Encryptor password-protects files and text with real AES-256-GCM encryption. Everything happens locally in your browser via the Web Crypto API - nothing is ever uploaded - and every encryption is verified by an automatic decrypt round trip.
Key Benefits
- True AES-256-GCM authenticated encryption, not a toy cipher
- Zero upload: secrets never leave your device
- Automatic round-trip verification catches any corruption instantly
- Passphrase strength meter guides you to stronger keys
- Works on any file type and on quick text snippets
Common Use Cases
- β’Encrypt tax documents, contracts, or IDs before storing them in cloud drives
- β’Send sensitive files through untrusted channels with a separate passphrase message
- β’Encrypt backups of password manager exports
- β’Protect notes and secrets in text form with a copy-paste payload
- β’Decrypt .wte packages from teammates without installing tools
How to Encrypt a File Online
- Pick input and operation: Choose Text or File as the source, then select Encrypt (or Decrypt to reverse it).
- Set a strong passphrase: Type your passphrase twice and watch the strength meter - longer passphrases with mixed characters are far harder to crack.
- Run the encryption: Click Encrypt. Text mode shows a base64 payload to copy; file mode downloads a .wte package immediately.
- Keep the passphrase safe: Each encryption is verified by an automatic decrypt round trip. Store the passphrase somewhere safe - it cannot be recovered.
Key Features
- AES-256-GCM authenticated encryption powered by native Web Crypto
- PBKDF2-SHA256 key derivation with 250,000 iterations and a random salt
- Automatic decrypt round-trip verification after every encryption
- Live passphrase strength meter from length and character variety
- Handles both text snippets and multi-megabyte files
- Zero upload - all cryptography runs locally in your browser
Frequently Asked Questions
Are my files uploaded to a server?
No. Encryption and decryption run entirely in your browser using the Web Crypto API. Your files, text, and passphrase never leave your device.
What algorithm does the encryptor use?
AES-256-GCM (authenticated encryption) with a key derived from your passphrase via PBKDF2-SHA256 using 250,000 iterations and a random 16-byte salt per file.
What is the .wte file format?
It is a simple package: a 4-byte WTE1 magic header, the random salt, the 12-byte nonce, and the AES-GCM ciphertext. Anyone with the tool and your passphrase can decrypt it.
Can I recover a file if I forget the passphrase?
No. There is no backdoor or key recovery. Keep your passphrase safe - without it the encrypted data is mathematically unrecoverable.