AES File Encryptor
Protect a file with a password before you share it or store it in the cloud.
Drop the file to encrypt
any type — it never leaves your device
No password recovery. If you forget the password, the file is lost — nobody, including us, can decrypt it.
● 🔒 Your data is processed locally in your browser with the Web Crypto API and is never uploaded to our servers.
How it works
Your password is turned into a 256-bit key with PBKDF2 (HMAC-SHA-256, 600,000 iterations, random 16-byte salt), and the file is encrypted with AES-256-GCM using a random 12-byte IV. GCM authenticates the data, so any modification is detected when decrypting. The original file name is stored inside the encrypted data, so it comes back on decryption.
The result is a .tbenc file that only the AES File Decryptor can open, with the right password. The file size isn't hidden.
FAQ
How big can the file be?
Up to a few hundred megabytes on most computers — the whole file has to fit in memory.
Is AES-256 secure?
Yes. In practice the weak point is the password: use a long passphrase of four or more random words.