Vault — AES-256 Encrypt & Decrypt

Plaintext (your secret)

Select file to encrypt

↑

Drop a file here or click to browse

Any file type, any size

◆

Passphrase

Confirm Passphrase

Encrypted Output

Ciphertext (encrypted data)

Select .enc file to decrypt

↑

Drop an .enc file here or click to browse

Files with .enc extension

◆

Passphrase

Decrypted Output

Cryptographic Details

Cipher: AES-256-GCM

Key Derivation: PBKDF2-SHA-256

Iterations: 600,000

Salt: 32 bytes random

IV: 12 bytes random

Auth Tag: 128-bit (built into GCM)

⚠

This tool runs entirely in your browser. No data is sent anywhere. For maximum security, disconnect from the internet before encrypting sensitive data, and clear this page when done. The passphrase is your only key — if lost, the data is unrecoverable.