What encryption does it use?

AES-256-GCM, with the key derived from your password by PBKDF2 (250,000 SHA-256 iterations) and a fresh random salt and IV for each file.

What happens if I forget the password?

The file cannot be recovered. The password is never stored or sent anywhere, so there is no reset. Save it somewhere safe.

Can I encrypt any file type, and how do I open it later?

Yes, any file. You get a .enc copy; drop it back in Decrypt mode with the password to get the original file and its name back. Nothing is uploaded.

Yes. Every tool is free to use, with no account and no credit card. The work runs on your device rather than on our servers, which is what keeps it free to run.

Are my files uploaded?

No. Your files are opened and processed inside your browser and are not sent to LibraTool. Some tools first download a processing engine or AI model to your browser; that download contains no data of yours.

Does it work on mobile?

Yes. It runs in current mobile browsers on iOS and Android, with nothing to install. Very large files can be slow or run out of memory on a phone, so use a computer for those.

🔐

Free File Encryption (AES-256-GCM)

Encrypt any file with a password using AES-256-GCM and PBKDF2 (250,000 iterations). The .enc output opens only with the right password, and only this tool can decrypt it. Fully client-side — your file never leaves your device.

File size depends on your deviceFiles stay privateNo login requiredFree foreverAES-256-GCMPBKDF2 250k iterations

Works offline once loaded

Online encryption sites receive your file — here it's encrypted on your device, and the password never leaves it.

Drop a file here, or click to browse

Any file · processed on your device

or press Ctrl+V to paste from your clipboard

Browse files

Your files never leave your device. All processing happens locally in your browser.

Drop any file and choose a password — you'll get a .enc copy only that password can unlock.

Password

Save this password somewhere safe. We never see it, so a lost password cannot be recovered and the file stays locked for good.

Confirm password

Strong, standard encryption. AES-256-GCM with the key derived from your password via PBKDF2 (250 000 iterations of SHA-256). A fresh random salt and IV are stored in the file header; changing even one byte makes decryption fail the authentication check.

File format (for a backup decrypter)

"LIBE2" + 16-byte salt + 12-byte IV + AES-256-GCM ciphertext. The key is PBKDF2-HMAC-SHA256, 250 000 iterations, from your NFKC-normalised UTF-8 password. The first 33 header bytes are authenticated data. The decrypted content is a 2-byte filename length, the filename, then the file. Files made before this update ("LIBE1") still open.

Your password is never stored or sent anywhere — everything runs in your browser. If you lose it, the file cannot be recovered. Large files (> ~200 MB) take a few seconds and use significant memory.

How It Works

Encrypt any file with a password so only someone who knows the password (and uses this tool) can open it. Encryption and decryption both run locally with the browser's Web Crypto API — no servers, no key escrow.

1
You drop a file and pick a password
The file is read into memory in your browser. Your password derives a 256-bit AES key via PBKDF2 — 250 000 iterations of SHA-256 with a fresh random salt.
2
The file is encrypted with AES-256-GCM
A fresh random IV is generated. AES-256 in Galois/Counter Mode produces a 16-byte authentication tag, so any tampering with the encrypted file makes decryption fail loudly.
3
Download the .enc file (and decrypt it later)
The output begins with a "LIBE1" header carrying the salt, IV, and original filename, followed by the ciphertext. Drop it back here in Decrypt mode with the password to recover the original.

Your file never leaves your device. Lose the password and the file is gone — there is no recovery mechanism, by design.

Related Tools

🔒

Password Protect PDF

Add a password to a PDF with AES-256 encryption, and optionally turn off printing, copying or editing. Runs in your browser; nothing is uploaded.

Try itFiles stay local

🔐

Text Encryption

Encrypt and decrypt text with a password using strong AES-256-GCM. The password never leaves your browser. Share secrets safely.

Try it

🔓

Unlock PDF

Remove the password from a PDF you can open, or lift its print, copy and edit restrictions. Several files at once. Runs in your browser; nothing is uploaded.