AES-256-GCM File Encryptor & Decryptor
Military-grade encryption · PBKDF2 key derivation · Runs in your browser · No file upload · 100% free
AES-256-GCMPBKDF2 + SHA-256100k IterationsZero Server UploadAny File Type
📁
Drag & drop your file here
or click to browse · Any file type · No size limit
🔐
AES-256-GCM
Authenticated encryption — same standard as banking security
🚫
Zero Upload
Files never leave your browser — complete privacy guaranteed
🔑
PBKDF2 Key Derivation
100,000 iterations protect weak passwords from brute force
How the Encryption Works
- 1Random salt generated — A unique 128-bit salt is created for every encryption operation using crypto.getRandomValues().
- 2Key derivation (PBKDF2) — Your password is processed through PBKDF2-SHA-256 with 100,000 iterations to produce a 256-bit encryption key.
- 3AES-256-GCM encryption — The file is encrypted with a unique 96-bit IV. GCM mode adds authentication — any tampering is detected on decryption.
- 4Output format — The output file contains: salt (16 bytes) + IV (12 bytes) + ciphertext. No password information is stored anywhere.
Frequently Asked Questions
Is the file encryptor completely free to use?
+
Do I need to sign up or create an account to encrypt files?
+
Is my file uploaded to a server when I encrypt it?
+
Does this file encryptor work on mobile phones and tablets?
+
Which browsers are compatible with this encryption tool?
+
What encryption algorithm is used — how secure is it?
+
How do I encrypt a file step by step?
+
How do I decrypt a file encrypted with this tool?
+
Why should I use RoughTools instead of other file encryption websites?
+
How do I report a bug or request a new feature?
+
What happens if I forget the password used to encrypt a file?
+
Can I encrypt any file type — PDFs, videos, ZIP archives?
+
Your input is processed locally in your browser and is never stored, transmitted, or shared with any server. See our Privacy Policy.