PocketPlay
中文

File Encryption

Encrypt any file with a password using AES-256-GCM, and decrypt .enc files back to the original name — all inside your browser.

🔒 Runs in your browser — files never leave your deviceFree · No sign-up
Drop files here to encrypt Any file type, any number of files. Nothing is uploaded.

    The .enc file format

    offset  size  field
------  ----  ---------------------------------------------
     0     6  magic  "PPFENC" (ASCII)
     6     1  version 0x01
     7    16  salt   (random, for PBKDF2-SHA-256)
    23    12  iv     (random, for AES-256-GCM)
    35     *  ciphertext + 16-byte GCM tag

key        = PBKDF2-SHA-256(password, salt, 200000, 32 bytes)
plaintext  = uint16LE(nameLength) | filename (UTF-8) | file bytes

    Everything you need to decrypt the file elsewhere is in the header. Any language with an AES-GCM and PBKDF2 library — Python's cryptography, Node's crypto, Go, Rust — can read it in about fifteen lines.

    How to encrypt a file

    1. Stay on the Encrypt tab and drop one or more files onto the box.
    2. Type a password. Use a long one — it is the only thing protecting the file.
    3. Press Encrypt files and download the .enc result. To get the original back, switch to Decrypt, drop the .enc file in and enter the same password — the original filename comes back with it.

    FAQ

    Does the file get uploaded?

    No. The file is read from your disk into memory, encrypted with the browser's Web Crypto API and handed straight back to you as a download. There is no server involved, so the tool also works offline.

    How strong is the encryption?

    AES-256 in GCM mode with a 256-bit key derived from your password by PBKDF2-SHA-256 with 200,000 iterations and a fresh 16-byte random salt. GCM also authenticates the data, so a corrupted or tampered file fails to decrypt instead of producing garbage.

    Is there a size limit?

    The whole file must fit in the browser's memory, so the tool refuses files over 500 MB and warns above 100 MB. For anything bigger, a desktop tool such as age, 7-Zip or VeraCrypt is a better fit.

    Hash GeneratorHOT Generate MD5, SHA-1, SHA-256, SHA-512, SHA-3, RIPEMD-160 and CRC32 hashes of text or files, with HMAC support. Password GeneratorHOT Generate strong random passwords, pronounceable passwords and Diceware passphrases, with an entropy and crack-time estimate. Text Encryption Encrypt and decrypt text with AES-256-GCM and a password, entirely in your browser — plus classic Caesar, Vigenère and Atbash ciphers. RSA Key Generator Generate RSA, ECDSA or Ed25519 key pairs in your browser, export them as PEM or JWK, and try encryption and signing with them. Bcrypt Hash Generate and verify bcrypt password hashes in your browser, with Argon2id and PBKDF2 as alternatives. ZIP Manager Create ZIP archives from files or a whole folder, and open an existing ZIP to browse, preview, extract, add or delete files — all offline. File Checksum Verifier Check a downloaded file against its published MD5, SHA-1 or SHA-256 checksum, and hash many files at once with a CSV export. TOTP Authenticator Turn a two-factor secret or otpauth QR code into live 6-digit TOTP codes, and create new secrets with their QR — offline in your browser.

    All tools →