Zero-Knowledge File Encryptor & Decryptor
Encrypt and decrypt PDFs, tax documents, archives, and photos 100% locally in your browser RAM before uploading to Google Drive, Dropbox, or email.
Drop files here to encrypt, or click to browse
Supports PDFs, tax documents, spreadsheets, photos, ZIP archives, and multi-file batch processing. Files never leave your computer.
Encryption Key & Parameters
How Client-Side AES-GCM-256 File Encryption Works
Standard cloud storage providers (Google Drive, Dropbox, OneDrive) hold the encryption keys to your uploaded documents, meaning a compromised cloud account or third-party breach can expose your tax returns, legal contracts, or identity scans.
The KitWharf Zero-Knowledge File Encryptor seals your files before they ever leave your laptop or phone. Using your browser's hardware-accelerated window.crypto.subtle engine, your passphrase (and optional 256-bit .kwkey keyfile) is stretched through 600,000 rounds of PBKDF2-HMAC-SHA256 with a unique 128-bit cryptographic salt. The resulting 256-bit key encrypts your file using AES-GCM-256 with a fresh 96-bit initialization vector (IV) and a 128-bit authentication tag.
Frequently Asked Questions
In-Depth Guides & Tutorials
Formulas, industry standards, and best practices for Zero-Knowledge File Encryptor & Decryptor (AES-256-GCM).
How to Encrypt Files Before Uploading to Google Drive, Dropbox & Email (AES-256-GCM Guide)
Learn how to password-protect and encrypt sensitive PDFs, tax returns, contracts, and ZIP archives with AES-256-GCM and PBKDF2 in your browser before uploading to Google Drive, OneDrive, Dropbox, or email.
Zero-Knowledge Offline Password Vault: How In-Browser AES-GCM-256 Protects Your Credentials Without the Cloud
A complete guide to zero-knowledge offline password management. Learn how in-browser AES-GCM-256 and PBKDF2 (600,000 rounds) safeguard credentials in memory, where browsers store local storage on disk, and why self-custody beats cloud vaults.
What Actually Makes a Password Strong? Entropy, Length, and Common Myths
Look past outdated password rules. Learn why length trumps complex symbols, how brute-force attacks crack passwords, what password entropy means, and why client-side crypto generation matters.
Complementary Tools
Other fast, free, and zero-upload utilities built for your workflow.
Zero-Knowledge Password Vault
Store passwords, payment cards, notes, and identities encrypted in your browser RAM with AES-GCM-256 and PBKDF2. Zero cloud storage or tracking.
SHA Hash Generator & UUID Creator
Generate SHA-1/256/384/512 digests from any text and mint bulk UUID v4 identifiers using your browser's Web Crypto API.
Password Generator
Generate strong, secure passwords with customizable length and character options (uppercase, lowercase, numbers, symbols).
JWT Encoder, Decoder & Debugger
Decode, verify, inspect, and generate JSON Web Tokens (JWT) in real time. Validate expiration timestamps, inspect payload claims, and test HMAC signatures locally.