Privacy · Processed locally

File Encryption

Encrypt files with a password using local AES-256-GCM, then decrypt your ToolDock file later. No account or file upload.

All tools
Local processingNo account needed
  1. Choose files
  2. Set options
  3. Process locally
  4. Review & download

A .tdenc file is your locked file. Keep it and your password: return to this page and choose Decrypt to restore the original.

1. Choose your file. 2. Enter and confirm a strong passphrase. 3. Encrypt, then download and verify your result.

Or drop a file here. Any file type · up to 50 MB. Empty files are supported.

Save this separately from the locked file. It cannot be recovered.

Forgotten passwords cannot be recovered. Use a unique, long passphrase and keep it somewhere safe. Keep your original until you have tested decryption.

Choose a file to begin.

How the encryption works

AES-256-GCM with a fresh random 16-byte salt, 12-byte nonce and authenticated versioned header. Password keys use PBKDF2-HMAC-SHA-256 with 600,000 iterations. The original filename is encrypted too. Processing is in a local worker; passwords are cleared from these fields when a job starts.

Requires HTTPS, Web Crypto and workers in a current browser. Files are processed in memory, not streamed; the limit is 50 MB and low-memory devices can still fail. This tool has not been independently security-audited. It cannot protect against a compromised device or a weak password.

Read the file format and security limits

Files stay in this browser’s memory. Originals are unchanged. Clear files or leave this page to release the studio’s copies.

How to use File Encryption

  1. Choose Encrypt a file, select your file and enter the same strong password twice. Save the password safely; ToolDock cannot recover a forgotten password.
  2. Encrypt, then download the .tdenc file. It is the locked container, not a file to open in the original app. Keep the container and password separately.
  3. Use Test decryption of this copy to check restoration. Later, return here, choose Decrypt a ToolDock file, select the .tdenc file and enter its password to download the restored original.

File names, contents and generated text are not sent to analytics. These utilities are not a content or privacy audit. Review your output before using it.