Encrypt files locally
Lock any file or folder with a password. Nothing is ever uploaded.
VAULT needs a secure connection
Browsers only provide the encryption tools VAULT uses on HTTPS pages or on localhost. This page was opened over plain HTTP, so it can't encrypt or decrypt anything.
Open it over HTTPS instead. If you host VAULT yourself, the HTTPS setup guide takes about five minutes.
Drop files or a folder hereChoose what to protect
DropPick a .vault file to decrypt it.
Show files
Starting…
Done
How VAULT protects your files
- Nothing leaves this tab. There are no uploads, no analytics and no third-party code. You can check the source on GitHub.
- Slow to guess. Your password goes through Argon2id with 64 MiB of memory and 3 passes, which makes every guess expensive, even on GPUs.
- Tamper-evident. Files are encrypted with AES-256-GCM in 1 MiB pieces. Each piece is authenticated together with its position and the file header, so any change, reordering or truncation is detected.
- Private metadata. The original file name and size are encrypted too. Several files or a folder are packed into one ZIP before encryption.