What encryption algorithm is used?

Authenticated AES-GCM with a 256-bit key, 12-byte random initialization vector (IV), and PBKDF2 key derivation with 100,000 SHA-256 hashing iterations.

Can you recover my file if I forget the password?

No. Because this is true zero-knowledge encryption, nobody — not even MGToolbox — can bypass AES-256-GCM without the correct passphrase.

Is there a limit on file size?

Standard documents, images, and videos up to hundreds of megabytes encrypt smoothly in browser memory. Performance depends on your device's RAM.

Client-Side File Encryptor & Decryptor

Security100% In-Browser

Encrypt and decrypt any file using military-grade AES-256-GCM and PBKDF2 (100,000 rounds) via the native Web Crypto API. Zero server uploads.

Military-Grade AES-256-GCM + PBKDF2 Web Crypto

Files are encrypted directly in your browser using hardware-accelerated Web Crypto API (100,000 PBKDF2 iterations). Zero bytes uploaded.

1. Select Any File to Encrypt

Drop any document, image, video, or archive

Supports all formats up to 500MB+

100% In-Browser • Files are processed 100% locally

2. Choose Strong Passphrase

Zero Data Collection

Files are processed 100% locally

Instant Client-Side Speed

Zero network upload delays

Free & Unlimited

No registration or credit card needed

Hardware-Accelerated AES-256-GCM File Encryption & Decryption

Why we built this: Cloud storage and email attachments are constantly scanned, subpoenaed, or exposed in data breaches. Encrypting files before uploading them to Google Drive, Dropbox, or sending them over messaging apps ensures true zero-knowledge privacy. This tool encrypts any file directly in your browser without transmitting a single byte.

How it works: 1) Drop any file — documents, photos, videos, or archives up to several gigabytes. 2) Set a strong passphrase. The Web Crypto API derives a 256-bit AES key using PBKDF2 with 100,000 iterations of SHA-256 and a random 16-byte cryptographic salt. 3) Click Encrypt to download your authenticated .mgenc file. To restore, upload the .mgenc file and enter your passphrase.

AES-256-GCM includes an integrated 128-bit authentication tag: if an encrypted file is corrupted or tampered with, or if the passphrase is incorrect by even one letter, decryption mathematically rejects the file to prevent silent corruption.

Frequently Asked Questions

Everything you need to know about using Client-Side File Encryptor & Decryptor safely and efficiently.

Never. The file encryption and decryption happen strictly inside your browser memory using hardware-accelerated Web Crypto primitives (crypto.subtle).

Recommended Next Steps

Related Online Utilities

DeveloperEphemeral

Zero-Knowledge Secret Note Generator

Create self-destructing encrypted notes. AES-256-GCM encryption key is stored in the URL hash fragment (#key=...) which is mathematically never sent to web servers.

Use Tool

DeveloperPrivacy

Client-Side PII & Data Scrubber

Sanitize logs, databases, and documents. Client-side regex & Luhn detection masks emails, phone numbers, credit cards, API keys, IP addresses, and SSNs with reversible token maps.

Use Tool

DeveloperTop Tool

Password Entropy & Strength Auditor

Calculate true Shannon entropy, estimate brute-force crack times across 4 threat levels (online rate-limit to 10 GH/s GPU clusters), and generate secure passwords.

Use Tool