Encrypt a File with a Password
Lock any file with a password; open it here or with the age command-line tool.
Your files stay on this device
Locking and unlocking happen in your browser; nothing is uploaded. There is no password reset: if you forget the password, nobody can open the file again.
Password-protect a file before you email it, put it in cloud storage or copy it to a USB stick. The file is encrypted in the open age format (ChaCha20-Poly1305, with the password stretched by scrypt), so it opens here again or with the age and rage command-line tools on any computer. Files of any size are streamed through your browser a piece at a time: they never leave your device, and it's free with no sign-up.
How to encrypt a file with a password
- Drop one or more files, or click to choose them. Files that are already age files are recognized and listed for unlocking.
- To lock, type a password twice, or click Generate and copy the strong password it makes. To unlock, type the password the file was locked with.
- Click Lock file (or Unlock file). Stretching the password takes a second or two on purpose, then the file streams through with its progress shown.
- Download each result: “name.age” when locking, the original name when unlocking.
Features
- Locks any file with a password in the standard age v1 format (scrypt and ChaCha20-Poly1305)
- Unlocks files made here or with age -p and rage -p, binary or armored (-a)
- Many files at once: age files are recognized and offered for unlocking
- Streams files 4 MB at a time, with the progress of each file
- Generate makes a strong random password (120 bits) to copy and keep
- Clear messages for a wrong password, a damaged or cut-off file, or a file locked with an age key
Is it private?
Yes. Files are locked and unlocked by WebAssembly inside your browser and never uploaded, and the password never leaves the page. There is no reset and no back door: without the password, nobody can open the file.
Frequently asked questions
How do I open an .age file?
Drop it here and type the password. You don't need this website for it: it is a standard age file, so age -d -o report.pdf report.pdf.age (or the same with rage) opens it after you type the password. This was checked with age 1.3.2 and rage 0.12.1, and files they lock with -p, binary or armored with -a, open here too.
What if I forget the password?
Then the file can't be opened. There is no reset and no back door: the password is the only way in, and it never leaves your browser. Keep it in a password manager.
Is there a file size limit?
No fixed limit. Files are read and encrypted 4 MB at a time, so the work needs about as much memory for a 5 GB file as for a 5 MB one. The browser holds the finished file (in memory or in temporary storage, depending on the browser) until you download it, so very large files need that much free room.
How secure is it?
The file is encrypted with ChaCha20-Poly1305 under a random 128-bit key, and that key is locked with your password through scrypt (work factor 2^18, like age), which makes every password guess slow and memory-hungry. The weak point is the password itself: use a long passphrase or click Generate.
Can it open files encrypted to an age key (age1…)?
No, only files locked with a password (age -p). For a file encrypted to a public key, use age -d -i with your key file.