FILE & IMAGE TOOLS / LOCAL TOOL
File Encryptor
Protect local files with password-derived AES-GCM encryption.
HOW IT WORKS
Local file encryption with authenticated ciphertext
The file is read into browser memory, encrypted with AES-256-GCM and a key derived by PBKDF2. The encrypted file carries a version marker, random salt and nonce.
Limits to keep in mind
Files are limited to 50 MiB to control memory use. This format is specific to SafeStack, and a weak password can be guessed offline if an attacker obtains the encrypted file.
A PRACTICAL WORKFLOW
Use the result carefully.
01Choose a local file, enter a long unique password and download the encrypted copy. Decryption accepts only this tool’s file format.
02Run the utility and inspect the complete output.
03Keep the password separately from the encrypted file and test recovery with a harmless sample before protecting important data.
COMMON QUESTION
Does this overwrite or securely erase the original?
No. The source file is untouched, and browser downloads do not securely erase other copies.