Personal Vault OFFLINE FILE VAULT

Encrypt personal files offline. This page provides the download only; it receives no files or passphrases.

01 / Download, then use offline

A single HTML file contains all the code, with no external resources, network requests or installation dependencies. Keep it with your encrypted files on a USB drive or SSD.

Download the offline HTML tool

After downloading, disconnect from the network and open the HTML file in current desktop Edge or Chrome. Local folder access is required. Each file can be up to 1 GiB. Encryption and decryption do not run on this website.

Choose a file, enter and confirm your passphrase, then choose an output folder.
The tool creates an .enc file with the original name encrypted inside. It does not delete the original file.
To recover a file, select the .enc file, enter the original passphrase and choose another folder for the plaintext.

02 / Keep the file and passphrase safe

There is no TOTP, server key share, claim count or time limit. The tool does not save your passphrase. If you forget it, the file cannot be recovered.

Keys use PBKDF2-HMAC-SHA-256 with 600,000 iterations. AES-256-GCM provides authenticated encryption in chunks, with a fresh random salt and nonce prefix each time. This format is not compatible with secure delivery or Time Seal packages.

Use a long random passphrase or several randomly chosen words. An attacker can test guesses offline; a weak passphrase offers little protection.

Verify that decryption works before deciding whether to delete the original. Ordinary deletion is not secure erasure: SSDs, trash folders, backups and synchronized folders may retain copies. Offline use cannot protect against a compromised computer or a tampered tool.

Problem, design and limits

Decryption depends on your file and passphrase, not a website account, server or particular computer.

Problem: how do you keep sensitive files without depending on an online service?

Accounts, websites and services can change or close. Cloud storage adds dependencies on availability and account recovery, as well as exposure to cloud breaches. A weak archive password does not prevent offline guessing.

The tool uses portable encrypted files and a separate passphrase. You can move and back them up without a device identifier, but you are responsible for keeping both.

Design: download one HTML file, encrypt offline and recover with the original passphrase

Download the self-contained HTML and run it offline in desktop Chrome or Edge with local folder access. Choose a file and confirm a passphrase to create an .enc encrypted file. To recover it, select the file, enter the original passphrase and save to another folder.

PBKDF2-HMAC-SHA-256 uses 600,000 iterations to increase guessing cost. AES-256-GCM encrypts and authenticates each chunk. Every encryption uses a fresh random salt and nonce prefix, and encrypts the original filename.

Each file can be up to 1 GiB. Keep the tool, encrypted files and passphrase safely. Verify recovery before handling the original plaintext; originals are not deleted automatically.

Limits: no recovery service or protection from a compromised device

A forgotten passphrase cannot be recovered. There is no server backup if an encrypted file is damaged or lost. Weak passphrases remain vulnerable to offline guessing; iteration cost does not replace a long random passphrase or randomly chosen words.

There is no TOTP, claim limit, time lock or revocation. The format is not compatible with secure delivery, Time Seal or A Promise to the Future. Offline does not mean trustworthy: a tampered tool, malicious extension or infected computer can still read plaintext.

Ordinary deletion is not secure erasure. Trash folders, SSDs, synchronized folders and backups may retain copies. The tool does not promise trace-free use or physical memory erasure.

About this tool

Download an offline tool for personal file encryption

What does this tool do?

Download a self-contained HTML tool, disconnect and encrypt or decrypt personal files in desktop Chrome/Edge. PBKDF2 and AES-256-GCM protect contents and filenames. This webpage only supplies the download; it accepts no files or passphrases.

How to use it

Download the standalone HTML file, disconnect and open it in desktop Chrome or Edge.
Choose a file, enter and confirm a passphrase, and save .enc ciphertext. The original is not deleted automatically.
Decrypt into another folder and verify recovery before handling the original plaintext. Keep the passphrase and ciphertext safe.

Data handling and limits

The offline tool supports files up to 1 GiB and requires local folder access. No TOTP, website account or server key share; no forgotten-passphrase recovery. Weak passphrases remain vulnerable to offline guessing. Verify recovery before handling originals; normal deletion is not secure erasure. A compromised device or tampered tool remains a risk.

Related tools