How It Works Under the Hood
Every encryption creates a fresh 16-byte random salt and 12-byte GCM IV, derives a 256-bit AES key via 600,000 iterations of PBKDF2-HMAC-SHA256, and seals both the original filename metadata and file payload inside an authenticated ciphertext container.
Step-by-Step Instructions
Choose Encrypt File → .enc (or Decrypt .enc File) and select any local document.
Type or generate a strong passphrase.
Click Encrypt File and download the tamper-evident .enc archive safely.
Key Features & Performance
- 600,000-Iteration PBKDF2-SHA256: Follows modern OWASP hardening recommendations against brute force
- Authenticated AES-256-GCM: Detects wrong passwords or single-bit tampering automatically
- Hidden Filename Metadata: Encrypts the original filename and MIME type inside the ciphertext
- Native C++ Speed: Powered directly by browser Web Crypto API
Local Browser Processing & Privacy
Traditional web converters upload your documents, snippets, or media files to remote servers. Client-Side AES-256 File Encryptor & Decryptor runs inside your browser tab:
Your input text and files are processed locally without uploading payloads to a processing server.
Microdeck does not log or store the files or inputs you paste into tool workspaces (normal static hosting/CDN requests still load page assets).
Working outputs stay in your browser tab and are released when you reset the tool or close the tab.
Frequently Asked Questions
What happens if I forget my encryption password?
Because Microdeck never logs passwords or stores keys on any server, forgotten passwords cannot be recovered. Store your passphrase in a password manager.
Does the .enc file expose the original filename?
Only if you keep the original filename on disk — inside the encrypted container, the embedded filename and MIME type are encrypted alongside file bytes.
Explore Related Micro-Tools
Secure Offline Password & Hash Generator
Generate cryptographically secure passwords & WebCrypto hashes with zero server logs
CSV & Log PII Data Anonymizer
Mask, hash, or redact Emails, Phones, IPs, Cards & API tokens before sharing with AI
SSL Certificate & CSR Decoder (PEM / DER)
Inspect X.509 .pem/.crt chains, SANs, expiry countdowns, CSRs & convert PEM ↔ DER