Encrypt files and folders

Protect sensitive data with AES-256-GCM encryption — single files, batches, or whole folders.

The Encryptor uses AES-256-GCM with Argon2id key derivation. Your password never leaves the device, and the .enc file format is fully documented so you can decrypt independently in an emergency.

There is no password recovery. If you forget the password, the data cannot be decrypted. Keep a backup of your password.

Encrypt a single file

  1. 1Open the Encryptor module, stay on the Encrypt tab.
  2. 2Select a file and enter a strong password.
  3. 3Optionally enable Secure Erase to overwrite the original after encrypting.
  4. 4Click Encrypt — a .enc file is created next to the original.

Encrypt a whole folder

The Folder tab zips the entire folder and encrypts it into a single {name}.zip.enc file alongside it. Large folders show packing progress and can be cancelled.

Decrypt

  1. 1Open the Decrypt tab and select the .enc (or .zip.enc) file.
  2. 2Choose an output directory and enter the password.
  3. 3Click Decrypt. For a folder archive, unzip the resulting .zip.

Batch Encrypt / Batch Decrypt handle many files at once with progress and cancellation. Each file is encrypted individually as its own .enc.