File encryption and decryption
Encrypt local files with a reviewed authenticated format and restore them.
Sida loo isticmaalo File encryption and decryption
File encryption and decryption locks a single file with a passphrase using AES-256-GCM, with the key derived through PBKDF2-SHA256 at 600,000 iterations, and saves it with a .thenc extension. Choose decrypt and enter the same passphrase to restore the original. Passphrases must be 12 to 1000 characters and cannot be recovered. Independent cryptographic review remains pending.
- Choose a source file. If the tool accepts multiple files, arrange them in the order you want.
- Set action, passphrase (minimum 12 characters).
- Run file encryption and decryption, review the output, then use the available copy or download controls.
Waxa qalabkani taageero
Uses local AES-256-GCM with PBKDF2-SHA256 at 600,000 iterations and a ToolCabana v1 binary format. The passphrase is not stored or recoverable. Independent cryptographic review remains pending.
- Action
- encrypt · decrypt
- Passphrase (minimum 12 characters)
- Set this value for your task.
Xadka iyo habaynta
Up to 200 files, 20 MB each and 100 MB combined. PDFs are limited to 500 pages, contact sheets to 100 pages, and bookmark trees to 1,000 entries and 20 nesting levels. Individual operations apply smaller output limits.
Su’aalaha badanaa la isweydiiyo
What happens if I forget the encryption passphrase?
The file cannot be decrypted. The passphrase is not stored anywhere and there is no recovery option, so keep it in a password manager. A wrong passphrase produces the error Decryption failed: wrong passphrase or altered file.
Can the tool tell if an encrypted file was modified?
Yes. AES-GCM authenticates the data, and the file header is bound to it as additional data, so any change makes decryption fail with the same error as a wrong passphrase. The tool cannot tell which of the two caused the failure.
Can other programs open .thenc encrypted files?
The output uses a custom binary layout: an 8-byte header, a 16-byte salt, a 12-byte IV and the ciphertext. Standard archive or encryption apps will not recognize it, so keep access to a compatible copy of this tool for decryption.
Where is my input processed?
This operation processes its source in your browser. Copy and download are explicit actions; source input is not saved in an account or history.
What are the input limits?
Up to 200 files, 20 MB each and 100 MB combined. PDFs are limited to 500 pages, contact sheets to 100 pages, and bookmark trees to 1,000 entries and 20 nesting levels. Individual operations apply smaller output limits.