ENCRYPT

// Zero-knowledge file encryption

Your files.
Unbreakable.

AES-256-GCM encryption that runs entirely in your browser. No uploads. No accounts. No logs. We can't read your files — mathematically impossible.

Scroll ↓
256
Bit AES Key Length
0
Bytes sent to servers
200K
PBKDF2 Iterations
File types supported

// process

How it works

01
Drop a File
Any format. Videos, archives, documents, images. Your file is read into browser memory only — never uploaded anywhere.
02
Set Password
Your password is run through PBKDF2 with 200,000 iterations and a cryptographically random 32-byte salt. Nobody can brute-force that.
03
AES-256-GCM
Authenticated encryption using the Web Crypto API. Your file is encrypted with a unique IV each time. The auth tag detects tampering.
04
Download & Share
Get a .cipherdrop file. Share it over email, cloud storage, USB — completely safe without the password. Decrypt from any device.
// Key derivation
PBKDF2(password,
salt: 32 random bytes,
iterations: 200,000,
hash: 'SHA-256'
) → 256-bit key

// Encryption
AES-GCM(key,
iv: 12 random bytes,
data: your file
) → ciphertext + authTag

// What we store
nothing ← literally null

// why trust us

Built on math,
not promises.

🔐
Zero-knowledge architecture
Encryption and decryption happen in your browser. We have no infrastructure that could receive your files even if we wanted to.
👁️
Open source crypto layer
The encryption code is public. Audit it yourself. We use the browser's native Web Crypto API — no third-party crypto libraries.
🚫
No tracking, no analytics
No Google Analytics. No Mixpanel. No cookies. No fingerprinting. We don't even know you were here.

// plans

Simple pricing.
No surprises.

// For everyone
Free
$0
forever · no card required
  • Files up to 500MB
  • Unlimited encryptions
  • AES-256-GCM encryption
  • All file formats
  • No account needed
  • Web app access
// For teams & devs
Teams
$20
per seat/month · min 3 seats
  • Everything in Pro
  • REST API access
  • Shared encrypted vault
  • Audit logs
  • SSO / SAML integration
  • Dedicated support
  • SLA guarantee

// questions

Got
questions?

Can you see my files? +
No — and this isn't a policy thing, it's a technical impossibility. All encryption runs in your browser using the Web Crypto API. Your file data never leaves your device. We have no server-side component that could receive it.
What happens if I forget my password? +
Your file is gone. We don't store passwords, hints, recovery keys, or any metadata. This is the core of zero-knowledge design. Use a password manager and back it up.
Is AES-256 actually unbreakable? +
With a strong password — effectively yes. AES-256 has never been broken. The bottleneck is always the password. We use PBKDF2 with 200,000 iterations to make brute-force attacks computationally infeasible even on dedicated hardware.
Can I encrypt video files? +
Yes. Any file format works — MP4, MKV, MOV, AVI, whatever. The free tier handles up to 500MB, Pro handles up to 10GB. For truly massive files (100GB+), the CLI tool is the best approach.
Does it work offline? +
Yes. Once the page is loaded, you can disconnect from the internet and it still works. The encryption is entirely client-side with no external calls during the process.
What's in the CLI tool? +
The CLI (Pro+) lets you encrypt/decrypt from the terminal, batch process entire directories, pipe into scripts, and automate workflows. It uses the same AES-256-GCM format so files are fully cross-compatible with the web app.

Start encrypting
right now.

No account. No card. No BS. Just drag, drop, encrypt.

Open CipherDrop → View on GitHub