Encrypt a file
Tip: Large files use more memory. Prefer smaller files for browser-only workflows.
KDF
PBKDF2 (SHA-256)
Iterations
600000
Cipher
AES-256-GCM
This starter stays WebCrypto-native for GitHub Pages. For stronger GPU-resistant derivation, replace PBKDF2 with Argon2id via WASM.
Passphrase strength
-
If you lose the passphrase, the file cannot be recovered.
Decrypt a file
BlindCrypt encrypted files contain a small header plus ciphertext.
Decryption will fail if the passphrase is wrong or the file was modified.
About
- Encryption and decryption happen locally in your browser using WebCrypto.
- Your passphrase and plaintext are not sent to any server.
- Passphrase generator uses the 2048 word BIP39 English list.
- Output format is versioned so you can extend it later.
Security note: if the device is compromised, a web app cannot protect the data. Use trusted endpoints.