Authenticated file encryption in the browser. The server receives neither the passphrase nor plaintext.
New files use BlindCrypt format v3. The public header, encrypted metadata, record order, record lengths, and every ciphertext record are authenticated.
Maximum plaintext size: 64 MiB. The limit controls browser memory exposure.
Enter a passphrase or generate one.
Store the passphrase before encryption. BlindCrypt has no recovery mechanism.
Format v3 verifies the complete container before download. Legacy v1 and v2 files remain readable with explicit limitations.
Malformed sizes, excessive KDF settings, inconsistent records, truncation, and trailing data are rejected before costly processing where possible.
Format v3 applies NFC normalization. Legacy formats use the passphrase exactly as entered.
Review the repository threat model and format specification before using BlindCrypt for high-value data.