Browser 106

max 50MB

Inspector security/pgp-encrypt-file

PGP Bestand Versleutelen

Overview

Encrypt any file — a document, an archive, an image, a config file — to one or more OpenPGP public keys, entirely in your browser. The file is encrypted once with a session key and that session key is wrapped separately for every recipient you add, so each of them opens the same output with their own private key and nobody has to share a password. Turn on signing and your own key is used at the same time, which is the difference between a file only they can read and a file only they can read that is also provably yours. Everything runs on openpgp.js on the device: the file, the recipients' keys and your passphrase are never uploaded, and the tool makes no network requests. The result is standard OpenPGP that gpg --decrypt opens on the other end. The file is held in memory while it is encrypted, so the practical size limit is your device rather than a server quota — comfortable for the documents and archives people actually send, not the right tool for a multi-gigabyte backup.

Encrypted email attachmentsEncrypt a contract or a report to the recipient's public key before attaching it, so the file is unreadable to every mail server it passes through.
Before it goes to cloud storageEncrypt sensitive files to your own key before uploading them to Drive, Dropbox or an S3 bucket, so the provider is storing bytes it cannot read.
Delivering to a clientAgencies and freelancers encrypt deliverables to the client's public key, and sign at the same time so the client can confirm the files came from you unmodified.
Sharing one file with a teamEncrypt to every team member's key at once so each of them decrypts with their own, instead of circulating a password that then has to be circulated again when someone leaves.
A one-off encryption without GnuPGEncrypt a single file on a machine where you cannot install desktop software, using a public key pasted straight in and nothing kept on the device afterwards.

Set

Beveiligingstools 26

Neighbours

01 AES Bestand & Tekst Encryptor 02 Base64 Decoderen 03 Base64 Coderen 04 CSR Generator 05 DER naar PEM Converter 06 Hash Generator

Specification

Command: security.pgp_encrypt_file
Set: Security
Input: text
Output: MIXED
Max. bestand: 50MB
Batch: single file

Runtime

Engine: WebCrypto · OpenPGP.js
Threads: single
Isolated: —
WebGPU: —
Memory: —

Transport 0 B

The file is opened, worked on and written back inside this tab. No upload step exists in this tool — there is nowhere for the bytes to go.

Keys

Zoeken: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

How it works

Drop the file in

Any file type — a document, an archive, an image, a database dump. It is read in your browser and never uploaded. If you would rather type the content than drop a file, the text box below the drop zone does the same job.

Pick the recipients

Choose keys from this browser's keyring or paste a public key straight in, and add as many recipients as you need. The file is encrypted once and the session key is wrapped separately for each of them. Turn on signing to prove the file came from you as well as hiding what is in it.

Download the result

You get one encrypted file that only the recipients you named can open, and that GnuPG decrypts on the other end with gpg --decrypt. Nothing is written until the operation has finished.

Frequently asked

What file types can I encrypt?

Any of them. Encryption works on the bytes, so a PDF, a zip, a video and a .env file are all the same problem. The file name is carried inside the encrypted message so the recipient knows what they decrypted.

How large a file can I encrypt?

The file is read into memory to be encrypted, so the ceiling is what your browser and device can hold rather than a server quota. Tens of megabytes is comfortable on a desktop; a phone will give up sooner. For a multi-gigabyte archive, desktop GnuPG is the better tool.

Can I encrypt one file for several people?

Yes. Add each recipient's public key and the file is encrypted once, with the session key wrapped for each of them separately. Every recipient opens the same file with their own private key, and none of them needs a shared password.

Does encrypting prove the file came from me?

No. Anyone holding the recipient's public key could have produced an encrypted file addressed to them. If it matters that the file is yours and unmodified, sign it as well — that is a separate switch on this page, and it uses your private key.

How is this different from encrypting a message?

Only in what the page leads with. This route puts the drop zone first and hands back a file; the message route puts the text box first and hands back an armored block you can paste. Both accept either kind of input and both produce standard OpenPGP output.

Keys

Zoeken: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

Gerelateerd · Beveiligingstools