PGP Encrypt File

Overview

Encrypt any file to one or more OpenPGP public keys. Each recipient opens the same file with their own private key, so nobody shares a password, and you can sign it to prove it came from you. It runs on openpgp.js in your browser with no network requests, so your file, keys and passphrase stay on your computer. The output is standard OpenPGP, so gpg --decrypt opens it. Files are held in memory, so this suits documents and archives, not multi-gigabyte backups.

Email attachmentsEncrypt a contract or report to the recipient's key before you attach it, so no mail server along the way can read it.
Before cloud storageEncrypt files to your own key before you put them on Drive, Dropbox or S3, so the provider can't read them.
Delivering to a clientEncrypt and sign deliverables so the client can open them and confirm they came from you unchanged.
Sharing with a teamEncrypt to every team member's key at once, so there's no shared password to change when someone leaves.
No GnuPG neededEncrypt a single file on a computer where you can't install software, with a pasted key and nothing left behind.

Set

Security Tools 26

Neighbours

01 AES File & Text Encryptor 02 Base64 Decode 03 Base64 Encode 04 CSR Generator 05 DER to PEM Converter 06 Hash Generator

Specification

Command: security.pgp_encrypt_file
Set: Security
Input: text
Output: MIXED
Max file: 50MB
Batch: single file

Runtime

Engine: WebCrypto · OpenPGP.js
Threads: single
Isolated: —
WebGPU: —
Memory: —

Transport 0 B

Your file is opened, worked on and saved inside this tab. This tool has no upload step, so your file has nowhere else to go.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

How it works

Drop in the file

Any file type works, and it never leaves your browser. You can also type text in the box below instead.

Pick the recipients

Choose keys from this browser's keyring or paste a public key, for as many people as you need. Turn on signing to show it came from you.

Download

You get one encrypted file that only your recipients can open, for example with gpg --decrypt.

Frequently asked

What file types can I encrypt?

Any type. Encryption works on the bytes, so a PDF, a zip, a video or a .env file are all the same. The file name travels inside the encrypted message.

How large a file can I encrypt?

The file is held in memory while it's encrypted, so the limit is your device, not a server quota. Tens of megabytes is fine on a desktop, a phone gives up sooner. For multi-gigabyte archives, use desktop GnuPG.

Can I encrypt one file for several people?

Yes. Add each person's public key. The file is encrypted once, and each of them opens it with their own private key, so nobody needs a shared password.

Does encrypting prove the file came from me?

No. Anyone with the recipient's public key can encrypt a file for them. To prove the file is yours and unchanged, turn on signing as well. It uses your private key.

How is this different from encrypting a message?

Only in what comes first. This page starts with a file drop and gives you a file. The message page starts with a text box and gives you an armored block to paste. Both take either input and both produce standard OpenPGP.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/