Decrypt Your Files
Securely. Privately. In Your Browser.
Upload your .encrypted file, enter your password, and get your original file back. All processing happens in your browser - we never see your encrypted file or password.
From Encrypted to Original in Seconds
Your encrypted file stays in your browser's memory. We never upload it. We never see your password. The decryption happens entirely on your device using the same military-grade algorithms that encrypted it.
Upload Your .encrypted File
Drag & drop or click to browse. The file stays in your browser's memory - no server upload. Only .encrypted files created by encryptor.app are supported.
Enter Your Password
Must be the exact password used for encryption. We can't help if you forget it (that's the point). No password recovery because we never stored it. No backdoors. No master keys.
Your Browser Decrypts
The encrypted file is parsed to extract the salt, IVs, and encrypted chunks. Your password is transformed into the decryption key using the same PBKDF2 process (100,000 iterations). Each chunk is decrypted and verified for tampering using AES-256-GCM authentication tags.
Download Your Original File
Original filename automatically restored. File type preserved. Identical to the file you encrypted. If the password is wrong or the file has been tampered with, decryption fails immediately - by design.
Wrong Password: If you enter the wrong password, decryption will fail immediately with "Wrong password or corrupted file." There is no password recovery. No hints. No backdoors. Write it down securely.
File Tampering: If anyone modified the encrypted file (even one byte), the authentication tags will fail and decryption stops. This is intentional - GCM mode ensures you get the original file or nothing.
Secure Cleanup: After downloading your decrypted file, delete it from your Downloads folder if you don't need it anymore. Encryption protects files in transit, but once decrypted, they're just regular files again.
Why This Is Secure
Zero-Knowledge means exactly that:
- We don't see your encrypted file (never uploaded)
- We don't see your password (entered in your browser only)
- We don't see your metadata (filename, file type, timestamps)
- We don't log when you decrypt (no analytics, no tracking)
- We can't decrypt your file even if we wanted to (we never receive it)
This isn't a privacy promise. It's a technical reality. The architecture makes it impossible for us to access your files. Client-side encryption isn't just more private - it's the only way to guarantee privacy.