VaultLock

🔒 Security Guarantee

All encryption & decryption happens exclusively in your browser — nothing ever leaves your device.
AES-256-GCM authenticated encryption with a cryptographically random 96-bit IV per file.
Key derived via PBKDF2-SHA-512 with 600 000 iterations and a cryptographically random 256-bit salt.
File is compressed before encryption — output size obscures original size and content type.
Filename, size, and MIME type are encrypted — no metadata readable without the password.
Output filename is user-controlled — no original name ever appears in the output file.
No Service Worker fetch handlers, no network requests, no analytics, no fonts, no CDN — ever.

01 — Select File(s)

Drop file(s) here or click to browse

Any file type · Any size · Multiple files supported

Download as

Separate files

Single bundle

02 — Set Password

Encryption Password

—

This password is the ONLY way to decrypt the file. There is no recovery option.

Confirm Password

03 — Output File Name

Output filename (leave blank to auto-generate)

.vaultlock.html

The output filename does not reveal the original file. If left blank, a random opaque name is used.

Preparing…

Info

How to decrypt Encrypted files produced by VaultLock are self-contained HTML files. Simply open the downloaded .vaultlock.html file in any browser and enter your password — no internet, no app, no this page needed.

Use this panel only if you prefer to decrypt here rather than opening the file directly.

01 — Select Encrypted File

Drop .vaultlock.html here or click

VaultLock encrypted files only

02 — Enter Password

Decryption Password

Preparing…