Browser-side OpenPGP file encryption and decryption. Drop a file, paste a key, download the result. Heavy crypto runs in a Web Worker so the page stays responsive.
File Encrypt handles binary content of any type — documents, images, archives, executables. The encrypted output is a self-contained PGP file (.pgp extension) that any OpenPGP client can decrypt with the matching private key. Drop a file, paste the recipient's public key, and click Encrypt.
Encryption and decryption run inside a dedicated Web Worker so the main UI thread stays responsive even on large files and slower devices. Files are loaded into memory in the worker; for multi-gigabyte files, expect to need at least 2× the file size in available RAM.
For batch operations on many files at once, use Batch Encrypt instead — it produces a single zip of individually encrypted .pgp files. For text messages rather than files, use the regular Encrypt tool.
Frequently asked questions
Are there file size limits?
No hard limit, but you are bounded by available memory. Modern desktop browsers comfortably handle hundreds of megabytes; multi-GB files may run out of memory. For very large files, GnuPG on the command line is more efficient.
Does the file get uploaded anywhere?
No. The page never makes a network request during file encryption. Confirm by enabling air-gap mode before you start.
What does the encrypted file look like?
A binary OpenPGP packet stream. The default extension is .pgp. Any OpenPGP client (GnuPG, Kleopatra, ProtonMail Bridge, etc.) can decrypt it with the matching private key.
Why does the browser tab go quiet during encryption?
The crypto runs in a Web Worker, which keeps the UI responsive but does not pause other tabs. If your browser tab is throttled (e.g. backgrounded), encryption will still complete — just slower than if the tab is foregrounded.
Can I encrypt a file to multiple recipients?
Yes — paste multiple armored public keys separated by blank lines. The output is decryptable by any of them.