How do I share the password securely?

Use a different channel than the file. Email the file, share the password via Signal or phone call.

Is AES-256-GCM secure?

Yes. It provides both confidentiality and integrity. It is the standard for authenticated encryption.

What if I forget the password?

The file is permanently unreadable. There is no backdoor or recovery mechanism. This is by design.

Can the recipient decrypt without this tool?

They need a tool supporting AES-256-GCM with PBKDF2. OpenSSL, 7-Zip, and this site's decryptor work.

File Encryptor

Select a file you want to encrypt by clicking the upload area or dragging a file onto it. Enter a strong password that will be used to derive the AES-256-GCM encryption key. Click "Encrypt" to encrypt the file in your browser using Web Crypto API. Download the encrypted file to share securely — the recipient needs the password to decrypt it. Uses Web Crypto API for AES-256-GCM encryption with PBKDF2 key derivation. Files are encrypted in-browser before download. The password never leaves your device.