Client-side image encryption and decryption. No login. No signup. No cookies. No server upload. The browser does the whole little spy ballet locally.
Local-only Web Crypto
1. Choose image
Drop a PNG, JPG, WebP, GIF, or any image file. It never leaves this page.
Drop image hereor click to browse
No image selected
2. Add word string
This word string becomes your secret key. Lose it and the encrypted file becomes a beautiful brick.
Waiting for image and word string...
1. Choose encrypted file
Drop the encrypted file created by this page. The extension can be .finch, .enc, .vault, or anything else.
Drop encrypted file hereor click to browse
No encrypted file selected
2. Enter word string
Use the exact same word string used during encryption. Even one extra space changes the key.
Waiting for encrypted file and word string...
What happens under the hood: AES-GCM encrypts the image bytes in your browser. PBKDF2 turns your word string into a cryptographic key. The downloaded encrypted file contains a tiny JSON header, salt, IV, original filename/type, and encrypted bytes. The extension is just a disguise label, not the lock. Nothing is stored by this page.