ToolsONE FILE, SEALED
Encrypt a file.
Open it anywhere.
Protect a single file with a passphrase or public keys.
Standard age format, encrypted on this device.
AGE · VERSION 1
Encrypt a file.
Create an age key pair. Share the public key with people who send you files. Keep the secret key private: it decrypts everything sent to that public key.
This browser does not support X25519 keys. Passphrases still work; update your browser to use public keys.
The secret key is not stored anywhere and disappears when you leave this page. Save it somewhere safe, such as a password manager. Without it, files encrypted to this key cannot be recovered.
What is age?
age is a simple, modern file encryption format with a published specification and implementations for many systems. Files made here open with the age and rage command-line tools, and vice versa. This tool implements version 1 of the format without third-party age libraries.
Passphrase or public keys?
A passphrase is easiest when you can share it safely, for example in person. Public keys avoid sharing a secret: anyone can encrypt to your public key, and only your secret key decrypts. Generate a key pair in the Keys tab, or use one made with age-keygen.
How strong is the passphrase protection?
Passphrases are stretched with scrypt using age’s default work factor, so each guess is deliberately slow. A long, random passphrase is still the most important protection. Files using work factors above 20 need more memory than a browser tab can use; decrypt them with the age command-line tool.
Are file names and sizes protected?
No. age encrypts the contents only. The encrypted file is named after the original, with .age added, and its size is close to the original size. Rename the file before sharing if its name is sensitive.
Can I encrypt large files?
Yes. With a Save File dialog (desktop Chrome and Edge), files are streamed to disk in small authenticated chunks, so their size is not limited by memory. Other browsers can encrypt and decrypt files up to 128 MiB. If decryption fails, nothing is saved.
Which keys are supported?
age X25519 public keys (age1…) and secret keys (AGE-SECRET-KEY-1…). SSH keys, hardware plugins such as YubiKeys, post-quantum keys and passphrase-protected identity files are not supported.