Skip to content

README.md

Latest commit

 

History

History
143 lines (88 loc) · 4.5 KB

README.md

File metadata and controls

143 lines (88 loc) · 4.5 KB

FileKrypt 🛡️

A zero-server, browser-native file encryption tool.

What is FileKrypt?

FileKrypt is a high-security, browser-based file encryption tool that transforms your local browser into a cryptographic vault. Built on a strict Zero-Server architecture, every cryptographic operation happens entirely on your device using the browser's native Web Crypto API — no installation, no backend, no data leaving your machine.

Features

🔐 Session-Locked Activity History

Activity history is encrypted with a session-bound key that is permanently destroyed when the tab is closed.

⚡ Password & Recovery Key

You can change your password or generate a recovery key at any time. Keep your recovery key stored safely — it is the only resort if you forget your password.

🛡️ Encryption System

Component Implementation
Encryption AES-256-GCM (Authenticated Encryption)
Key Derivation PBKDF2-SHA256 — 310,000 iterations
Entropy Source Web Crypto API

🚫 Zero Tracking

No cookies, no analytics, no sign-ups, no external CDN dependencies, and zero network requests of any kind.

How It Works

Encrypt

  1. Drop any file into FileKrypt.
  2. Enter a strong password. A recovery code is auto-generated as a backup.
  3. FileKrypt encrypts the file and generates an encrypted file and a recovery key.
  4. Use the customize button to save the recovery key along with the .enc file.
  5. Download your .enc file. Key material is immediately zeroed from memory.

Decrypt

  1. Drop the .enc file into FileKrypt.
  2. Enter your original password, or paste or upload the recovery code.
  3. FileKrypt decrypts and restores your original file.

Security Architecture

Why AES-256-GCM?

AES-256-GCM encrypts your file securely and ensures it remains safe and unchanged during decryption.

Why 310,000 PBKDF2 Iterations?

PBKDF2 makes your password significantly harder to crack by running it through 310,000 iterations of hashing before generating the encryption key.

Understanding FileKrypt Security

FileKrypt Protects Against Simple Explanation
No network activity Your files never leave your device.
No server-side breaches FileKrypt does not store files on any server.
Memory cleanup Sensitive keys are cleared from memory after use.
File modification detection Changed or corrupted encrypted files will fail to decrypt.
Password attack resistance Extra security makes password guessing harder.
FileKrypt Does Not Protect Against Simple Explanation
Infected devices Malware or keyloggers on your device can still steal data.
Lost passwords or recovery keys Encrypted files cannot be recovered without them.
Browser or system vulnerabilities Security issues in the browser or device may still affect protection.

Tech Stack

Layer Technology
Language HTML, CSS, JavaScript
Encryption Web Crypto API
Storage sessionStorage (session-bound history key)
Hosting GitHub Pages
Dependencies None

Browser Compatibility

FileKrypt works best on the latest versions of all modern browsers.

Browser Support
Chrome / Edge ✅ Supported
Firefox ✅ Supported
Safari ✅ Supported
Opera ✅ Supported
Internet Explorer / Legacy Browsers ❌ Not supported

Note: FileKrypt must be served over https:// or localhost for Web Crypto API access. Opening via file:// may be restricted in some browsers.

Quick Start

FileKrypt runs entirely in the browser — no installation, no build step, no dependencies. Access it directly at:

🔗 https://codilosopher.github.io/FileKrypt/

Or run it locally by cloning the GitHub repository:

# Clone the repository
git clone https://github.com/your-username/filekrypt.git

# Open directly in your browser
open filekrypt/index.html

Legal Disclaimer

FileKrypt is a free tool provided without any guarantees or warranties. Since all operations run directly on your device, you are solely responsible for keeping your passwords, recovery codes, and file backups safe. FileKrypt is not liable for any data loss, file corruption, or issues caused by problems on your device or browser. This project was built with the assistance of AI tools to improve encryption accuracy and overall security.

License

This project is licensed under the MIT License. See LICENSE for details.