Tools

Saf

Encrypt and decrypt whole files locally. Files never leave your device.

Local-only

Saf runs entirely in your browser using WebCrypto. No uploads, no network calls, and the encrypted file stays on your device.

Drop a file or click to select Encrypted output will download as .saf

Passphrase (required)

Chunked AES-256-GCM encryption, 1 MB chunks. Each chunk uses a unique nonce.

Choose a file to begin.

SAF file format

SAF files start with the magic bytes SAF1 and a JSON header describing the original filename, size, chunk size, salt, and KDF parameters. Each encrypted chunk is stored with its ciphertext length so the file can be streamed safely.

Security model (30 seconds)

Files are encrypted locally with AES-256-GCM in 1 MB chunks. The passphrase is stretched with PBKDF2 and never leaves your device. Decryption requires the original passphrase and the .saf file header. No server-side secrets and no user tracking are used.