Wivrix

Security

Encrypt & Decrypt Text and Files

Encrypt or decrypt text and files in your browser with AES-GCM, ChaCha20-Poly1305 or XChaCha20-Poly1305, and Argon2id, scrypt or PBKDF2. Nothing is uploaded.

Read the step-by-step guide →

Protect text or small files with AES or ChaCha20 in the browser using a password you choose. Free, no signup, runs in your browser.

Simple Expert Three steps: choose, set a passphrase, save. Strong defaults (AES-256-GCM, PBKDF2 600,000).
Encrypt Decrypt

1Choose files

Drop files here, or click to browse
Any format — images, video, PDF, archives, documents. Several at once is fine.

2Passphrase & options

No keyfile

Any file, such as a photo or a random file on a USB stick. Decrypting then needs the passphrase and the exact same file — lose it and the data is gone.

Advanced options method, key size, key derivation, output format
AES-GCM ChaCha20-Poly1305 XChaCha20-Poly1305

Authenticated: tampering with the ciphertext is detected on decrypt.

AES-CBC AES-CTR

Older modes with no built-in tamper detection. Pick one only to exchange files with software that cannot read the methods above; turn on encrypt-then-MAC below to authenticate them.

128-bit 192-bit 256-bit
Passphrase Raw key Public key

Raw-key and public-key modes are usually only for scripts or for sending messages to someone who published a public key. The passphrase mode above is what you want for normal use.

PBKDF2 Argon2id scrypt

Travels in the clear but is covered by the authentication tag. Useful for binding a message to a context, such as a filename or a recipient. It is stored in the header, so decrypting does not require you to retype it.

Wivrix container OpenSSL compatible

Self-describing: the header records the cipher, KDF and its settings, so decrypting only needs the passphrase.

Base64 Base64URL Hex Armored block

3Encrypt & save

Developer / raw response

What is this tool?

Encrypt and decrypt files and text in your browser with a passphrase. Simple mode is a three-step flow with strong defaults (AES-256-GCM, PBKDF2 at 600,000 iterations); Expert mode adds ChaCha20-Poly1305, Argon2id and scrypt, raw keys, public-key encryption with X25519, ECDH or RSA keypairs, and an OpenSSL-compatible format. A strength bar estimates how long your passphrase would take to crack, an optional keyfile adds a second factor, and encrypted text can be shared as a link whose key stays after the #. Large files are processed in 4 MiB chunks, and nothing is uploaded.

How to Use

  1. Choose Files or Text, and pick Encrypt or Decrypt.
  2. Drop your files (or type the text), then enter a passphrase. A keyfile can be added as a second factor.
  3. Click Encrypt Files to save .wivrix-enc files, or copy the encrypted text. For text you can also create a share link that carries the key after the #.
  4. To decrypt, choose Decrypt, add the file or text, and enter the same passphrase (and keyfile, if one was used).

Frequently Asked Questions

Can Wivrix read my files or passphrase?

No. Encryption and decryption run entirely in your browser; files, text and passphrases are never uploaded.

What do Simple and Expert mode change?

Simple mode shows only the three steps with strong defaults: AES-256-GCM and PBKDF2 with 600,000 iterations. Expert mode adds ChaCha20, Argon2id and scrypt, raw and public keys (X25519, ECDH, RSA), the OpenSSL-compatible format, keypair generation and a self-test.

What is a keyfile?

Any file you choose, such as a photo. Its SHA-256 hash is mixed into the passphrase, so decrypting needs both the passphrase and the exact same file. Files encrypted without a keyfile still open exactly as before.

Is this FIPS certified?

No. It uses standard algorithms from the browser's Web Crypto API plus tested JavaScript implementations of ChaCha20, Argon2 and scrypt; compliance depends on your environment.

Related tools

People who use this tool often need these too.

Hash Generator (SHA-1, SHA-256, SHA-512, MD5)

MD5, SHA-1, SHA-256 and SHA-512 checksums.

 Security

Base64 Encoder / Decoder

Encode and decode Base64 text and data URLs.

 Developer

JWT Decoder

Decode a JWT header and payload without sending it anywhere.

 Developer

Other tools

There are more calculators, converters and editors on Wivrix. If something is missing, tell us.

Browse all tools Suggest a tool