Encrypt any photo with AES-256 password protection, right in your browser, then decrypt it anytime with your password.
or browse filesdrop an image or .encrypted file here or paste
Enter the password to unlock this image
The password cannot be recovered - keep it safe.
Unlocked - this is the original image.
This free tool locks a photo behind a password of your choice. Pick an image - JPG, PNG, WebP or any other format - type a password, and download the result as an .encrypted file that nobody can open without that password. When you need the picture back, load the .encrypted file into the same page, enter the password, and the original image is restored exactly as it was, down to the last byte. There is no account, no upload and no watermark; the whole process runs inside your browser.
Select or drop your image, then type a password and confirm it - the strength meter tells you honestly whether the password is worth having. Press the download button and the tool encrypts the file with AES-256 and saves it as yourname.encrypted. That file is what you keep or send: it looks like random data to any image viewer, file manager preview or cloud thumbnailer, and it stays unreadable until someone feeds it back into this tool with the correct password.
Load the .encrypted file the same way you would load an image - the tool recognizes it automatically, even if the file has been renamed - and enter the password. If the password is right, the original picture appears and you can download it in its original format: a protected JPG comes back as a JPG, a PNG as a PNG. If the password is wrong, decryption simply fails; there is no partial result and no way around it.
The tool encrypts with AES-256-GCM, the standard used for online banking and government documents, through the Web Crypto API built into your browser. Your password is stretched into a key with PBKDF2 and 100,000 iterations, which makes guessing attacks slow and expensive, and every file gets a fresh random salt and nonce, so encrypting the same image twice produces two completely different files. Neither the image nor the password ever leaves your device - nothing is transmitted, stored or logged anywhere, which also means there is no server copy to leak.
Encrypting is the right move any time a picture has to sit somewhere you do not fully control. Protect scans of ID cards, passports and contracts before parking them in cloud storage. Encrypt a sensitive photo before attaching it to an email - mail is copied across servers you never see, but an .encrypted attachment stays sealed, and you can share the password over a different channel like a phone call or messenger. It also works for private family photos on a shared computer, backups on a USB stick that could be lost, or design work you send to a client before it is public.
One honest warning: the protection is only as good as your password, and there is no recovery. If you forget the password, the image is gone for good - that is precisely what makes the encryption trustworthy.
Open the image in the tool, enter a password twice and press download. The tool encrypts the file's raw bytes with AES-256 and saves an .encrypted file. This works the same for JPG, JPEG, PNG, WebP, GIF and every other image format - the original file comes back unchanged after decryption.
Load the .encrypted file into this page just like a normal image, type the password it was protected with, and press Decrypt. The original image appears and downloads in its original format. Files encrypted with the older version of this tool open here too.
The image cannot be recovered - by anyone, including us. There is no master key, no reset and no backdoor; the file is mathematically unreadable without the password. Store the password somewhere safe, such as a password manager.
AES-256 is the strongest widely deployed encryption standard, used by banks and governments, and brute-forcing the key itself is not feasible with any existing computer. In practice the weakest link is the password: a short or common one can be guessed, so use a long password with mixed characters - the strength meter guides you.
No. The encryption and decryption both run entirely in your browser through the Web Crypto API. Your image and your password never leave your device, nothing is stored anywhere, and the tool keeps working even offline once the page is open.
Yes - that is one of the best uses. Attach the .encrypted file to the email as you would any file, and share the password through a different channel, like a text message or a call. Anyone intercepting or forwarding the email sees only unreadable data; the recipient decrypts it on this page in seconds.