PixelLock

Encrypt messages and images in your browser. Nothing is uploaded.

AES-256-GCM · PBKDF2-SHA-256 · 600,000 iterations

STEP 1 Choose what to lock

Add a message, an image, or both. At least one is required.

OPTIONAL
0 characters
OPTIONAL · PNG

Drop a PNG here or click to browse

The image is sealed inside the same encrypted file

STEP 2 Set a passphrase

A long phrase of several unrelated words beats a short, complicated password.

Strength: —

STEP 3 Encrypt

Save the result as a file, or copy it as text you can paste into a chat or email.

Encrypted text
Download file

How it works. Your passphrase is stretched with PBKDF2 (SHA-256, 600,000 iterations, 16-byte random salt) into a 256-bit key. Your message and image are packed into a single envelope and sealed with AES-256-GCM using a fresh 12-byte nonce. GCM is authenticated: a wrong passphrase or a tampered file fails cleanly instead of producing garbage. Everything runs locally through your browser's Web Crypto API — your content and passphrase never leave this page. Keep the passphrase safe; there is no recovery if it's lost.