Loading age Encryptor...
Encrypt and decrypt text with age, using a passphrase (scrypt) or an X25519 keypair. Output is ASCII armored. Everything runs in your browser.
age is a modern file encryption format by Filippo Valsorda. Passphrase mode derives a key with scrypt; keypair mode uses X25519 so anyone with your public recipient can encrypt to you, and only your secret identity can decrypt. Files use ChaCha20-Poly1305 under the hood.
Encrypt and decrypt data with age using a passphrase or an X25519 keypair, with ASCII-armored output. Runs entirely in your browser.
age is a modern, deliberately simple file encryption format and tool created by Filippo Valsorda as an easier alternative to PGP. It supports two ways to lock data: a passphrase that anyone who knows it can use, or an X25519 keypair where a public recipient encrypts and a matching secret identity decrypts. This tool brings age to the browser. You can protect a short message with a passphrase, generate a keypair, encrypt to a recipient, and later decrypt with the secret key, without installing the command line tool.
Input:
Plaintext + passphrase, or plaintext + age1... recipient
Output:
-----BEGIN AGE ENCRYPTED FILE----- ... -----END AGE ENCRYPTED FILE-----
What is the difference between passphrase and keypair mode?
Passphrase mode uses one shared secret for both sides. Keypair mode splits it: a public recipient (age1...) encrypts, and only the secret identity (AGE-SECRET-KEY-1...) decrypts, which is better for sending data to someone else.
Is this compatible with the age command line tool?
Yes. The armored output follows the age v1 format, so files encrypted here can be decrypted by the official age binary and other compatible libraries, and vice versa.
Where do I keep the secret key?
After generating a keypair, store the AGE-SECRET-KEY-1... value somewhere safe. Without it, data encrypted to its recipient cannot be recovered.
Does my data leave the browser?
No. Encryption, decryption and key generation all happen locally in your browser.