Private by design
The original file stays on your device while the browser encrypts it.
Local browser encryption
Encrypt filesbefore the cloud.
Protect any file locally before uploading it to Google Drive, Dropbox, iCloud, OneDrive, Amazon S3, Backblaze, or another storage provider.
AES-GCMLocal processingNo uploadsNo account
AES-256-GCMPBKDF2250,000 iterations
Encryption comes first
Your cloud storage is not your encryption
Cloud providers secure their infrastructure, but access to your account can still expose the files stored inside it. Encrypting before upload creates a separate layer of protection.
The provider stores ciphertext. Your password remains the key.
Protection that travels
Why encrypt your files?
Portable protection
Download one encrypted file and store it in any cloud or local drive.
No account required
Use the tool immediately without handing Zelf your files or password.
Four local steps
How file encryption works
Your browser handles the entire cryptographic operation. Zelf never needs to receive the original file.
Select
Choose any file from your device.
Protect
Create a strong password known only to you.
Encrypt
AES-GCM protects the file locally in your browser.
Store
Download the .zelfenc file and keep it anywhere.
Cloud portable
Encrypted first, stored second.
Once encrypted, your file can be uploaded to any storage provider. The provider only stores encrypted data.
Google Drive
Move the protected file there when you are ready.
iCloud
Move the protected file there when you are ready.
Dropbox
Move the protected file there when you are ready.
OneDrive
Move the protected file there when you are ready.
AWS S3
Move the protected file there when you are ready.
Backblaze
Move the protected file there when you are ready.
One thing only you know
Your encryption is only as strong as your password
Use a long, unique password and store it safely. Zelf cannot reset or recover a password because it never receives it.
Need a strong password?
Generate one locally, then keep it in a trusted password manager.
Open password generatorFAQ
Your files, your key
Does Zelf upload my original file?+
No. Encryption and decryption happen locally in your browser. The original file and password are not sent to a Zelf server.
Which encryption does the tool use?+
The browser tool uses AES-GCM with a password-derived key. Every file receives a unique salt and initialization vector.
Where can I store the encrypted file?+
Anywhere you normally store a file, including Google Drive, Dropbox, iCloud, OneDrive, Amazon S3, Backblaze, or a local disk.
Can Zelf recover my password?+
No. Zelf does not store it. If the password is lost, the encrypted file cannot be recovered through this tool.
Do I need an account?+
No account is required. Choose a file, set a password, encrypt it, and download the protected .zelfenc file.