cadenas (French for "padlock") encrypts and decrypts a file with a password, right in your browser. No file and no password is ever sent over the Internet: the page is technically not allowed to open any network connection (Content Security Policy connect-src 'none'), and it works offline once installed.
It uses Argon2id and XChaCha20-Poly1305, detects any change to an encrypted file, and can read and write the age format, so files stay readable with other tools. The same tool comes as a command line for Windows, macOS and Linux, a Docker image you can self-host, and a JavaScript library.
cadenas is free software (MIT) with a documented file format. It has not had an independent security audit yet; the threat model and format are public for review.
Features
- Encrypts and decrypts files entirely in your browser: nothing is uploaded
- Strong, modern cryptography: Argon2id + XChaCha20-Poly1305
- Detects any change or corruption in an encrypted file
- Reads and writes the age format, compatible with other tools
- Works offline as an installable web app (PWA)
- Command line for Windows, macOS and Linux, Docker image and npm library
- Free and open source (MIT) with a documented file format