Is it safe to decrypt a file online?
It is safe here, because nothing is uploaded. The decryption runs in your browser using the Web Crypto API, so the encrypted file and your key stay on your device. You can verify this by opening your browser developer tools, switching to the Network tab, and confirming no request carries your file. Be far more careful with services that require an upload.
Can I decrypt a file without the password or key?
No. AES-256 and ChaCha20-Poly1305 are designed so that decryption without the key is computationally infeasible — there is no back door and no recovery option. If you have lost the key, the data is gone. This is what makes the encryption worth using.
Which file types can be decrypted?
Any file type. The tool operates on raw bytes, so PDFs, Word and Excel documents, images, videos, ZIP archives, database dumps, config files and VPN profiles all decrypt identically. The original filename and extension are restored from the file header.
Is there a file size limit for decryption?
There is no hard limit. Files are read and decrypted in 2 MB chunks, so memory use stays modest even for very large files. Files above roughly 500 MB will simply take longer, depending on your device.
Why does decryption fail with the correct password?
The most common causes are a trailing space in the pasted password, a different keyboard layout than the one used when encrypting, or a file that was truncated or altered in transit — for example by an email gateway. The tool verifies an HMAC-SHA256 authentication tag, so a modified file is rejected rather than silently producing corrupt output.
Can I decrypt a file encrypted by someone else?
Yes, provided it was encrypted with this tool and they have given you the password or key. Send the encrypted file and the key through separate channels — for example the file by email and the key by a messaging app — so that intercepting one does not reveal the other.