Encrypted or restored copy

Encryption supports files up to 128 MiB. Use a long, unique password with at least 12 characters. The password is cleared after successful processing and is never saved by this tool.

Keep your password somewhere safe. GOATiM cannot recover it. Decryption accepts this tool’s .goatimenc format; it does not unlock password-protected ZIP, PDF or Office files.

AES-256-GCM authenticates the encrypted contents and format header. PBKDF2-SHA-256 derives the key with 600,000 iterations and a random salt; each encryption uses a random nonce. The original filename and file type are stored inside the encrypted payload. HTTPS or localhost is required.

No files selected

Files stay on this device. No upload or account required.

← All tools Local onlyBulk File Rename →

FREE TO USE / NO ADS / NO LOGIN REQUIRED

Password-encrypt files or restore GOATiM encrypted copies

Encrypt local files with a password and authenticated AES-256-GCM, or restore this tool’s encrypted copies.

Encrypt any file type up to 128 MiB into a .goatimenc copy
Decrypt version 1 GOATiM encrypted files with the original password
Authenticate the format header and encrypted contents with AES-256-GCM
Derive keys with PBKDF2-SHA-256, 600,000 iterations and a random salt
Use a fresh random nonce and clear password fields after success

Choose a file and a password of at least 12 characters. The original filename and file type are encrypted inside the payload. Decryption rejects incorrect passwords and damaged contents. This format does not unlock ZIP, PDF or Office passwords. Passwords cannot be recovered by GOATiM; HTTPS or localhost is required.

Popular ways to use File Encryption & Decryption

Download an encrypted copy of a local file for storage or transfer.
Restore a .goatimenc file using the password originally used to encrypt it.

How processing and privacy work

Key derivation, encryption and decryption run locally using Web Crypto. Files and passwords are not uploaded or saved by this tool.