100% client-side — nothing is uploaded to any server. Password-protect any file with AES-256-GCM, derived from your password via PBKDF2. Works with binary or Base64 text files.