Encrypt a file with a password and generate a download link containing the encrypted payload as a data URL.
The file never leaves your browser. Secure File Drop reads a file you choose, encrypts it with a password you type, and folds the encrypted result into a link as a data URL, so the link itself is the payload. Send the link to anyone; they open it here, enter the password, and download the original file. Nothing is uploaded or stored, and the password is never saved, which means a lost password destroys the file permanently - there is no recovery. The common surprise is the link's size: it contains the whole encrypted file, so this suits small files, not archives or videos.
You pick a file and a password. The tool reads the file's bytes in the browser and encrypts them with a key derived from the password, so the result is unreadable without it. The encrypted bytes are then encoded and embedded in a data URL, whose content is the payload itself. You copy out one long string and send it by any channel.
The recipient pastes the link into the tool or opens it directly. The tool reads the embedded payload, and the recipient types the password; the key is re-derived from that exact password and the file is decrypted in the browser. A wrong password fails cleanly or yields garbage bytes, and since nothing was stored anywhere, there is no server-side reset and no way to recover a mistyped password.
Data URLs are the limiting factor. Browsers stop handling them around 2 MB, address bars far sooner, and pasting a huge link into email or chat often fails, so keep files under a few hundred kilobytes and test before relying on it. Folders are not supported; encrypt one file at a time.
The file is gone. The password is never stored or transmitted, and the ciphertext cannot be read without it, so there is no recovery mechanism anywhere - that is the point. If you still have the original file, re-encrypt it with a new password and send the new link.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.