OzCrypt Encrypt Wizard

Notice

Important things to know before encrypting

Local processing

Files and text are processed locally in this browser.

Nothing uploaded

Nothing is uploaded to OzCrypt.

Secrets are unrecoverable

OzCrypt cannot recover lost passwords, answers, gestures, or key files.

Test first

Before deleting original files, test that the .ozc package unlocks correctly.

Key files matter

Keep your key file safe if using File Key Lock.

Soft policy locks

Local Time Lock and Environment Lock are soft policy locks, not strong cryptographic barriers.

Use a trusted device

Avoid using this on public or shared computers.

Browser memory

Large files may depend on browser memory limits.

I understand and agree I understand OzCrypt cannot recover lost secrets and I should test decryption before deleting originals.

Browser compatibility

Check this browser

Core encryption needs Web Crypto and File API support. Offline/PWA and Clipboard support improve convenience.

Choose input

What do you want to encrypt?

Pick the content to protect. Files and text stay inside this browser.

Input type

PBKDF2 iterations

Higher values slow down password guessing but may make encryption slower on older devices.

Package kindSingle file

File count0

Total size0 B

Drop one or more files here

Files are read locally in your browser. Multiple files are packed inside the encrypted .ozc package.

For multiple files, OzCrypt creates an internal OZP1 file pack first, then encrypts that pack into a single .ozc file.

Choose scenario

Choose a protection scenario

This only shapes the review guidance. It does not change the encryption format or add networking.

Quick Lock Protect something with a strong password-first setup. Time Capsule Add a local time window as a soft opening rule. Puzzle Lock Add a question-and-answer factor without revealing the answer. Gesture Lock Require a remembered drawing pattern in addition to any password. Key File Lock Require the exact local key file during unlock. Advanced Custom Choose extra local factors deliberately.

This step does not add sharing, accounts, networking, or new lock types.

Configure protection

Configure protection factors

Start with the main password, then enable only the extra factors you really want for this package.

Main protection

Password

Used locally to encrypt and decrypt the package. OzCrypt cannot recover it if lost. Use a strong, unique password.

Confirm password

Re-enter the password to avoid mistakes.

Additional unlock factors

Enable only the strong or semi-strong factors you really want here. Soft policy controls appear in the Optional Controls step.

Use Q&A lock Use gesture lock Use file key

Question

The question helps remind you what answer is required. It should not reveal the answer.

Answer

The answer is used as an unlock factor. OzCrypt cannot recover it and does not store it in metadata.

Gesture grid size

Minimum points

Draw a gesture using the selected grid. The same gesture is required to unlock, and the gesture sequence is never stored.

Key file

The selected file is required to unlock. Keep the exact key file safe. The key-file hash is not stored in metadata.

Protection strategy

Choose how the protection is composed

Keep normal use on Single Lock. Advanced strategies are available when you need multiple password paths.

Protection strategy

Choose how this package should be protected

Single Lock is recommended for most users: selected factors combine into one local unlock key.

Single Lock Use the selected factors together to unlock one encrypted package.

Advanced protection strategies

Multi-Password AND Require every configured password slot to unlock. Partner Lock OR Any one valid partner password can unlock the package. Concentric Lock Future layered AND concept. Not implemented yet. Multi-algorithm cascade Future experimental feature. AES-256-GCM remains the only active algorithm.

All configured password slots are required. If any password is lost, OzCrypt cannot recover the package.

Password 2

Confirm password 2

Password 3

Confirm password 3

Anyone with one valid partner password can unlock this package. Partner passwords wrap the same random content key independently.

Partner password 2

Confirm partner password 2

Partner password 3

Confirm partner password 3

Anyone with one valid partner password can unlock this package.

Optional controls

Optional controls and output preferences

Use soft policy locks and output preferences deliberately. These controls do not replace strong secrets.

Configuration template

Templates save only non-secret settings. They do not save passwords, answers, gestures, key-file hashes, or unlock secrets.

Package notes

Optional. Notes are encrypted as protected metadata, but should still avoid passwords, answers, gestures, or other secrets.

Optional lock controls

Local Time Lock and Environment Lock are soft policy controls. They may be useful, but they are not strong cryptographic barriers.

Use local time lock Use environment lock

Local start date

Local end date

Controls when the package can be unlocked according to local device time. This is a soft policy lock and can be bypassed if the device time is changed.

Requires a similar browser/device environment. This is a soft policy lock, not strong cryptographic security, and may fail after browser, OS, language, or timezone changes.

Future controls stay out of this build

Network time checks, recipient access, burn-after-open behavior, and Secure Share flows are future work and are not active in this local-only build.

Plus local conveniences

Package notes, recovery reminders, richer review, and local presets are safe local-only additions available in this build.

Pro future online features

Secure Share, recipient access, remote revocation, hardware keys, and team policy need a future online service. They are not active here.

Review

Review before encryption

Confirm the package choices before creating anything. This summary avoids showing secrets.