Skip to content
SecretPNG

Encrypt, redact, and share files — right in your browser.

Encrypt files, create secure vaults, remove hidden metadata, redact documents, and share private information — without sending the original content to SecretPNG.

Open the toolsHow it works

All tools

Free tools for files, secrets, and personal data.

Encryption & vaults

5

Encrypt a File

Password-encrypt any file with AES-256-GCM.

Decrypt a File

Open encrypted files and vaults with your password or recovery key.

Create an Encrypted Vault

Turn folders and files into one encrypted vault file.

Open an Encrypted Vault

Unlock a vault, browse its encrypted file list, extract what you need.

Password-Protect a ZIP

Create AES-encrypted ZIP archives that other apps can open.

Private sharing

1

Share a One-Time Secret

Share a password or note via an expiring, one-time link.

Metadata removal

2

Remove Photo Metadata

See and strip EXIF data — GPS, camera, dates — from your photos.

Remove Document Metadata

Strip author, title, and hidden properties from PDFs and Office files.

Redaction

1

Redact a Document

Permanently black out content in PDFs and images — then verify it's gone.

Scanning

1

Sensitive-File Scanner

Check files for emails, card numbers, API keys, and secrets before sharing.

Generators

4

Password Generator

Strong random passwords with real entropy.

Passphrase Generator

Memorable multi-word passphrases from the EFF wordlist.

Secure QR Code Generator

Generate QR codes — plain, Wi-Fi, contact, or encrypted.

Recovery-Code Sheet

Organize two-factor recovery codes into a printable or encrypted sheet.

File integrity

2

File Hash Generator

Compute SHA-256 and other checksums for files of any size.

File Hash Verifier

Compare a file against an expected checksum to verify integrity.

Private notes

1

Local Private Notes

Encrypted notes that live only in this browser, locked by a master password.

How the tools work

Documentation for the cryptography, file format, and network behavior behind each tool.

CryptographyAlgorithms, key derivation, and parameters.Threat modelWhat we defend against — and what we don't.Container formatThe documented .svault file format.Network transparencyEvery request each route makes.Responsible disclosureHow to report a vulnerability.ChangelogWhat changed and when.

Frequently asked questions

Do my files leave my device?
No. The encryption, metadata, redaction, hashing, scanning, and generator tools process your files entirely in your browser. The one exception is the secret-link tool, which stores encrypted ciphertext on our server so a recipient can retrieve it — the decryption key never reaches us.
Can SecretPNG recover my password?
No. We never receive your password or encryption keys, so we cannot reset or recover them. If you lose your password and any recovery key you generated, the encrypted data cannot be recovered — by us or anyone.
What happens if the site disappears?
The encrypted-file format is open and documented, and the tools have an offline version you can keep. An encrypted file can be opened by any software that implements the documented format, not just this website.
Can someone open my encrypted vault without SecretPNG?
Only someone with the password or recovery key. The format is documented so other software can implement it, but the contents remain protected by AES-256-GCM encryption.
Are secret links truly one-time?
A one-time link is destroyed after its first successful retrieval. Be aware that automated systems — corporate mail scanners, chat link previews — can open a link and consume that single view before your recipient does. For sensitive cases, use the “share the key separately” or added-password options.
Is the site independently audited?
Not yet. SecretPNG is in beta and has not had an independent security audit. Our source and cryptographic format are documented so they can be reviewed. See the security pages for exactly what has and hasn't been reviewed.
What browsers are supported?
Current versions of Chrome, Edge, Firefox, and Safari. The tools use standard browser cryptography (Web Crypto). Saving very large files directly to disk works best in Chrome and Edge.
Can I use it offline?
Yes. Core local tools are available as an installable offline app (PWA). Once installed, they work without a network connection. See the download page.
Does SecretPNG store my files?
No. Local tools never upload your files. The secret-link feature stores only client-encrypted ciphertext that we cannot read, deleted on expiry or after viewing.
Why are ads excluded from the secure tools?
Advertising and analytics scripts are third-party code. Running them alongside your sensitive data would undermine the privacy guarantee, so the secure workspace has none — no ads, no analytics, no third-party scripts.

17 tools available.