About SecretPNG
Private tools that keep your data on your device — and are honest about where the limits are.
Our mission
SecretPNG exists to make everyday privacy tasks — encrypting a file, stripping the GPS data out of a photo, redacting a PDF, sharing a password safely — something you can do without handing the original content to a server. Most tools that promise this quietly upload your file anyway. Ours run in your browser, so the sensitive part of the work never leaves your device.
Principles
Local-first
Content is processed in your browser. For the core tools, nothing you work on is uploaded.
Privacy by design
The default is to collect nothing. The one server-backed feature stores ciphertext only.
No account for core tools
The local tools need no sign-up, no login, and no personal details.
Open, documented formats
The encrypted container format is specified byte-for-byte so it can be reviewed, not just trusted.
Honest about limits
We describe what each tool cannot protect, in plain language, next to what it can.
No marketing hype
We do not call anything "military-grade," "unhackable," or "unbreakable." We name the actual algorithms instead.
Who it's for
It is built for individuals who want to share or store something sensitive without thinking hard about the plumbing, and for small businesses that need to remove metadata, redact documents, or send credentials to a client or contractor without a heavyweight platform. You do not need to be a security expert to use it, and you do not need to take our word for how it works — the details are written down.
Honest status: beta, not audited
SecretPNG is in beta. Its security review status is "Not independently audited." The cryptography uses standard, widely reviewed constructions through the browser's Web Crypto API — we did not invent any primitives — but the product itself has not had an independent third-party security audit. We will not describe it as audited until a real audit report exists, and we will link it here when it does. See the security overview for what has and has not been done.
How it's funded
SecretPNG is supported by advertising on its public informational pages only — never inside the tools. The secure workspace where you actually encrypt, redact, and share is ad-free and analytics-free by construction: no ad or analytics code is loaded there, and the Content Security Policy forbids it. Ads on public pages load only after you consent. How the two layers differ is explained in how it works.
SecretPNG is operated by SecretPNG (legal entity to be confirmed before launch).