How FileLocker protects your files — and what actually happens during encryption and decryption.
FileLocker uses AES-256-GCM — the encryption standard approved by the US government for classified information. It is used by banks, governments, and the US military. Without the exact password, the files are completely unreadable — not difficult to read, not expensive to break. Mathematically impossible to open without the correct key.
GCM (Galois/Counter Mode) adds authentication on top of encryption — meaning that if even a single byte of the locked file is changed or corrupted, decryption fails. This guarantees the integrity of your delivered file.
FileLocker is designed around a simple principle: protect the document before you send it. Your original file is processed locally and converted into a protected, self-contained locked file.
Your password is processed through Argon2id to produce an encryption key. The original file is encrypted using AES-256-GCM. The result is a single locked file containing the encrypted contents. No copy of your password or encryption key is stored anywhere.
The locked file contains only the encrypted data. It is completely inert. Even if it is intercepted, copied, or stolen in transit — without the password, whoever has the file cannot read a single byte of its contents.
The locked file opens in your client's browser. Their password is processed through Argon2id. The browser's built-in Web Crypto API decrypts the contents entirely inside the browser tab. No password, no decrypted file, and no data of any kind is transmitted to any server.
Your password is not stored as-is. FileLocker transforms it using Argon2id — a system designed to make automated password-guessing attacks computationally impossible, even on modern hardware with dedicated GPUs.
FileLocker is suitable for professionals handling confidential information who need to demonstrate that documents were delivered with appropriate protection measures.
FileLocker's local encryption and offline operation supports workflows requiring that protected health information (PHI) is transmitted with appropriate safeguards.
GDPR Article 32 requires appropriate technical measures for personal data security. AES-256-GCM encryption and local processing support these requirements.
ABA Rule 1.6 requires lawyers to make reasonable efforts to prevent unauthorized disclosure of client information. FileLocker's encrypted delivery supports this obligation.
Note: FileLocker supports compliant workflows. It does not constitute legal advice or formal compliance certification. Consult your compliance officer or legal counsel for guidance specific to your situation.
Join Early Access and be notified when FileLocker is available.