SECURITY / FILE ENCRYPTION
File encryption
Encrypt or decrypt a file locally with a passphrase.
Up to 50 MB of original content. Encryption processes the entire file in memory. Decryption supports Devbox v1 files, including their format overhead.
AES-256-GCM with PBKDF2-SHA-256, 600,000 iterations, and fresh random salt and IV per encryption. The version header is authenticated. The filename and file type are encrypted with the contents.
At least 12 characters for encryption, at most 1,024 UTF-8 bytes. Spaces and Unicode are preserved exactly; nothing is trimmed or normalized.
Choose a file and a long, unique passphrase.