Password-protect an image with AES-256-GCM, or decrypt one back. Everything runs in your browser - your images never leave your device.
Select an image to encrypt
The image bytes are encrypted with AES-256-GCM using a key derived from your password with PBKDF2 (200,000 iterations of SHA-256). A random salt and IV are stored alongside the ciphertext in a small header, so the same password and file always decrypt cleanly while a wrong password fails authentication.
Password-protect an image with AES-256-GCM and decrypt it back to view. Everything runs in your browser, your images never leave your device.
Cipher Image turns any picture into an encrypted file that only someone with the password can open. It is handy for storing or sharing a sensitive screenshot, scan or photo without trusting a third-party service. Pick a file and a password to get an encrypted .enc download, or load an .enc file with its password to view and save the original image again. All of it happens locally in your browser.
Input:
photo.png + password
Output:
photo.png.enc (encrypted), then back to photo.png
Which image formats are supported?
Any format, since the tool encrypts the raw bytes. The original type is stored so the decrypted file opens as the same PNG, JPEG, WebP or GIF you started with.
Can the encrypted file be opened anywhere?
It uses a KeyDecryptor container with standard AES-256-GCM and PBKDF2. Decrypt it here with the right password. It is not meant to be opened by a generic image viewer until decrypted.
What if I forget the password?
There is no recovery. The encryption is authenticated and the key comes only from your password, so a forgotten password means the image cannot be restored.
Does my image get uploaded?
No. Encryption and decryption run entirely in your browser using the Web Crypto API.