A free, fully client-side file encryptor that runs entirely in your browser. Drop in any file, set or generate a passphrase, and VERNAM seals it with XChaCha20-Poly1305 and Argon2id into its own .vrn format. Nothing is ever uploaded and it works offline. Built and open-sourced by PrivacyTools.io.
Reviewed by Marcus Holmberg
VERNAM
vernam.app 4 ratings so far*
Rate VERNAM: No account needed
Threat level
Hardened
A hardened pick. Worth the effort once you have chosen to shrink your footprint on purpose. Enough for most people. Threat levels
Our take
We built VERNAM because locking a single file should not mean installing software or trusting a server. Everything happens inside the page, so your file and passphrase never leave the device, and you can prove it by pulling your internet connection before you encrypt. The whole tool is open source and free to self-host, so the privacy claim is yours to verify rather than take on faith. The passphrase is the only key, which means there is no account to breach and no backdoor to find. Reach for it whenever you need to store or hand off one file that only you can open.
GitHub at a glance
LifetimeLabsDev/VERNAM
Stars
31
+ 27 this week
Last commit
11d ago
healthy
Stars, last 29d
Website at a glance
vernam.app
B+ score 80
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 13d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
VERNAM alternatives
PrivacyNotes Zero-knowledge notes, tasks, files, passwords and journal secured by a single 12-word recovery phrase, with no email or password required. The crypto core and database schema are published for audit. No subscription model.
7-Zip File archiver with a high compression ratio and built-in encryption functionality.
FileVault FileVault is the built-in full-disk encryption feature in macOS. On Macs with Apple silicon or a T2 chip, data is encrypted by hardware by default; enabling FileVault adds a login-password gate that prevents decryption without your credentials.
BitLocker BitLocker is the built-in full-disk encryption feature in Windows Pro, Enterprise, and Education editions. It encrypts the operating system drive and fixed data drives using AES-XTS, with optional TPM-backed pre-boot authentication.
VeraCrypt It can create a virtual encrypted disk that works just like a regular disk but within a file. It can also encrypt a partition or the entire storage device with pre-boot…
Cryptomator Cryptomator encrypts your data quickly and easily. Afterwards you upload them protected to a cloud service.
* Average ratings will show on this page once the threshold of 5 ratings is reached.