A free, fully client-side file encryptor that runs entirely in your browser. Drop in any file, set or generate a passphrase, and VERNAM seals it with XChaCha20-Poly1305 and Argon2id into its own .vrn format. Nothing is ever uploaded and it works offline. Built and open-sourced by PrivacyTools.io.
Reviewed by Marcus Holmberg
VERNAM
vernam.app 4.5 (13)
Rate VERNAM: No account needed
Threat level
Hardened
A hardened pick. Worth the effort once you have chosen to shrink your footprint on purpose. Enough for most people. Threat levels
Our take
We built VERNAM because locking a single file should not mean installing software or trusting a server. Everything happens inside the page, so your file and passphrase never leave the device, and you can prove it by pulling your internet connection before you encrypt. The whole tool is open source and free to self-host, so the privacy claim is yours to verify rather than take on faith. The passphrase is the only key, which means there is no account to breach and no backdoor to find. Reach for it whenever you need to store or hand off one file that only you can open.
GitHub at a glance
LifetimeLabsDev/VERNAM encryptionencryption-algorithmencryption-algorithmsencryption-decryptionencryption-toolencryption-utilityprivacyprivacy-by-designprivacy-focusedprivacy-toolssecurity-tools
Stars
61
+3 this week
Forks
9
0 watching
Last commit
2mo ago
healthy
Star history
Commits, last 26 weeks
14 commits, active 4 of 26 weeks
1 contributor since Jun 2026
Languages
- HTML 54.9%
- JavaScript 37.2%
- CSS 7.9%
Updated daily from the GitHub API. Star tracking since Jun 22, 2026.
Website at a glance
vernam.app
B+ score 80
Solid website security headers
Graded by Mozilla HTTP Observatory, tested 4d ago
Inspect this site yourself
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
VERNAM alternatives
PrivacyNotes Encrypted notes, tasks, calendar, files, passwords and a journal with mood and medication tracking, all unlocked by one 12-word recovery phrase. Sign up with no email and no password. Open source.
7-Zip File archiver with a high compression ratio and built-in encryption functionality.
FileVault FileVault is the built-in full-disk encryption feature in macOS. On Macs with Apple silicon or a T2 chip, data is encrypted by hardware by default; enabling FileVault adds a login-password gate that prevents decryption without your credentials.
BitLocker BitLocker is the built-in full-disk encryption feature in Windows Pro, Enterprise, and Education editions. It encrypts the operating system drive and fixed data drives using AES-XTS, with optional TPM-backed pre-boot authentication.
VeraCrypt It can create a virtual encrypted disk that works just like a regular disk but within a file. It can also encrypt a partition or the entire storage device with pre-boot…
Cryptomator Cryptomator encrypts your data quickly and easily. Afterwards you upload them protected to a cloud service.