Coming soon

Files lock Lock your files, and send them safely.

Encryption for files, folders, USB sticks and external drives on your machine, with an opener that travels with the vault.

In development — nothing to download yet. It appears here the day it is ready.

Windows

The problem

Sensitive files live on shared machines and on USB sticks that pass from hand to hand, and travel by email and WhatsApp. Most encryption tools either require the other person to install a full program, or tie the key to a cloud account — which is precisely what you were trying to avoid.

Files lock encrypts what you choose on your machine with a key that never leaves it, and puts the opener beside the vault — or makes the file open itself with no installation at all. No account, no sign-in, no cloud, and no server in the path that opens your data.

How it works

1
Choose
One file or several, a folder, a folder that becomes a vault in place, or a USB stick or external drive whose root becomes a vault. Right-click it or drag it in. The system drive is not supported: its files are always in use.
2
Lock
A password plus recovery codes printed once. The program verifies the locked file actually opens before it touches the original.
3
Send
Send the vault however you like, or hand over the USB stick as it is. The recipient opens it with the opener that travels with it, or with the self-extracting file — no installation, no administrator rights, no account.

What sets it apart

AES-256-GCM, authenticated per chunk

One-megabyte chunks, each with an authentication tag covering its index and whether it is the last — so no one can truncate the end or reorder chunks without detection.

The password is never stored

Not encrypted, not hashed. Verification happens purely by successfully unwrapping the key. Changing the password rewraps a few bytes, so it is instant even on a gigabyte file.

Recovery codes, printed once

Eight codes by default, 150 random bits each, in an alphabet with no lookalike characters. Input folds I/l to 1 and O to 0 and ignores dashes — because the code gets read off paper.

Verified before anything is destroyed

Before removing the original, the program re-reads the locked file from disk, decrypts it in full, and matches the fingerprint. Any failure stops everything and the original stays put.

An opener that travels with the vault

No installation and no administrator rights. On a USB stick the opener sits on the drive itself. Or let the file open itself: an .exe build that unpacks on any Windows machine.

A USB stick stays a USB stick

The drive root becomes a vault and the drive stays an ordinary drive, so Windows does not ask to format it on every connection. It opens on any Windows machine with no installation and no administrator rights. And files can be opened on your machine rather than on the drive, so the drive stays locked throughout.

No administrator rights

Windows shell integration (double-click and right-click) registers under your user account only — no elevation, and nothing in system settings is touched.

How we handle your data

The key never leaves your machine

Encryption and decryption happen entirely locally. Your key is never transmitted and never stored by us, and there is no cloud account in the path — which is precisely what other encryption tools break.

No file ever passes through us

Locked files are never uploaded anywhere. The portable opener works with no internet at all — try it with the network switched off.

What actually reaches us

Licence verification only: an anonymous install key and a device hash. Not a file name, nor its size, nor its type, nor its contents.

What you should know before using it

Forgot the password and lost the codes? That is the end. There is no email recovery, no back door, and no server that can open it — because we hold no key at all. Print the recovery codes and keep them somewhere other than the machine.
The original is removed after you confirm. The program verifies the locked file opens before touching the original, and waits for you to confirm you saved the recovery codes. Once you agree, though, the unencrypted original is removed.
The format is ours, but it is not secret. No general-purpose tool opens .flock files, so keep the opener with the file if someone else needs to open it. The key alone is the secret, not the format.
Secure erase has a limit, and we state it. When the original is removed it is overwritten with random data twice before deletion. On modern drives the disk may have written the data somewhere we cannot reach — so it raises the barrier against ordinary recovery tools, and is not a guarantee against a forensic laboratory. The answer at that level is full-disk encryption, a different path and not one we offer.

Frequently asked

What if you shut down?

Your files keep opening. Decryption never goes through our server and never asks about a licence — decryption is a wholly separate path from licence verification inside the program, and we verify that separation before every release.

Can I change the password?

Yes, and it is instant even on a gigabyte file — because the change rewraps the key only, it does not re-encrypt the data.

Does the recipient need to install the program?

No. Either the opener travels with the vault, or you use the self-extracting option so the file itself becomes an .exe that unpacks on its own. On a USB stick the opener sits on the drive, so it opens on any Windows machine with no installation and no administrator rights.

Why does locking pause at the start?

Deriving the key from your password is deliberately slow and memory-hungry (64 MB) — that is exactly what makes guessing expensive for anyone trying to break it.

Can you open my files?

No. We hold no key, we do not store your password in any form — neither encrypted nor hashed — and nothing from the file reaches us. You can confirm it yourself: run a network monitor while locking and unlocking, and you will see no connection at all.