EncryptEngine – File & Text Encryption
Modern authenticated encryption for Windows — offline and private.
A free, offline Windows tool that protects your files, folders, and text with modern, authenticated encryption. It's built around what you want to do — "lock this file", "send this to someone", "open what someone sent me" — not cryptographic jargon. Everyday tasks are front-and-centre; power features sit one toggle away under Advanced mode. Nothing ever leaves your machine.
Download EncryptEngine v2.0
Free on the Microsoft Store — no subscription, no ads.
Features
📄 Encrypt files, folders & text
Protect a single file, a whole folder (compressed into one archive), or a block of text. Drag & drop supported. Text results are a copy-pasteable message block; files and folders become one self-describing .eenc file.
🔐 Authenticated encryption
Everything is protected with AES-256-GCM or ChaCha20-Poly1305, so any tampering or corruption is detected the moment you decrypt. No silent, altered results.
🔑 Four ways to protect
Choose per item: a password (anyone with it can open), My key (only you), a person (only a chosen contact), or a raw session key in Advanced mode. Password mode uses salted PBKDF2-SHA256 key derivation.
🪪 Your identity & contacts
A personal RSA-3072 identity is created automatically. Share your public key or an identity card, save the public keys of people you trust in a contacts book, and encrypt files that only they can open.
🧭 Auto-detecting decrypt
Open a .eenc file or paste a message and EncryptEngine works out how it was protected on its own — showing a clear banner and asking only for what it needs. With several identities, it automatically picks the right key.
👥 Multiple identities
Keep separate keys — for example Work and Personal. Create, switch, and manage them under Advanced mode; decryption still opens each item against whichever identity it was encrypted for.
💾 Portable backup & restore
Back up an identity — private key included — to a passphrase-encrypted .eeid file, then restore it after a reinstall or on a new PC. Your key-encrypted files stay recoverable. Contacts export and import in bulk too.
🔒 Private keys sealed at rest
Your private key is sealed to your Windows account with DPAPI and never leaves the app unsealed. An optional "shred original after encrypt" securely overwrites the source once the encrypted copy is written.
🕰️ Opens older 1.x files
Upgrading? The Decrypt screen still opens files and messages made by the original EncryptEngine 1.x — auto-detected, no mode picking. Both password items and items encrypted to your old key are supported (decrypt-only).
🔌 Fully offline & private
No account, no internet connection, no telemetry. Every operation runs entirely on your machine — your keys, text, and files never leave your computer.
Common Uses
🗄️ Protecting sensitive files
Encrypt confidential documents, backups, or whole folders before storing them on cloud drives, USB sticks, or shared servers — with tamper-detecting authenticated encryption.
📨 Sending to one specific person
Save a contact's public key, encrypt "for them", and send the file over any channel — only the holder of the matching private key can open it. No shared password to leak.
🔑 Password-based encryption
Just want a password? Encrypt text or a file with one — nothing to manage or move. Salted PBKDF2 key derivation means the same password produces a fresh key each time.
🧳 Keeping access across PCs
Back up your identity to a passphrase-protected file and restore it on another machine, so files locked to "My key" stay openable after a reinstall or hardware change.
Latest Release
Version 2.0.0 — July 2026
Ground-up rewrite: task-first UI, authenticated AES-256-GCM / ChaCha20-Poly1305, multiple identities with portable backup, a contacts book, and the ability to open old 1.x files.