Here's exactly what happens on both ends of the process, and why it can't be intercepted.
Five steps in FileLocker, start to finish, usually under a minute.
FileLocker detects connected drives automatically and lists them for you to choose from.
Choose any file, or a whole folder — FileLocker zips folders in memory automatically before encrypting.
A built-in strength meter confirms your password is strong enough, and you can add an optional hint for your recipient.
AES-256-GCM encryption runs locally, with the key derived from your password using Argon2id.
The encrypted vault and a standalone Unlock_Vault.html file are written to the USB. Unplug and deliver.
Three steps. No install. No account. No internet connection required.
They open the drive in their file explorer like any other USB drive — no special software needed to view it.
Double-clicking the file opens it directly in their default browser — Chrome, Edge, Safari, or Firefox all work.
The moment the password is verified, the original file decrypts locally and downloads straight to their computer.
Every file is encrypted with AES-256-GCM, the same cipher standard approved for top-secret data. Your password never becomes the encryption key directly — that would be too easy to guess-and-check.
Argon2id turns your password into a cryptographic key using deliberately heavy memory and time costs, making automated brute-force guessing computationally impractical, even on powerful hardware.
There's no master key, no recovery service, and no way for FileLocker to unlock a vault on your behalf. That's what makes the encryption real instead of theatrical.
Watch the full workflow — a lawyer encrypts a confidential brief and their client unlocks it without installing a single app.
90 SECONDS · CAPTIONED · NO SOFTWARE REQUIRED TO WATCH
No. Both encryption and decryption happen entirely offline, on the local device. No step in the process requires a network connection.
Yes — select a folder instead of a single file, and FileLocker automatically zips its contents in memory before encrypting the archive as one vault.
They can simply try again. On Standard there's no attempt limit; Pro lets you configure a lockout after a set number of failed attempts, with a recovery key held by you.
No. Opening an HTML file and using their browser's built-in Web Crypto API requires no elevated permissions of any kind.
$29 one-time. No subscription, no recurring fees, lifetime updates included.