Our Security Promise
Your privacy and security are not features; they are the foundation of PixCrypt. Here's how we protect you.
1. Client-Side Encryption: You Hold the Keys
The most critical aspect of our security model is that all encryption and decryption happen directly in your browser. This is known as "client-side" processing. Your original images and your password are never sent to our servers or any third party. This ensures that you, and only you, have access to your unencrypted data.
2. AES-256: The Gold Standard of Encryption
We use the Advanced Encryption Standard (AES ) with a 256-bit key. This is the same encryption standard adopted by the U.S. government to protect top-secret information. A 256-bit key has 2²⁵⁶ possible combinations, making it computationally impossible to crack with current technology. A brute-force attack would take billions of years to succeed.
3. Zero-Knowledge Policy
We operate on a strict "zero-knowledge" basis. This means we have absolutely no knowledge of or access to:
- The content of your images.
- The password you use to encrypt them.
- The encrypted data itself.
Because we don't have your password, we have no way to decrypt your files, even if compelled to do so. This also means we cannot help you recover a lost password. The responsibility for your password rests entirely with you, which is a core feature of this high-security model.
4. No Permanent Data Storage
PixCrypt is a utility, not a storage service. We do not store your files—original or encrypted—on our servers. The entire process is ephemeral. Once you close your browser tab, all traces of the operation are gone from our end. You download the encrypted file directly to your own device or storage.