Upload your image to begin
Drop, click, or paste your image. No sign-up required.
Drop your image here
PNG, JPEG, WebP · Max 20 MB
or press Ctrl+V to paste a screenshot
No sign-up · No server · All data stays in your browser
Lock an image in 4 steps
Built for privacy & simplicity
AES-256 Encryption
Industry-standard cipher with PBKDF2 key derivation and a unique salt per region.
Fully Browser-Based
Zero server uploads. All processing happens in your browser — images never leave your device.
Instant Sharing
The shareable link encodes everything needed. Works on any device with a modern browser.
Flexible Masks
Choose pixelate, blur, or solid black to hide content before it is unlocked.
Time Expiry
Optionally auto-expire regions after a set time so they can never be unlocked again.
One-Time Reveal
Mark regions as single-use: once unlocked, they are permanently locked for that viewer.
How Password Protection Works
SafeKit encrypts your image in the browser using AES-256-CBC — the same encryption standard used by governments and financial institutions. The image never leaves your device unencrypted. Only someone with the correct password can view it.
1. Upload
Select any JPG, PNG, or WebP image from your device.
2. Set Password
Choose a strong password. It's used to derive an AES-256-CBC encryption key via PBKDF2.
3. Encrypt
The image is encrypted in your browser — nothing is uploaded to a server.
4. Share
Share the secure link. Recipients need the password to view the image.
Frequently Asked Questions
How secure is the image encryption?+
SafeKit uses AES-256-CBC with a PBKDF2-derived key. This is the same encryption standard used in banking, government, and military applications. The encrypted data is computationally infeasible to brute force with a strong password.
Is my image uploaded to a server?+
No. Encryption and decryption happen entirely in your browser using the Web Crypto API. Your original image and your password never leave your device.
What happens if I forget my password?+
There is no password recovery. SafeKit has no access to your password or the encryption key. If you forget the password, the image cannot be decrypted. Always store your password somewhere safe.
Who can see my protected image?+
Only someone with the exact password can view it. Even if someone obtains the encrypted file or the shared URL, they cannot view the image without the password.
What image formats are supported?+
JPG, JPEG, PNG, and WebP are all supported for encryption. The output is stored as a secure encrypted blob that can be decrypted and previewed in any modern browser.