Cryptleaf File Encryption

Cryptleaf File Encryption protects data at rest. Right-click a file or folder to encrypt it in place, or create an encrypted container that behaves like an ordinary drive once unlocked and is an unreadable block of data once closed. Entire external drives and USB sticks can be encrypted the same way, so a lost stick is not a lost dataset.

Encryption uses AES-256 in an authenticated mode, which means tampering is detected rather than silently decrypted into corrupted output. Keys are derived from your passphrase with a deliberately slow key-derivation function, making brute-force attempts expensive even against a short password.

For sending a file to someone who does not have the software, the self-extracting archive option produces a single executable that asks for the passphrase and unpacks itself. A secure delete function overwrites the original data so the plaintext cannot be recovered from free space afterwards.

• AES-256 authenticated encryption with tamper detection
• Encrypted containers that mount as a normal drive letter
• Full-drive encryption for external disks and USB media
• Right-click encrypt and decrypt from the file explorer
• Self-extracting encrypted archives for recipients without the software
• Secure delete with multi-pass overwrite of the original file
• Optional keyfile in addition to the passphrase
• Runs entirely offline; no key escrow, no account