Selecting a file decrypts it to a download; the ciphertext input returns when the file is removed. In key mode the key field below supplies the key.
The key is derived in this tab with Argon2id from the password and the salt stored in the file.
The key never leaves this tab. Spellcheck is off deliberately: browser spell services can ship what you type to a vendor.
decrypted file
download
The download link exists only after the whole file authenticated. A wrong key, wrong password or tampered file never produces one.