Spellcheck is off deliberately. Browser spell services can ship what you type to a vendor, which would defeat the point.
Selecting a file encrypts it as a streaming download; the text input returns when the file is removed. The file is read locally in this tab and never uploaded anywhere.
The key is derived in this tab with Argon2id. Same password + same file salt = same key; nothing is stored.
A new key is generated for every Encrypt. Nothing stores it. Close this tab without copying it and the ciphertext is unrecoverable.
encrypted file
download
The download link exists only after encryption finishes in this tab. Nothing is uploaded.