About LockMyStuff.com

LockMyStuff.com is a web-based encryption tool for encrypting both text input and all types of files. This provides a free and easy method for securing sensitive data for storing or transmitting over insecure channels. You can choose to send the secret key via other means (phone, in person, crop circles, etc) and send the encrypted data via email. You can also store encrypted text on our server and just send a link to access it.

The website is powered by PHP and the MCrypt library. Text encryption uses the MCrypt PHP module, and file encryption uses the MCrypt command line interface. MCrypt provides all the encryption functionality of the application. The algorithm we use is Rijndael, which the encryption standard used by the U.S. Government for securing classified information.

All of the software used is open-source and freely available.

For more information on Mcrypt, visit: http://mcrypt.sourceforge.net LockMyStuff.com

FAQ

What is encryption?
Encryption is the process of altering data in such a way that it is unrecognizable and useless to anyone who does not know the secret key. The process is based on a set of mathematical rules called an algorithm, which bases the changes on the secret key. Encryption is used to secure everything from government secrets to your credit card number on Amazon. More info: http://en.wikipedia.org/wiki/Encryption

What type of encryption does this site use?
This site uses the Rijndael algorithm, which is part of the Advanced Encryption Standard (AES). This is a symmetric encryption, which means the same key is used for both encryption and decryption. It is the standard accepted by the U.S. Government to protect classified information. More info: http://en.wikipedia.org/wiki/Advanced_Encryption_Standard

How secure is this website?
Very secure. This website uses a number of security precautions to protect your sensitive data. First, we employ SSL to protect the data while it is sent between your browser and the web server. SSL (Secure Socket Layer) is a standard method for both encrypting transmissions and verifying the identity of the website. Using SSL, you can be sure the data was sent to the intended place and that nobody can read it as it is sent across the Web. Second, the site never stores the plaintext (unencrypted data) or the secret key under any circumstances. Only the encrypted data is stored in the database when you choose the Encrypt and Store option. Third, caching is disabled on the encryption pages and set the expire in the past. This prevents browsers and proxies from caching pages which may contain sensitive data. Even if the browser ignores the Cache-Control header, the page will be marked as expired since 1991 causing it to be removed. For file encryption, temporary files are always immediately destroyed using a 3-pass shredding technique that overrides the data on the disk with random garbage before the file is deleted. This makes it impossible to recover the data once it is removed.

How much does this service cost to use?
It's free, of course! However, donations are always welcome to help pay for the costs of running this site. If you find this service useful, consider donating via PayPal by clicking the Donate button below.

I found a bug, how do I report it? You can report bugs by emailing