Frequently asked questions
The questions people ask most often. If something is missing, write to us at the address in the legal notice.
Are my files uploaded?
No. Encryption runs in your browser. The file you protect is not sent to a server. You can verify this yourself in the network tab of your developer tools.
Can Loclavis see my password?
No. The password is only processed in the browser and is neither transmitted nor stored. There is also no recovery: if you lose it, nobody can open the file, including us.
What happens if I forget the password?
The file stays encrypted. There is no back door and no emergency key. That is exactly what makes the encryption effective. So note the password down safely, separate from the file.
Which file types are supported?
All of them. Loclavis works at the byte level and knows no format boundaries. PDF takes a special route, because a directly openable password PDF can be produced from it.
What is the difference between a PDF and a protected file?
A password protected PDF opens directly in the recipient's PDF reader. A protected file is what every other file type becomes, and it is reopened with Loclavis. Technically it carries the .safe extension.
Do I need an account?
No. Loclavis has no user accounts, no sign up and no customer database. Plus works without an account too, through a key you receive after purchase.
What does Loclavis cost?
Using it is free, with 10 protect operations per calendar month. Plus costs 5.99 euro per year and lifts that limit, plus several files, folders and additional generator options. Decryption is always free.
Is the encryption weaker on the free tier?
No. Free and Plus use the same scheme with the same parameters. Plus sells convenience and unlimited use, not better security.
How is the monthly allowance counted?
Locally in your browser. There is no server side count, no IP analysis and no device recognition. Clearing your browser data resets the counter. We accept that, because the alternative would mean collecting data about you.
Does Loclavis work offline?
Encrypting and decrypting need no connection once the page has loaded. An active Plus stays valid for up to 14 days without a connection, after which the subscription status is checked again.
Which browsers are supported?
Current versions of Chrome, Edge, Firefox and Safari. In Chrome and Edge you can pick the save location directly, in other browsers the result arrives as an ordinary download.
How large can a file be?
Single files are processed in sections and are therefore not artificially capped. The real limit comes from your browser and your memory. A folder container holds up to 65,535 files and just under 4 GB.
Which encryption is used?
AES-256-GCM for the contents, Argon2id to derive a key from your password, and HKDF-SHA-256 to separate the individual keys. The password PDF uses AES-256 as defined by the PDF standard.
Has Loclavis been externally audited or certified?
No. There is no seal and no external certification. What the application does is described on the security page, including its limits.
What does Loclavis store in my browser?
Three things: your theme choice, the counter of this month's protect operations and, if you have one, your Plus key with the result of the last check. No files, no passwords, no keys from documents.