LockBytes Download

Windows security software

Your files.
Encrypted.
Physically protected.

LockBytes combines AES-256-GCM file encryption with a registered USB security layer, keeping normal vault operations on your own Windows device.

Download for Windows See the protection model

Windows 10 / 11 Local-first by design

AES-256-GCM Authenticated encryption
USB-BOUND Physical access layer
LOCAL-FIRST No LockBytes file server
RECOVERY READY Optional Google Drive layer

THE SECURITY PROBLEM

A password is a gate.
LockBytes adds a key.

A protected file should not become readable simply because someone reaches your computer. LockBytes separates the protection model into layers: encrypted data, vault credentials, and the presence of a registered USB device.

It is a Windows desktop vault, not cloud storage. Your files stay local during normal encryption and decryption.

HOW LOCKBYTES WORKS

From an ordinary file to a layered vault.

Each step has a job. Encryption protects the data; the physical layer helps control when the vault can be opened.

01 ▤ Your file Selected locally
02 ✦ Encryption AES-256-GCM
03 ▰ Encrypted vault Authenticated data
04 ▣ USB security layer Registered presence

THE DIFFERENCE

Your encryption key is not only an idea.

LockBytes uses a registered USB device as part of the vault protection process. The USB is a security layer with an identity and vault metadata, not just a place to put files.

01

Register Pair a USB device with your LockBytes vault.

02

Detect The application checks for the registered device when access is needed.

03

Unlock Physical possession works alongside the required credentials.

THE ENCRYPTION ENGINE

Strong encryption, explained plainly.

LockBytes uses AES-256-GCM authenticated encryption to protect encrypted file data and help detect unauthorized modification.

Large files are processed in chunks, so the application does not need to load an entire file into memory at once. Passwords, keys, and vault metadata remain part of the local protection model.

LOCKBYTES / ENCRYPTION PROTECTED
INPUT YOUR FILE
CIPHER AES-256-GCM
OUTPUT ENCRYPTED VAULT DATA
AUTHENTICATED DATA ✓

RECOVERY PROTECTION

Physical protection guards access.
Recovery protection guards against loss.

If your registered USB is lost, damaged, or unavailable, LockBytes can use your own Google Drive account as a recovery mechanism.

Google Drive is not needed for normal encryption or decryption. It is a separate, user-controlled recovery layer.

Read how Google data is handled
▣ USB VAULT Physical layer
G GOOGLE DRIVE LOCKBYTES_RECOVERY
◆ MULTI-LAYER PROTECTION Encrypted recovery data

SECURITY ARCHITECTURE

A vault built from distinct layers.

The complete model, from credentials to protected files.

01 Vault password Your secret input
02 Protected key material Stored with vault metadata
03 Registered USB layer Physical presence and identity
04 AES-256-GCM vault Encrypted, authenticated files

CAPABILITIES

Everything has a place in the model.

Practical controls for protecting files on a Windows computer.

01 / CORE

AES-256-GCM encryption

Authenticated encryption for protected file data, with modification detection.

02 / ACCESS

Registered USB vault

USB registration, identity, metadata, presence detection, and physical access control.

03 / PRIVACY

Local-first operation

Normal encryption and decryption happen on your device without a LockBytes file server.

04 / SCALE

Chunk-based processing

Large files can be handled without loading the entire file into memory at once.

05 / RECOVERY

Google Drive recovery

Your own account, the Drive API, and a dedicated LOCKBYTES_RECOVERY location for encrypted recovery data.

06 / CONTROL

Application and vault credentials

Separate credentials and local security material keep access under the user's control.

CLEAR BOUNDARIES

Security that tells you what it does.

LockBytes does not promise impossible things. It provides a local encryption and access model, while you remain responsible for credentials, USB devices, recovery data, and backups.

Core file operations Local
Internet for normal encryption Not required
Google Drive Optional recovery
LockBytes central file server None

MADE FOR

People who want their sensitive files close, controlled, and harder to casually access.

01 Personal documents, financial records, and identity files

02 Photos, videos, and creative work that should stay private

03 Anyone who wants a physical security layer beyond a password

SUPPORT THE PROJECT

Privacy tools matter more when they keep getting better.

Sensitive files, account takeovers, and data leaks are part of everyday life now. LockBytes gives Windows users a practical local-first way to add encryption and a physical security layer to the files they care about.

Your support helps keep development, documentation, recovery work, and future security improvements moving forward.

01
Use LockBytes Protect your important files with the current release.
02
Support development Help make independent privacy software more capable and accessible.
Support LockBytes

GET STARTED

Put a physical layer between your files and access.

Download LockBytes for Windows and build your vault around the protection model.

Download LockBytes